Natora-Core: what's new

Natora-Core is the common foundation of several websites: member sign-in, pages, menus, media library, administration, shop and optional modules. This page summarizes, in plain language, what changes in each version. Latest published version: 1.11.0 (10 October 2026).

Coming next

What is already done and will be published with the next version.

What's new

• In administration forms, you can pick an image from the media library: a preview is shown, with a "Choose an image" button and a button to remove it.
• Media library: several checked items can be deleted at once, after a confirmation. Colors are softer and the pagination is centered.
• User administration: a "Delete permanently" action appears next to "Delete". The latter still anonymizes the account; the new one erases the account and its personal data.
• The address of a page (its "slug") now fills in by itself from the title when you create an item; a button lets you edit it afterwards.
• In lists that can be reordered by drag and drop, the drag handles only show while manual order is active.
• A link to the contact form can pre-fill the subject and the message; the visitor reads and sends it themselves.
• A site can choose not to show any user menu (nor a "Sign in" link) to visitors. The sign-in page stays directly reachable.
• Profile, Settings tab: the newsletter subscription becomes a switch, and every setting has the same frame.
• "Clear cache" buttons show a loading indicator while the cache is being cleared.
• For hosts: an option keeps the database connection open between two pages, saving 10 to 15 ms per page on a suitable server.

Fixes

• Deleting an account (from administration or from one's own profile) caused an error: this is fixed.
• Plain-text emails arrived empty, and an apostrophe showed up as ' in them.
• Page addresses generated from an accented title are the same on Windows and Linux ("Poésie" gives "poesie").
• On mobile, administration tables scroll horizontally: their last columns were unreachable.
• Updating a module no longer recreates a menu the site already has.
• Switches display correctly on public pages (they looked like a plain checkbox).
• In case of a serious display problem, the original error message is now visible in development mode, instead of a blank page.
• The "Save" buttons of the profile and of the contact form all use the same green, and the "Actions" column title is centered.

Version 1.11.0

10 October 2026

Automatic return to the requested page after sign-in, and a more practical administration.

What's new

• After signing in, you come back to exactly the page you asked for, filters and page number included. This memory is dropped after 30 minutes.
• A visitor who opens a restricted page is sent to the sign-in page, instead of seeing a plain refusal.
• Administration: publication switches act immediately, show the server's message and snap back if the action is refused. "Draft / Published" badges update without reloading the page.
• Administration: several rows of a list can be checked ("check all", counter, action bar) to act on the whole selection.
• Menus: when a module is updated, its new menu entries are added without touching what you customized (labels, icons, order, visibility).
• Pages: footer links are managed like a menu (Administration, Menus). A page with no translation in the displayed language can be deleted in all languages at once.
• The sitemap (useful for search engines) now includes the home page.

Improvements and fixes

• Google Analytics only loads after the visitor agrees in the cookie banner, and its cookies last 13 months at most, as recommended by the French data protection authority (CNIL).
• Search engine optimization: the "official" address of a page includes its language (for example /en/…).
• Tables in pages are readable by default (full width, separator lines, colored header).
• Deleting a translation brings you back to the page list, in the same language, instead of an empty page.
• The language selector no longer shows "EN" instead of the language name after a change.
• Information messages keep their translation even when the action redirects to another module's page.
• Permissions: the message of the "Clean up" button now shows the number and names of the permissions concerned.

Version 1.10.0

3 October 2026

A reusable rich-text editor and better handling of the pages shipped with a site.

What's new

• Rich-text editor: bold, italic, underline, lists, emoticons and a character counter. It can be used in any form.
• Pages: the pages shipped with a site are imported and published at installation. "Synchronize files" only imports the missing translations and no longer overwrites work already done.
• The public site only shows published, visible translations.
• Modules: the list and the catalog tell core modules, shared modules and site modules apart.
• Menus: the entries a module adds can have a translated label, and are placed under the module's main entry.
• Profile: modules can add their own blocks under the Profile tab form.

Improvements and fixes

• Media library: the texts of the explorer ("Folders", "All media", etc.) are translated.
• Compatibility with PHP 8.5: no more deprecation warnings.
• Abbreviated months and days, as well as the words "months" and "years" in the plural, are translated in all five languages.

Version 1.9.0

1 October 2026

The media library becomes a file explorer.

What's new

• Explorer-style media library: you browse folders, drag a media item into a folder, and if several items are checked they all follow.
• Folder actions are right in the explorer. Filing a media item never changes its public address.
• Core modules now have a version number and are updated like the other modules. The catalog shows the installed version and the available one.

Versions 1.8.0 to 1.8.6

27 to 30 September 2026

Installing a site from the browser, an installable app, and folders in the media library.

What's new

• Web installer: a new site is installed from the browser, step by step (installation key, server checks, site, administrator, emails, summary). It removes itself at the end, and a site that is already installed ignores it.
• Installable app (PWA): a site can be installed on a phone or a computer, with its icons and an "Install the app" button.
• Media library: folders (up to three levels) and a folder filter. Files and their addresses never change when you file them.
• The home page shows the site's "home" page, and the addresses of the legal pages (terms, cookies, legal notice) are configurable.
• Module names and descriptions are translated in the administration language.
• The Natora-Core version can be shown in the footer.
• Permissions: "Clean up" also removes permissions that are no longer needed, and shows the result.

Fixes

• Signing in and out could fail with "Invalid or expired token" right after installation.
• Maintenance mode also blocked module files (styles, scripts).
• Contact form: a single confirmation message after sending.
• Footer links to the legal pages pointed to wrong addresses.
• Google Analytics 4 is correctly allowed by the site's security policy.

Version 1.7.0

26 September 2026

Modules become shareable between several sites.

What's new

• Shared modules: modules common to several sites (shop, blog, members area, etc.) live in a single repository. Each site chooses the ones it enables.
• Module catalog (Administration, Modules) with search and group filter. Installing a module also installs its administration module.
• Modules have a version: you can see what is installed and what can be updated.
• Modules can add content to pages (for example a block on the sign-in page) without changing the site.
• Sign-in with Google becomes a separate module (GoogleAuth), to install on sites that use it.
• Creating a new site: the starting roles and an administration menu are prepared automatically.
• Database checking tools: they compare a site's database with the reference structure and can align it.

Improvements and fixes

• A "Module not installed" page clearly explains the problem instead of showing a technical error.
• Permissions only concern active modules.
• Confirmation messages now survive all redirections.
• User administration: on one's own account, the Role and Status fields are greyed out with an explanation (they looked editable although the server ignored them), and several missing success messages are added.

Versions 1.6.0 to 1.6.2

19 to 23 September 2026

An administration dashboard and more practical management screens.

What's new

• Administration dashboard: number of users, installed version, state of the folders, and targeted clearing of the template or menu cache.
• Users: sort by column, pagination, dates in day/month/year format.
• Pages: the name leads to the public page, column sorting, instant search, download of the page files.
• Media library: format filter, confirmation before deleting, "Add a media" button, faster list view.
• Menus: a "Name" column, "Rename" instead of "Edit", a more visible cache-clearing button.
• A reusable "please wait" screen for modules, and horizontal scrolling of tables on mobile.
• Disabling a module also disables its permissions.

Improvements and fixes

• Several security hardenings (media downloads, authorization checks).
• Password reset: the show/hide buttons act on the right field, and the password rules are the same everywhere.
• Mailing lists leave the core and become a shared module (1.6.2).

Versions 1.5.0 to 1.5.5

10 to 12 September 2026

Sign-in with Google, an alternative captcha and a major security reinforcement.

What's new

• Sign-in with a Google account, in addition to the classic sign-in.
• Cloudflare Turnstile can replace the original captcha.
• Pages: optional PayPal payment button.
• A media item can be downloaded under its original file name.
• Menus: an icon per item and a button to clear the menu cache.
• Permissions: per-user settings (inherit, grant, deny) and a "Purge" action to remove unnecessary permissions.

Security and fixes

• Following a security audit: protection against gaining rights one should not have, sessions and reset links tied to the password, stricter filtering of page content, among others.
• Scheduled publication of pages works again.
• The mobile administration menu is no longer empty, and only super administrators can delete a menu.
• Captcha error messages are translated at sign-up.

Versions 1.4.0 to 1.4.3

27 July to 7 September 2026

Search engine optimization, profiles and more reliable email sending.

What's new

• Search engine optimization (SEO): automatic titles and descriptions, canonical address, previews for social networks, links between language versions.
• Member profile: tabs, wider layout adapted to mobile.
• Community modules can limit interactions between members (for example blocking).
• More reliable email sending: sends that got stuck are resumed automatically.

Fixes

• Pages whose address starts with a digit ("1st-to-3rd") work.
• Menu language: falling back to another language is handled correctly, without duplicate notices.
• Password reset and account activation emails: layout and translations fixed.

Version 1.3.0

20 July 2026

Mailing lists grow richer.

• Email campaigns with templates, de-duplicated recipients and exclusion of blacklisted addresses.
• Public pages to subscribe, confirm one's address, manage preferences and unsubscribe.
• Administration interface for lists, subscribers, templates and campaigns.

Versions 1.2.0 to 1.2.3

17 to 19 July 2026

Centralized email sending and first mailing lists.

• All the site's emails go through a single system, in HTML and plain-text versions.
• Sending queue: several sends in parallel, automatic retries on failure.
• Mailing lists with double confirmation of subscription ("double opt-in").
• Performance analysis tool for developers (disabled by default).

Versions 1.1.0 to 1.1.2

8 June to 17 July 2026

More autonomous modules and more reliable forms.

• Each module can have its own pages, translations and settings, which the site can customize.
• Forms return more precise validation messages, and redirections keep their message.
• Menus: the order of items is finally stable when several items share the same position (1.1.2).
• Statistics: counters of visitors online and of the day.

Versions 1.0.0 to 1.0.4

6 January to 20 May 2026

The first stable foundation.

• Addresses per language (/fr, /en), sign-in, sign-out, "remember me", account activation and password reset.
• Protected contact form and visit statistics subject to consent.
• A check address (/health) makes it possible to verify that the site responds (1.0.1).
• Hardened session cookies and protection against forged requests in the administration (1.0.3).