Reproduction steps
- Update Chevereto from an earlier version to 4.4.1
- Upload an image using the API upload endpoint
- Use the returned url_delete value to delete the image
- Access the delete URL in the browser or via HTTP request
Unexpected result
Instead of deleting the image, the application throws a server error.
ErrorException
Undefined array key "delete_hash"
URI:
/image/7Ln4U/delete/dcfc544b4a2e27c13a0781057adedaa2faddcc87face5ad7
Method:
GET
Time:
2025-12-30T23:27:08+00:00
Backtrace:
------------------------------------------------------------
0 app/legacy/routes/image.php:85
1 app/src/Legacy/G/Handler.php:456
2 app/src/Legacy/G/Handler.php:180
3 app/legacy/load/web.php:903
4 app/legacy/entrypoints/index.php:45
5 index.php:12
------------------------------------------------------------
Additional context
- The issue occurs only when using the delete URL returned by the API upload endpoint
- After updating to version 4.4.1, the image_delete_hash value in the database also appears to have changed
- It looks like the delete route still expects the old structure or key name (delete_hash), which no longer matches the stored data