Route plugin settings through the plugin’s authorized settings controller.
Fixed
Fixed a high-severity access control vulnerability.
3.0.10 2026-09-23
Fixed
Fix saving one settings page resetting settings on the other pages. (#84).
3.0.9 2026-09-14
Changed
Updated documentation for clearer, more consistent guidance.
3.0.8 2026-09-13
Changed
Normalize plugin settings.
3.0.7 2026-08-29
Added
Add cookieDuration setting to control how long a visitor stays logged in for before being asked for the password again. Previously hard-coded to one hour.
Fixed
Fix enabled callback functions in config files no longer working after environment variable support was added in 3.0.6. (#83).
3.0.6 2026-06-05
Added
Add support for environment variables in password and enabled settings, including Control Panel autosuggestions.
Fixed
Fix password comparison timing vulnerability.
3.0.5 2025-11-29
Changed
Ensure rendering templates set a no-cache header for Craft Cloud.
3.0.3 2025-05-01
Fixed
Fix normalization of multi-line settings like URLs and IPs.
3.0.2 2025-02-05
Fixed
Fix layout in Craft 5.6 and match new front-end login theme.
3.0.1 2024-07-21
Added
Allow enabled to be set using a callback function in config files.
Changed
Update English translations.
Fixed
Fix multi-site protected/unprotected URLs not being honoured.
Fix an error when trying to determine multi-site plugin settings for installs where no primary site exists yet.