TL;DR:
ImunifyAV may flag Sendy 7’s new File Manager as malware, but if the file matches the official Sendy package, it looks like a false positive and can be whitelisted.

Just posting this in case other Sendy users receive this warning from their hosting provider, or notice it themselves in WHM/ImunifyAV, and start searching for the signature online.

Detected file:
includes/filemanager/tinyfilemanager.php

Example full path:
/home/USER/public_html/includes/filemanager/tinyfilemanager.php

ImunifyAV signature:
SMW-BLKH-SA-CLOUDAV-php.bkdr.admin.tool.fm-NP1539-2,php.admin.tool.fm-NP439-1,php.admin.tool.fm-NP448-1,php.admin.tool.fm-NP773-2

From what we checked, this appears to be a false positive caused by Sendy 7’s new File Manager feature, not an infected Sendy package.

Why it makes sense:

• Sendy 7 introduced the new File Manager.
• The detected file is part of the official Sendy 7 package.
• It is based on Tiny File Manager, a legitimate PHP file manager.
• ImunifyAV seems to detect it by behavior/category as an admin/file manager tool.
• That is understandable, since it can upload, edit, rename, delete and manage files.
• We did not find typical PHP webshell indicators such as hidden eval/base64 payloads or obvious obfuscation.
• Given recent supply-chain attacks, the warning can look alarming at first.

So, if the file matches the official Sendy package, it should be safe to add it to ImunifyAV’s ignore/whitelist list.

Hope this helps other admins avoid unnecessary panic.

Best,
Marcelo

I love the new UI, feels familiar but more polished, and the new drag/drop editor is great. We were using Stripo, and I don't think we need that anymore.

Loving the AI features, using them already. I've had it generate a few new templates, and it does a nice job. Generating different subject lines is cool too. The Analyze Report feature is great, because it's superb insight into the list quality itself, the content and how it related to the stats, and best part is the recommendations on how to improve things based on the actual data.

For Ben: I see the model being used is gpt-5.4-mini, I'm assuming I can just edit the /includes/helpers/openai.php file to change the model as desired. Any plans for a model fetch and model drop-down option? Given they change fairly often, and costs vary, it'd be a good idea I think.

Perhaps there could be specific dev hooks added to Sendy, to hook into different areas to add on to or override things like this?

Over time, maybe look into eventually adding an option for AI endpoint to be able to use any self-hosted or hosted provider like OpenRouter, LiteLLM, or local models. I just added this to my FreeScout GPT Pro module (an AI module for the FreeScout open-source support platform), and it was as easy as adding an endpoint URL field, and if that's set, just using that endpoint with "/v1/chat/completions/" appended to it, and an "AI Gateway" API key field.

I am working on an update-sendy.php script that backs up the current files/folders (minus uploads) to a /backups/sendy-v6.1.3/ folder, gets the latest version using the sendy.co/download/ URL with the license key, and unzips it in place, with a quick revert version option. Maybe add an option to run weekly via crontab etc. Once it's tested and ready, I'll share it here in the forums if anyone is interested.

I'm putting together a new hosting plan offer with Sendy in mind, if anyone wants hosting with deep Sendy-capable support.

The question is:

Can I update my registered domain on the license to maindomain.com without affecting subdomain.maindomain.com and setup anothersubdomain.maindomain.com?

Currently, using the csv import or copy and paste won't work.

Is there a way we can import the names to the autoresponder to save us from having to do things manually?

I just added over 100 new subscribers via a Bookfunnel signup form and I would like to send my welcome sequence to those new subscribers, even though I imported them via csv.

How can I make this happen?

Thanks!

I've tried the following to no avail:

mydomain.com/?email=[email]

mydomain.com/?email=%e

mydomain.com/?email={EMAIL}

Is this possible?

Thanks

Looking for where I can view autoresponder stats or reporting, basic things like if a message was sent or opened, clicked etc. I'm on a current version, have checked the FAQ & searched the forum.

I found this related article form 2018, but the image linked from it shows a view I don't have.
https://sendy.co/forum/discussion/11094/how-can-i-check-autoresponder-stats#gsc.tab=0

Here is the side by side of that support image and my screen.
https://d.pr/i/Cz8z7Z

I am getting to my screen via side menu View All Lists > click list Title> then 'Autoreponders' in the menu row.
here https://d.pr/i/QYQ8Rd

I'm assuming if it existed in 2018 it still does, so If I'm in the wrong place where can I find this info?

thanks!

Here is my mod to process events (bounces and compliants) using Sendy and Sendgrid.
https://dl.dropboxusercontent.com/u/2891468/sendymods/sendy-mods-sendgrid-events.zip

Instructions:

1. Decompress the zip file in the root of your sendy installation,
2. Look the image inside and configure the webhook in Sendgrid,
3. Try it!

Send and Enjoy.

When I create a new campaign, I'm unable to choose a hidden list when defining recipients. Is this intentional, and is there a way to change it?

Thanks,

Phil

I am trying to check whether this will work as planned.

I will create a new list & campaign and schedule it to send in 10 days later .

I will use API to always fill up the list created during this campaigns collected via various sources. Will the campaigns sent to the entire most updated list when it is triggered 10 days later?

Thanks!

Is there a way I can send an email to specific subscribers only within a list? The only way I can see to do it is to create a temporary list and subscribe them to it, send the email, and then delete the list.

Thanks,

Steve

Is there a way to export a list of which subscriber opened and which clicked an email? That would be great to export that back into Klaviyo to understand active accounts.

I am using sendy and I would like to know how I can change user with access to MySQL database without re-installation and re-configuration sendy? I was made a mistake with setting sendy with database user as root to MySQL and now I would like to create user in MySQL and switch it in sendy too.

Thank you.

Is there a way to Resend the campaign to unopens or no-clicks?

Seems likes a simple option I must be overlooking.

THanks!

I am using the newest version of Sendy, to my knowledge.

Thanks, everyone.

How to configure it on Sendy? Is it possible to do?

Thank you
Regards

I can't click "Sent."

Screenshot of column: https://share.cleanshot.com/gRmkcWWg

I updated to the latest version, and still nothing. Any thoughts?

I have tried hard to find the Command for Cron Jobs. Please help to show me the way to find it. Many thanks

Best wishes
Sam

We now would like to remove email addresses from lists programmatically via API and re-add them lateron. When re-adding them after a couple of weeks, we would like the drip campaign to start from start ("on signup" should be triggered again).

This being said, we do not understand the exact difference between the unsubscribe and delete API points. In order to re-add emails, should we "unsubscribe" and then "subscribe" oder do should we "delete subscriber" and then "subscribe"?

Thanks in advance!
Sebastian

I'm trying to send a newsletter to all my old subscribers asking if they still want to receive it. So I'm using the API and making a custom link for them to click if they want to keep receiving it. So far so good.

They tricky is, this new list where they'll be subscribed to, is a double opt-in list that I'm currently using for new subscribers and I'd like the API/Link/Integration that I mentioned to Auto-confirm any email that clicks the link. Reason being, If a person is clicking from an email, I don't need to reconfirm their email, but I still need this list to be double opt-in for new subscribers from the site form.

Is this possible?

Thank you.

Cheers
Craig

Craig