Version 2.3.2
October 24, 2026 - Links shared in chat apps and social posts show their preview image again when your Studio uses custom brand fonts.
- Your tagline now sits neatly under your logo. A short tagline is centred under it, and one written in capitals is spaced out to span the full width of the logo.
- Zooming is steadier: a capture no longer switches view as it finishes loading, Esc always takes you back to the view you zoomed from, and a capture that fails to load returns to a plain layout.
- Both editions, PHP and Cloudflare, get the same change. Updating is optional, and existing links keep working.
Version 2.3.1
October 24, 2026 - Image share pages can now be zoomed. A small bar offers Fit, Width and 100%; click the image to zoom in where you click and click again to step back, drag to move around, and use F, W, 1 and Esc on the keyboard. On a computer with a mouse, a magnifier shows the area under the pointer at full detail.
- Tall scrolling screenshots open fitted to the width of the window, so they are readable straight away instead of shrunk to fit the window height. Small images and videos look the same as before.
- Both editions, PHP and Cloudflare, get the same change. Updating is optional: nothing else changed, and existing links keep working.
Version 2.3.0
October 23, 2026 - A new Start Here page guides the whole setup. Design your branding with a live preview of your dashboard and share page, then choose how to put Studio online: no website yet, a business already on Cloudflare, ordinary web hosting, your AI coding assistant, or developer setup. Each route explains in plain words what happens and where your files are.
- New Cloudflare edition: the same Studio, with its dashboard, library, people and roles, branded share links and upload API, running as a Cloudflare Worker with R2 storage and a D1 database in your own Cloudflare account. Its address can be a workers.dev address or a new subdomain of a domain you manage in Cloudflare.
- The bundled deploy tool (cloudflare/deploy/cli.mjs, Node.js 20 or newer) shows its plan before it changes anything, adds only new resources, refuses Worker, bucket, database and DNS names that are already in use, removes only what it created, and can resume an interrupted setup.
- AI coding assistants can follow the new AGENTS.md to install either edition, asking before each change. The docs folder adds a plain-language setup guide, a Cloudflare technical brief for IT teams and a developer guide.
- A Cloudflare Studio accepts uploads of up to 25 MB per file from the current Maxisnap apps. The PHP edition’s application code is the same as 2.2.4 apart from its version number and one hint on the Settings page, so updating a PHP installation is optional.
Version 2.2.4
October 22, 2026 - Security release for the October 2026 PHP advisories CVE-2026-109618 and CVE-2026-109619. These flaws are in PHP itself and are reached before Studio code runs, so the fix is a patched PHP from your host: 8.2.35, 8.3.36, 8.4.27, 8.5.12 or newer, or a host build that includes the October 21, 2026 fix. PHP 8.1 and older receive no fix from the PHP project.
- If your web hosting runs an older PHP version, the dashboard shows the site owner a friendly tip to ask the hosting company for an update, with a Got it button to dismiss it. Hosts that add security fixes without changing the version number get a gentle note to check with the host instead. Visitors never see it, and nothing is blocked.
- The included .htaccess refuses multipart requests before PHP reads them, except capture and font uploads. On Apache mod_php, LiteSpeed and CloudLinux mod_lsapi it also turns off PHP upload-progress tracking and fatal-error backtraces and limits field nesting, files and multipart parts per request. Technical notes.txt lists the matching php.ini and PHP-FPM settings.
- Dashboard requests are checked for sign-in before their content is read. Oversized, deeply nested or malformed requests are refused, and bulk actions handle large selections in one pass.
- SVG logos are parsed without expanding XML entities. Logos that declare entities are refused with a message instead of being saved blank.
- Long media streams and viewer disconnects are handled without PHP timeout errors, responses no longer include the PHP version header, and storage errors return a clear message instead of a PHP error.
- Branding preview captions stay readable on their host page, and the first theme-toggle click switches the shown palette.
- Before updating, back up your installation and follow snaps/How to update.txt. Keep uploads, data, branding, your-settings.php, your-branding.php and your-fonts.php; replace only the listed application files.
Version 2.2.3
September 9, 2026 - The offline Start Here guide saves matching branding and fonts to the extracted snaps folder and a complete snaps.zip after you grant folder access. Browsers without folder access offer a ZIP download with instructions to replace the original snaps folder.
- Individual access codes with Admin, Manager, Member, Viewer and Upload-only roles. Members see only their own captures in the library; Viewer codes cannot upload, and Upload-only codes cannot sign in to the dashboard.
- Share pages, media and thumbnails check current permissions without keeping public copies in browser or CDN caches. Changing a code or capture password invalidates the earlier session or unlock grant. Clear existing host caches and sign in again after updating.
- Branded share pages use extensionless links; direct image and video links serve media bytes. Root and subfolder installs retain supported legacy routes.
- Uploads and edits report storage failures accurately. Incomplete deletions stay in the library for retry instead of reporting success. Damaged library data is preserved and reported.
- Image thumbnails use PHP GD when available and within the host memory budget; otherwise the library uses the original image. Video previews and duration badges are loaded by the browser, without a server video encoder. Large media streams leave dashboard navigation and other requests responsive.
- Live dashboard and share-page previews in both the offline guide and the dashboard Branding page, with six light/dark themes, real example captures, custom fonts, and an optional tagline. Saved branding and font changes update the installed dashboard and share pages immediately, including hosts using PHP OPcache.
- Setup protection, authenticated role and upload-limit checks, safer Apache routing, escaped HTML embeds, and improved theme contrast. The reproducible package includes only reviewed source files.
- Before updating, back up your installation and follow snaps/How to update.txt. Keep uploads, data, branding, your-settings.php, your-branding.php and your-fonts.php; replace only the listed application files.
Version 2.1.9
September 5, 2026 - Brand it before you upload — a visual Branding Studio is now built into the “Start Here” page. Set your logo, colours (light and dark), a call-to-action button and your share-link word with a live preview, then “Lock in my branding” writes it straight into the dashboard files.
- Your dashboard and every share link arrive already branded on first load — no in-dashboard setup step needed. Skip the studio and it ships as a clean, Maxisnap-branded dashboard.
- One branding source of truth — the dashboard reads branding/brand.json first, then the built-in editor’s file, then the Maxisnap default; the in-dashboard Branding editor still works for later tweaks.
- Drop-in for the app — the Maxisnap v2.5.0 desktop upload contract is unchanged; the Windows app detects this bundle automatically.
Version 2.1.8
September 5, 2026 - Complete dashboard rebuild — your self-hosted Studio is now a full app (Home overview, a searchable/sortable library, and Settings), not just a share page.
- Browser video previews with duration badges, hover playback and seeking through HTTP range requests; no server video encoder is required.
- A real library — live search; sort by newest, oldest, largest, smallest, most-viewed, or name; date-range and favourites filters; grid or list; multi-select with bulk download, favourite, and delete; pagination.
- Per-capture privacy — set any capture to Public, Team-only (opens only for a signed-in teammate), or Password, enforced on both the share page and the raw file so links can’t be guessed around.
- Editable everything — rename a capture’s title and even its share slug (the real link), add searchable tags, and see view and download counts, favourites, and who uploaded it.
- Light and dark mode — brand-driven, with a per-viewer toggle and light as the default.
- Branding editor built in — pick presets, colours, a logo, and a call-to-action with a live preview and server-side save; there’s no file to edit or paste.
- Guided first-run setup — a browser wizard checks your environment, generates your dashboard key, writes your settings, and signs you in.
- Hardened — magic-byte upload validation, password-attempt rate limiting, strict privacy on raw bytes, a site-wide content-security policy, and CSRF protection on every change.
- Drop-in for the app — works with the Maxisnap v2.5.0 desktop upload contract unchanged; the Windows app detects this bundle automatically.
Version 2.1.5
April 20, 2026 - First public Studio dashboard bundle, with an account dashboard, upload API, share pages, and a health endpoint.
- Compatible with the desktop-side bundle checker, including Settings update badges and changenotes links.
- Published as the stable “latest” dashboard bundle so future Studio updates can ship independently of the Windows app.
