Changelog

Webmail over HTTPS for domains whose website is hosted elsewhere: when only mail and webmail.<domain> point at this server, webmail.<domain> can be ticked under Let's Encrypt on the website's SSL/TLS page (and free SSL adds it by itself); the webmail then uses any certificate of the subscription that covers it. Domains with mail also get webmail.<domain> offered for their own certificates.

SSL/TLS: mail (SMTP, IMAP, POP3) and FTPS present one certificate for the whole server. On a website's SSL/TLS page, Certificates of mail and FTP now lists only server pool certificates and explains this; choosing a website's own certificate gave an unclear error. Also includes 0.17.16: on Windows Server 2016 the installer installs .NET Framework 4.8.

Windows Server 2016: the installer now installs .NET Framework 4.8 from Microsoft (download signature checked) when the server still has 4.6.2, before adding IIS, so ASP.NET 4.8 sites run. Restart Windows when the installer asks, to finish it. No change for Windows Server 2019, 2022 and 2025.

Web application firewall no longer reads request bodies, so ASP.NET form posts (logins) arrive intact.

New service plans and subscriptions start with server and remote backup permissions off.

The browser tab shows the new crown icon everywhere: an ICO version next to the SVG (Safari and search results use it), and browsers no longer keep showing the cached old icon.

New StackRegent crown logo (panel, favicon, program and tray icons). Phones: the notifications list fits the screen and pages no longer scroll sideways. The light/dark switch works again and keeps its choice.

SQL Server: databases whose user only had an empty schema of its own (usual after Plesk migrations) now also get their client as owner, so they are listed in SQL Server Management Studio.

SQL Server: clients see only their own databases in SQL Server Management Studio (Database Servers > Hide other clients' databases, on by default for the local server). Database Servers shows when Security > Firewall limits a database port.

Databases: the SQL Server and MariaDB ports can be opened to everyone (IP Address Banning blocks password guessing); phone layout fixes for the menu drawer and notices.

Optimize Website tool (compression and browser caching) for customers; wider IIS compression types; SpamAssassin uses the server DNS Server when local recursion is on.

PHP functions that start programs or shells are switched off for websites by default (panel tools exempt); webmail no longer takes host names another site already uses.

SpamAssassin as an optional mail component (spamd on 127.0.0.1:783, daily rule updates, built-in filter as fallback); Microsoft Defender shown correctly in Services and set up with database exclusions on install.

Plesk application pool settings imported on migration; brute-force protection for SQL Server and MariaDB logins; Windows hardening on install and upgrade; custom RDP port kept open by the firewall; older .NET runtimes installable; restore checks; backup folder can be set.

StackRegent licences are now sold and checked at panel.stackregent.com, the StackRegent store. The panel asks the licence server that knows its key, so keys bought earlier at system.coreinto.com keep working without any change; updates are downloaded from the same server. License Information shows which server the licence is registered at. The one-command installer is published at https://panel.stackregent.com/get/stackregent.ps1.