Security and privacy
- Deleted or privatized photos are purged from Cloudflare's edge reliably, and cached copies expire within a day even if a purge fails.
- Private album names and photo counts no longer reach anonymous visitors.
- Sign-in is rate limited, error responses no longer reveal internals, and a cross-site write check protects the admin API.
- Clearing a photo's location also removes the coordinates from the stored original. Originals are otherwise never modified.
Performance and reliability
- Album, people, map, popular and gallery views are much cheaper: batched queries, new indexes and a maintained per-photo view count.
- Bulk actions run as one transaction, about 20–40× faster on 1,000 photos.
- Image processing uses 5–8× less memory and is about 3× faster.
- Uploads that fail part-way no longer leave orphaned files, and graceful shutdown lets in-flight uploads finish.
Fixes
- Photos from cameras that write one malformed EXIF tag (BlackBerry 9630s) keep their camera and GPS metadata.
- Searches typed while results were loading no longer show stale results.
- Bulk selections no longer carry over between pages.