Roundcube Webmail 1.7.0 Brings Faster Performance and Stricter Security to Self-Hosted Email
The latest stable release of Roundcube Webmail 1.7.0 finally ships after nearly four years in development, bringing mandatory security hardening, modern PHP support, and a few features that actually matter for daily email management. Administrators running self-hosted mail servers will need to adjust their directory structures and drop legacy database drivers before upgrading. This update removes decades of accumulated technical debt while adding markdown composition and smarter search syntax that saves time during heavy inbox sorting.
Mandatory public_html structure changes how files are served
The new release forces all installations to use a public_html directory as the only web-accessible entry point. This change blocks direct access to configuration files and plugin directories that used to sit in the root folder. Servers now route static assets through a single static.php handler, which cuts down on misconfigured virtual hosts and stops accidental exposure of sensitive settings. Administrators who skipped this step during earlier betas will need to move their webroot contents into public_html before the upgrade script runs successfully.
PHP 8.1 becomes the new baseline while legacy drivers disappear
Support for anything older than PHP 8.1 has been completely removed, which means hosting environments running outdated software stacks will fail immediately upon installation. The update also drops Internet Explorer compatibility, removes MS SQL and Oracle database support, and eliminates the insecure virtualmin password driver. These removals clean up thousands of lines of dead code that slowed down routine operations. A real-world example shows how many small business mail servers still cling to PHP 7.4 or older because of legacy plugin dependencies, so upgrading the server environment first prevents broken authentication loops after the switch.
Markdown rendering and smarter search tools replace clunky formatting
The new markdown support for composing and viewing messages removes the need for manual HTML editing when drafting plain text emails. A quick actions mouse-over menu now sits directly on the message list, allowing users to archive, delete, or flag items without opening each thread individually. Advanced mail search syntax also gets a major overhaul, letting administrators build complex queries with boolean operators and date ranges that actually work across large folders. These additions cut down on repetitive clicks and reduce the frustration of hunting through untagged conversations.
Roundcube Webmail 1.7.0 upgrade steps require careful planning and immediate backups
Running the upgrade script without a full database dump will likely leave configuration files pointing to removed cache drivers or outdated session properties. The smtp_log option now defaults to false, which stops massive log files from filling up disk space on busy mail servers. Administrators should replace any references to contact_search_name with contactlist_name_template before applying the patch, since the old setting triggers fatal errors during initialization. Testing the migration in a staging environment first prevents broken OAuth2 flows and OIDC logout failures that commonly appear after switching to the new discovery endpoints.
h4: Long term support shifts while older branches get retired
The 1.6.x branch enters low maintenance mode, meaning only critical security patches will arrive moving forward. The 1.5.x series receives no further updates and should be decommissioned immediately if still in production. Recent release candidates already fixed timezone offsets in mbox exports and allowed CIDR subnets for proxy whitelists, so the final build includes those stability improvements without extra configuration steps. Backing up user preferences and custom plugins before touching the main installation keeps daily operations running smoothly during the transition.
Release Roundcube Webmail 1.7.0
This is the stable release of the next major version 1.7 of Roundcube Webmail.
Keep an eye on plugin compatibility lists before pushing this to production servers. The new structure pays off quickly once the directory permissions settle, and the markdown tools save enough clicks to justify the migration hassle. Happy mail server maintenance.
