This is likely because the Setup Wizard is trying to download a non-bundled addon from composr.app . I changed the downloads system to be more secure, using GUIDs for the download IDs in dload.php instead of sequential numbers, if Commandr is installed.

The Setup Wizard should have correctly picked up on the download GUID, but it did not appear to do so. I will investigate this.

Automated response: Downloads returning ID instead of GUID on homesite

A new security feature was recently added where Composr uses GUIDs for dload.php instead of the numeric download ID if Commandr is installed. This helps prevent scraping for downloads by bots.

Unfortunately, this broke the ability for Composr sites to download addons from the homesite because the homesite was only returning the numeric ID and not the GUID.

This hotfix attempts to fix that.

THIS HAS NOT BEEN TESTED YET. I will post when it has been tested. I have to commit first so I can push the fix to the homesite.

Also see:

https://gitlab.com/composr-foundation/composr/-/commit/38071cc9d9ed263f1f39c7eaa1d632d50909c99e
https://gitlab.com/composr-foundation/composr/-/commit/874d76ed571e8bba5626761e311de1977acb20b7
https://gitlab.com/composr-foundation/composr/-/commit/cf163c072fc8c20199082ef90fd21cc376653f2d