AnQiCMS Help Document and User Guide
v3.6.6 was released on October 8, 2026, fixing two high-risk issues: SQL injection in list sorting parameters and the login credentials of site switching being forgeable. It is recommended to rotate the site switching key and change the administrator password to ensure system security.
v3.6.6 (Released on 2026-10-08) fixed two high-risk issues of SQL injection in list sorting parameters and forged login credentials during site switching, the official upgrade recommendation is to rotate the site signature key and change the administrator password. The order of the day is: backup stop writing, upgrade program, rotate signature key, change administrator password, clear session and log in again, and finally verify list sorting and site switching.
AnQiCMS v3.6.5 released on October 7, 2026, the core changes are that the MCP tool layer has been rebuilt based on the intent directory and supports round-by-round batch approval, while also adding email subscription, message list, attachment base64 upload, template backup table expansion and file search wildcard capabilities. This article interprets the meaning of the changes item by item according to the update records, and provides a checklist of actions before and after the upgrade.
AnQiCMS v3.6.6 (2026-10-08) fixes two high-risk issues: list sorting parameters can be injected into the query to form SQL injection, and the login credentials used for site switching may be forged. The official upgrade recommendation is to simultaneously rotate the site signature key and change the administrator password. This article explains why the upgrade only closes the entry and does not invalidate the credentials that have already been released, as well as why the steps of key rotation, password change, and backup should be completed in the same upgrade window.
v3.6.5 and v3.6.6 merge update instructions: MCP tool layer rebuilt according to intent directory and supports round-by-round batch approval, adds features such as email subscription, message list, and base64 attachment upload; fixes two high-risk security issues that can be injected into list sorting parameters and forged login credentials between sites, and fixes multiple issues such as incorrect deletion reports and silent data damage in documents. Please rotate TokenSecret and change the administrator password after the upgrade.
AnQiCMS was released on September 4, 2026, with a major update, adding AI visual template editor, MCP Server integration, reCAPTCHA captcha, automatic tags, template backup and replacement features, and optimizing AI assistant, translation search, JSON-LD, etc. At the same time, it fixed multiple bugs in AI TDK generation, writing count reset issues, and scheduler bugs.
Published on June 29, 2026 ✨ Added features: AI conversation system refactoring: multi-model switching (anqi-flash / anqi-pro / custom model), support for file attachment upload, AiSetting persistence of the last used model, refactoring of conversation session mechanism.AI Agent Intelligent Agent with scheduling tasks: Added AiAgent model (supporting Cron expressions, execution strategy, and number limits), AiAgentLog records execution status;Integrated robfig/cron scheduler, automatically loaded and scheduled Agent tasks at startup. Inbuilt 7 AI seed skills
Published on June 22, 2026 ⚡ Performance optimization 📦 Binary size reduced by 50%: By replacing the heavy SDK with native HTTP calls, the program size was greatly reduced (103 MB → 51 MB), reducing distribution and deployment costs.The support for multilingual and SEO multilingual top-level domains: Multilingual sites support using top-level domains as independent site domains. Sitemap optimization: Adjust the Sitemap generation logic to better meet Google's requirements for XML Sitemap format.Bug fix: Path traversal vulnerability fixed: Replaced black list with white list, enhanced template operation security. AI
Published on June 16, 2026 ✨ New feature 💬 AI Chat intelligent dialogue: Added AI Chat dialogue function, supporting intelligent Q&A and content creation based on large AI models, and integrating an independent dialogue interface on the back-end. 🔧 AI Tool Calling (Tool Calling): AI conversations support the complete tool calling chain, AI can independently call built-in tools to complete document management, setting modifications, data queries, and other operations. 📦 Built-in AI Toolset: Added 80+ AI tools, covering file operations, Shell commands, Web search/crawling, code intelligent analysis, and more, greatly expanding the AI capability boundary. 📄 AI
Published on May 22, 2026 ✨ New feature: Support for external image resources: Added support for adding external image resources, which can refer to external URL images as website resources, greatly enhancing the flexibility of image management. FAQPage structured data : archiveList tag added with ld='faqs' parameter, supports generating FAQPage structured data, enhancing SEO effect.⚡ Feature Optimization: The category links in the background document list are now generated correctly, improving the management operation experience.Cache key optimization: Fixed document, category, single page, tag detail page due to token containing -
