Fixed a problem with API hooks written using WebMacros where they were not always being called correctly.

Fixed a problem with batch editing of the user database when adding already-existing users to a group.

Fixed the #DirectoryMap WebMacro which showed the wrong URL when used under a secure connection.

Loading and saving PowerWeb configuration files is now substantially faster.

PowerWeb is now also available under Microsoft Windows 95.

Added multiple user mail realms, so each virtual host can have its own set of users, each with its own set of mailboxes. The old method of specifying sub-directories for each SMTP and POP3 host has now been streamlined into a single page accessed from the global mail settings page. The new host mapping page is extended to allow specifying a realm for each virtual host.

Added the ability to specify a home directory for each user individually. Setting the directory to "none" disables home directory facilities for that user. These home directories are applicable to both HTTP and FTP.

Added the ability to specify directory size limits for FTP uploads for each user individually.

Added directory size limits for FTP uploads for any specified resource or template, regardless of whether the file is being uploaded into a user directory. Set the limit by choosing the "Document Settings" for the resource or template.

A new #comment WebMacro allows you to include private comments into your HTML which are not sent to the client.

Fixed a problem with the PowerWeb NT installation where the install server did not always quit and launch the real PowerWeb server after installation was complete.

Fixed a problem with the PowerWeb NT version which did not always use the fully qualified host name of the server.

Extended SMTP to allow mail addressed to a local user to be automatically redirected to another user at another host. To make use of this, you add a new user to your mail realm whose name is the full e-mail address of the new recipient, and whose alias is the original user name at your host. You do not have to define a password, as this user will never have a mailbox, the user name is simply there to provide mail redirection.

For example, to redirect mail addressed to "help" to "helpline@xyzinfo.com", you would create a new user named "helpline@xyzinfo.com" with an alias of "help".

Extended SMTP to handle mail recipient addresses which don't specify a host name. This previously only worked if the name wasn't enclosed in angle brackets "<>".

Each Resource or Template is independent in terms of SSL version number, whether Client Certificate Authentication is required, which Certificate Authorities to allow, and whether to use the Common Name within the Certificate as the user name for access control purposes.

This high level of customisability allows for heterogeneous sites, such as those hosting multiple virtual domains.

It also means that you can use SSL security throughout your site, while only requiring Client Certificates for certain high-security or subscription Resources.

Database passwords are now encrypted in the configuration file and are never transmitted in the clear to your browser, even if you are not running a secure browser.

We suggest that you perform all remote administration using a secure browser if you have any security concerns regarding your server setup parameters. This method also ensures that your admin user name and password are never transmitted in the clear.

The #fetch WebMacro has been improved to include the ability to POST form data to another server and fetch its response.

Also: earlier releases of sendmail which were not part of the official distribution will now work with the new PowerWeb version (just in case you have an old sendmail on your path, in which case you should remove that old copy anyhow!).

Improved the SENDMAIL client program to handle multiple "To:", "Cc:" and "BCc:" specifications within mail notes. The program is now included as part of the standard PowerWeb package and is stored in the system/bin directory.

Improved handling of inherited files for long-lived CGI processes, which could cause some system log files to be temporarily inaccessable.

Ensured that Authentication WebHooks were being called even if the browser did not supply a user name. This was the behaviour prior to 4.01r1 and the old policy has now been re-instated.

Improved compatibility with MR2ICE mail reader for POP3 progress reporting.

Fixed a FTP access control problem when a directory Alias points to a directory which has no associated Resource, in which case the server was simply returning no data instead of replying with an error response.

Modified the behaviour of the #if WebMacro within an embedded script so that it complies with the '@variable_name' shorthand notation.

Fixed a problem with client-side JavaScript embedded in Web pages.

The default setup options will work "out of the box", providing excellent throughput with session caching and keep-alive connections. Once a connection has been established, there is no noticeable performance degradation perceived by the client, compared to an unencrypted non-secure HTTP link.

Load the Admin page and check out the Security Administration links.

The SUBMIT client program has been enhanced to handle HTTPS client connections to secure SSL 3.0 servers.

The User Editor now supports adding users to a group with the batch file mechanism. To add all the users specified in a file to a group, simply fill in the realm and group names and the filename, and click on the "Add" button.

Two new batch files have been added which perform similar functions: addug.cmd and addugs.cmd which add a single user or a batch of users to a group respectively.

There is a new WebMacro named #split which splits a WebObject variable into components using a regular expression. This is useful for form validity checks within HTML without having to use an external language.

Removed spurious extra client authentication requests that sometimes occurred when moving between protected and non-protected regions of the server's document space.

Audit, referer and user-agent logs now have harmonised timestamps.