MainWP Dashboard 6.4

Important: MainWP Dashboard now requires PHP 8.3 or newer.

Important: Built-In Backups requires the matching MainWP Child release. File backups and restores are currently unavailable on hosting configurations where wp-content is outside the WordPress core folder; database-only backups and restores remain supported.

Added: Built-In Backups (beta) - back up and restore WordPress sites directly from MainWP without an additional backup plugin. Schedule full, database-only, files-only, or incremental backups; store copies locally or offsite using S3-compatible storage, Google Cloud Storage, Dropbox, or SFTP; and restore snapshots with optional safety backups and rollback. Includes encryption, flexible retention policies, backup health monitoring, and management through the Abilities API.

Fixed: Invalid site tag updates through the REST API could remove existing tag assignments.

Fixed: Invalid client-note values could overwrite existing notes instead of being rejected.

Fixed: Uptime Monitor settings now preserve disabled down confirmations and correctly clear repair attempts after a successful save.

Fixed: Advanced Settings now displays a validation message when the Child request timeout is invalid.

Fixed: Improved Add Site success notices and connection error messages.

Fixed: Improved handling of quotes, commas, backslashes, and failed-row retries in Users CSV imports.

Fixed: Connectivity charts now display accurate proportions for Connected, Disconnected, and Suspended sites.

Fixed: Resolved PHP compatibility warnings in REST settings handling.

Fixed: Sites filters and totals now refresh correctly when connection status changes after syncing or reconnecting.

Fixed: Preserved existing API Backups credentials when replacements cannot be saved, in both Settings and per-site settings.

Fixed: Prevented imported post images from overwriting existing files.

Fixed: Corrected site counts in multi-user mode.

Fixed: Corrected Updates pagination to prevent extra empty pages.

Fixed: Preserved the selected SSL version when adding sites through APIs and automation tools.

Fixed: Ensured APIs and automation tools respect the Ignore Translation Updates setting.

Fixed: Corrected bulk site reconnection, connection check results, and progress reporting for Dashboard tools.

Fixed: Removed an unnecessary delay after Add-on update checks.

Fixed: Prevented repeated scheduled site syncs after moving the Dashboard timezone backward.

Fixed: Restored bulk post and page management for Team Control staff with the required permissions.

Fixed: Kept site deletion details visible in Logs and Insights.

Fixed: Prevented generated credential key files from overwriting existing keys.

Updated: Strengthened Team Control permissions and site access enforcement across Dashboard actions, widgets, APIs, background tasks, Cost Tracker, and plugin and theme management.

Updated: Restricted legacy API-key creation and editing to unrestricted administrators.

Updated: Strengthened permissions for legacy REST API plugin and theme deletion, site reconnection, disconnection, and user session management.

Updated: Improved compatibility with restricted Team Control roles to prevent server errors.

Updated: Strengthened handling, storage, and protection of HTTP authentication details, extension license keys, and other credentials, including generated key files.

Updated: Strengthened protection of private site information in API responses, connection errors, and notification emails.

Updated: Improved security and validation of API requests, CSV imports, plugin details, Cost Tracker icons, and activity logs.

Updated: Imported user passwords are excluded from import logs and failed-row CSV downloads.

Updated: Improved handling of site names, messages, custom fields, and remote requests across the Dashboard.

Updated: Improved SSL certificate verification when adding and importing sites, connecting to Vultr, and communicating with licensing and download services.

Updated: Strengthened Add-on response validation and download security.

Updated: Added administrator-password support when connecting sites through WP-CLI, with verified HTTPS by default.

Updated: Site Hardening now checks PHP versions against supported branches and security releases using cached PHP.net data.

Updated: Server Information and Quick Setup now consistently display the PHP 8.3 requirement, replacing obsolete PHP upgrade notices.

Updated: Simplified the Quick Setup wizard for a faster, more streamlined setup experience.

Updated: Renamed the backup extensions navigation group to Backup Integrations.

Updated: Clarified Knowledge help text and standardized knowledge modal title capitalization.

Dev: Added the mainwp_get_sql_where_allow_access_sites hook for retrieving existing site-access query conditions.

Dev: Added the mainwp_developer_generate_tweaked_request_params hook for configuring outgoing request parameter mappings, with matching MainWP Child support.