Backup to FTP

Backup copies can be exported via SFTP (over SSH): in settings, select the SFTP protocol, specify the host, port (usually 22), login, and password. The SSH server key is confirmed once: click "Test Connection", compare the key fingerprint with the server, then click "Trust this key". Until the key is confirmed, the module does not send either the password or backup copies to the server;

If FTPS is selected in settings but an SSH server responds on the specified port, the connection check will suggest selecting SFTP.

The module settings page now works on sites updated to 1.4.6 via the Marketplace: the update restores its handlers (saving, connection check, log);

The start time for the export is set in the settings, and there is a button to "Run export now"; the page displays the last run, the last exported backup, and backups on FTP;

If the export fails, an alert appears in the administrator panel, and the log records the run summary with the number of errors;

A backup that Bitrix is still writing is exported only after the writing is complete; two agent runs do not export simultaneously; after a failed attempt, the export is retried with a pause;

Both uncompressed (.tar) and encrypted (.enc) backups are exported;

The FTPS server certificate is always checked. If certificate checking was disabled in a previous version, the module will enable it automatically once the certificate passes validation; a self-signed certificate must be confirmed once in the module settings ("Test connection", then "Trust this certificate") — until then, the export does not run, and an alert appears in the administrator panel;

FTP settings are validated upon saving; the page warns if the export agent is not running, if site agents run on hits, or if the log is not being written; the log shows which backups have been deleted from the site;

When removing the module, its settings can be preserved.

The self-signed certificate of the FTPS server is now verified by its key: the connection check displays the certificate and prompts to trust it; after that, the module connects only to the server with that key. Disabling certificate verification is no longer required; if it was disabled in the previous version, the export continues to work, and the module log reminds to confirm the certificate.

The FTP password is stored in the site database encrypted with the site's key (crypto_key from bitrix/.settings.php); previously saved passwords are automatically re-encrypted.

The module log is not accessible via a direct link from a browser.

Fixed: the agent previously re-uploaded all backups to FTP on every launch; now it uploads only new and modified ones;

The most recent copies (by creation time) are stored on FTP; their number is set in settings; older copies are not uploaded;

Reliability: a copy appears on FTP under its own name only when complete; if an upload fails, the previous copy on FTP is preserved, and the interrupted upload is resumed on the next launch;

Deletion of a copy from the site after upload occurs only after its size on FTP is verified;

Fixed: uploading to FTP servers with a limit on the number of connections from a single address; the module does not keep unnecessary connections open;

Support for FTP servers without the MLSD command (e.g., vsftpd);

Connection check to a server with data transfer ports closed completes faster;

Clear error message when an FTP server fails; if temporary files could not be deleted from FTP after an upload failure, this is recorded in the log;

Fixed errors in processing module settings and clearing the module log.

Security: module settings and the download log are accessible only to the site administrator;

Security: module settings on the settings page are escaped;

Security: the FTP password is no longer transmitted to the settings page — the password field is empty, the saved password remains until a new one is entered; when changing the server, login, or disabling certificate verification, the password must be entered again.

Security: saving settings, checking the FTP connection, and working with the log are available only to an authorized user with module permissions and with CSRF protection;

Security: backups are transferred via FTPS using PHP cURL with server certificate verification. If the FTP server uses a self-signed certificate, after the update, clear the "Verify FTPS server certificate" checkbox in settings; the PHP cURL extension is required;

Security: "Check connection" operates over the same secure channel as the upload; data in the module log is escaped; the FTP password is not sent to the settings page without write permission;

Fixed: parts of a multi-volume backup were uploaded to FTP with the content of the first part;

Unused code that was mistakenly included in the module has been removed (classes/general/EventHandler.php);