Update 0.1.7.md

documentation/docs/changelog/0.1.7.md

@@ -11,6 +11,7 @@ Not yet released.
 - [Cronjobs can now be enabled/disabled and run on demand](#cron-disable)
 - [Admin users can now be edited: rename, change password, suspend/unsuspend from OpenAdmin interface](#edit-admin-users)
 - [OpenAdmin search for users, websites and options](#admin-search)
+- [Forbiddedn usernames file](#forbidden-username)
 
 
 ### 🐛 Bug fixes
@@ -104,11 +105,43 @@ It's worth noting that while skipping versions is possible, it's generally not r
 
 In the event of a failed update to a particular version, the opencli update scripts will automatically add that version to the `/etc/openpanel/upgrade/skip_versions` file to prevent future attempts at updating to it.
 
+----
 
------
+### Forbidden Username
+
+Both `opencli user-add` and `opencli user-rename` scripts now use an external list of forbidden names from: `/usr/local/admin/scripts/helpers/forbidden_usernames.txt` file. Administrators can add usernames to this list.
+
+```bash
+test
+restart
+reboot
+shutdown
+exec
+root
+admin
+ftp
+lsws
+litespeed
+1000
+vsftpd
+apache2
+apache
+nginx
+php
+mysql
+mysqld
+www-data
+openpanel
+```
+
+----
 
 ### SSH after reboot
 
 SSH service inside users docker containers is disabled by defult when account is created, and in OpenPanel < 0.1.6 was also disabled by defualt when server is rebooted.
 
 We now store the ssh service status for each user and if enabled, after reboot will be re-enabled. note: ssh service for users uses a random port, so after reboot the port is changed.
+
+
+----
+