dbFront Releases

Big Ideas ComputingDatabase Administration Tools
Version v1.4.x (Feb 19, 2026)

Learn what's new across releases, with details of features, enhancements, and resolved issues.

Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
Dec
dbFront v1.4.2.0693Feb 19, 2026
Features
  • Attachments: You can now allow "Camera Only" uploads.
  • Database: You can now allow testing Database (procedure) security on LocalHost while SSO is enabled.
  • Expression: Added the [Can See Table] security expression (formerly Row Security).
  • Expression: Added {IsGroupMember(groupname)} for use in security expressions.
  • Form: Added the option to preload the top record.
  • Layout: Added table CSS higher to allow more layout control.
  • ProcedureAPI: "OpenTable" now allows record and field selection (e.g. Attachment).
  • ProcedureAPI: "SendEmail" now allows embedded tables {%Table_1%}, {%Table_2%}.
  • ProcedureAPI: You can now add the Debug Info to dialogs even if no form or buttons.
  • ProcedureAPI: You can now allow direct BLOB/VarBinary (e.g. PDF) results. (Display/Download).
  • ProcedureAPI: Added the option limit recursion to level explicitly permitted by 'MaxRecursion', Default = 0.
  • QuickSearch: Improved search performance and index use on all join types.
  • QuickSearch: Added the option to limit the columns searched.
  • QuickSearch: Reworked logic to improve performance and results on single field joins.
  • SSO: Added optional Login Redirect URL. Often required by a LoadBalancer or Proxy.
  • SSO: Made the use of the Microsoft Graph API optional with Azure.
  • Security: You can now add/enforce integrity checks on all scripts.
  • Security: You can now enforce use of secure cookies on secure connections.
  • Security: You can now lock down embedded scripts to prevent injection attacks.
  • SystemMonitor: Added Active Sessions list to the System Monitor.
  • SystemMonitor: Added Security Scan to the System Monitor to help secure local install.
  • WebRequest: On error, you can now parse response JSON to show error detail provided by some APIs.
Fixes
  • Buttons: Fixed data bound buttons visible on new records.
  • Database: Fixed incomplete AuthType dropdowns when SSO is enabled.
  • Fixed Regression from 1.4.2.0683 where joins to shared resources were reused incorrectly.
  • Logs: Removed errors due to anonymous public access.
  • Merged 1.4.1.1263 fixes (MySQL Dates + View Saving).
  • Messages: Cleaned up the formatting of some non-error messages.
  • MySQL: Force "ConvertZeroDateTime=True" to correct datetime conversion issues.
  • Navigation: Fixed issue where the full bookmarked record would not load after refresh.
  • ProcedureAPI: Fixed duplicate content in Procedure Dialogs.
  • Public: Added headers needed for mobile devices.
  • SQLServer: Retrieve index columns in the correct order.
  • Security: A Reflected XSS fix.
  • Security: Check registry for disabled server protocols.
  • Security: Fixed issues resulting from page security updates in 1.4.2.
  • Security: Replaced last eval() with a coded calculate().
  • Security: Use a static copy of public_suffix_list.dat to avoid unexpected network requests.
  • SecurityScan: Added CVSS score where applicable.
  • SecurityScan: Temporarily removed SSL Cookie check.
  • Views: Fixed issue where view config was lost after adding or removing a view.
  • WebRequest: Fixed button visible with unmet bindings in Header or Body.