AnQiCMS Help Document and User Guide
AnQiCMS v3.6.6 was released on October 8, 2026, addressing two high-risk issues: SQL injection in list sorting parameters, and the possibility of login credentials being forged when switching sites. The upgrade is not just a version change; the official recommendation is to also rotate the full-site request signature key and change the administrator password, as the second issue means that there is a possibility of existing credentials being misused, and the handling needs to cover the already exposed aspects.
AnQiCMS resolves the SQL injection issue in the list sorting parameter and the two high-risk issues where the login credentials of site switching can be forged in v3.6.6 (2026-10-08), and suggests that the site signature key and the administrator's password should be rotated during the upgrade, and the administrator's password should be changed. The upgrade window should be arranged during the off-peak hours: first, back up data and static files, stop writing after upgrading, and then verify the sorting parameters, site switching, and the exposed back-end surface one by one, and write the changes of the one-time ticket mechanism into the regression checklist.
AnQiCMS v3.6.6 was released on October 8, 2026, and fixed two high-risk issues, including SQL injection in list sorting parameters and site switching login credentials that can be forged. When upgrading, you need to rotate the site signature key and change the administrator password, and enhance security through a single ticket mechanism.
AnQiCMS v3.6.6 was released on October 8, 2026, fixing two high-risk issues such as SQL injection in list sorting parameters and the forgery of login credentials when switching sites. Upgrade suggestions include rotating the site signature key and changing the administrator password, and enabling one-time ticket mechanisms to prevent credential reuse.
Released on October 20, 2026 - Save settings. The biggest change in this version is the save setting. The backend settings page is divided into multiple tabs. When you change something in the 'Basic Settings' and click save, the program submits the entire page - but those tabs you haven't opened are empty, so the settings in 'SEO', 'Email', and 'Watermark' that you've never touched are cleared to default values.The entire process does not report an error, and the save prompts success as usual. Now it is changed to only save the items you have modified, and the ones not touched are kept as they are. The front-end also conveniently fixed another problem: when switching between tabs, the content filled halfway will not be lost.Involves the four pages of site settings, content settings, security settings, and contact information, as well as
Explain the two high-risk issues of SQL injection in the list sorting parameter and the site switching login credentials that can be forged in the CHANGELOG of version 3.6.6, and provide suggestions for token key rotation and administrator password modification operations after the upgrade.
Introducing AnQiCMS v3.6.3 version (released on 2026-09-04) with three new AI capabilities: Visual template editor, MCP Server support, reCAPTCHA captcha and AI automatic tagging, reducing the development threshold and improving content creation efficiency.
Detailed explanation of the AnQiCMS v3.6.5 version (released on 2026-10-07), which rebuilds the MCP tool layer based on the intent directory and supports round-by-round batch approval, as well as the newly added features such as email subscription, message list, and base64 upload for attachments.
AnQiCMS v3.6.5 was released on October 7, 2026, the MCP tool layer was rebuilt based on the intent directory and supports round-by-round batch approval. New features include email subscription, message list management, base64 attachment upload, template backup expansion, and file search wildcard functions. This article details the usage and configuration methods of each new feature.
v3.6.5 was released on October 7, 2026, adding five new features: email subscription, message list, base64 attachment upload, template backup table expansion, and wildcard file search, solving pain points such as user retention, content interaction, resource management, and search efficiency, providing a complete backend operation tool for small and medium-sized enterprise websites.
