diff --git a/changelog.txt b/changelog.txt
index aa35a634..4da7a750 100644
--- a/changelog.txt
+++ b/changelog.txt
@@ -1,5 +1,15 @@
 Responsive Filemanager Changelog 
 
+*********************************************************
+*  RFM 9.11.3
+*********************************************************
+- fixed multiple security vulnerabilities (thanks to Wiswat Aswamenakul (Nick) from Netassess Consulting Co.,Ltd.)
+- url upload toggle
+- fixed upload xml
+- prettify improvement
+- added cad preview
+- other minor bug fixes
+
 *********************************************************
 *  RFM 9.11.0
 *********************************************************
diff --git a/filemanager/dialog.php b/filemanager/dialog.php
index a3a25995..549587e8 100755
--- a/filemanager/dialog.php
+++ b/filemanager/dialog.php
@@ -225,7 +225,9 @@
 
 $return_relative_url = isset($_GET['relative_url']) && $_GET['relative_url'] == "1" ? true : false;
 
-if (!isset($_GET['type'])) $_GET['type'] = 0;
+if (!isset($_GET['type'])){
+	$_GET['type'] = 0;
+}
 
 if($_GET['type']==1 || $_GET['type']==3){
 	$filter='';
diff --git a/resources/assets/js/include.js b/resources/assets/js/include.js
index b41138c1..2ac71672 100644
--- a/resources/assets/js/include.js
+++ b/resources/assets/js/include.js
@@ -3,7 +3,7 @@ var encodeURL,show_animation,hide_animation,apply,apply_none,apply_img,apply_any
 {
 	"use strict";
 
-	var version = "9.11.0";
+	var version = "9.11.3";
 	var active_contextmenu = true;
 	var copy_count = 0;
 
@@ -683,7 +683,7 @@ var encodeURL,show_animation,hide_animation,apply,apply_none,apply_img,apply_any
 					hide_animation();
 					jQuery('#url').val('');
 				}).fail(function(msg){
-					alert(jQuery('#lang_error_upload').val());
+					bootbox.alert(jQuery('#lang_error_upload').val());
 					hide_animation();
 					jQuery('#url').val('');
 				});
@@ -786,7 +786,7 @@ var encodeURL,show_animation,hide_animation,apply,apply_none,apply_img,apply_any
 			FileManager.makeContextMenu();
 		}
 
-		if(typeof(Storage) !== "undefined") {
+		if(typeof(Storage) !== "undefined" && $('#type_param').val()!=1 && $('#type_param').val()!=3 ) {
 			var li = localStorage.getItem("sort");
 			if(li){
 				var liElement = jQuery('#'+li);