Registre de canvis

2.8.1

• Extra lockout options are back.

2.8.0

• The plugin doesn’t trust any IP addresses other than _SERVER[“REMOTE_ADDR”] anymore. Trusting other IP origins make protection useless b/c they can be easily faked. This new version provides a way of secure IP unlocking for those sites that use a reverse proxy coupled with misconfigurated servers that populate _SERVER[“REMOTE_ADDR”] with wrong IPs which leads to mass blocking of users.

2.7.4

• Ara les alertes de bloqueig es poden enviar a una adreça de correu configurable.

2.7.3

• Els paràmetres tornen a la pàgina de “Paràmetres”.

2.7.2

• Els paràmetres es mouen a una altra pàgina.
• Corregit: missatge d’error d’inici de sessió. https://wordpress.org/support/topic/how-to-change-login-error-message/

2.7.1

• A security issue inherited from the ancestor plugin Limit Login Attempts has been fixed.

2.7.0

• GDPR compliance implemented.

• Fixed: ip_in_range() loop $ip overrides itself causing invalid results.
  https://wordpress.org/support/topic/ip_in_range-loop-ip-overrides-itself-causing-invalid-results/

• Fixed: the plugin was locking out the same IP address multiple times, each with a different port.
  https://wordpress.org/support/topic/same-ip-different-port/

2.6.3

• Added support of Sucuri Website Firewall.

2.6.2

• Fixed the issue with backslashes in usernames.

2.6.1

• Plugin returns the 403 Forbidden header after the limit of login attempts via XMLRPC is reached.

• Added support of IP ranges in white/black lists.

• Lockouts now can be released selectively.

• Fixed the issue with encoding of special symbols in email notifications.

2.5.0

• Added Multi-site Compatibility and additional MU settings. https://wordpress.org/support/topic/multisite-compatibility-47/

2.4.0

• Usernames and IP addresses can be white-listed and black-listed now. https://wordpress.org/support/topic/banning-specific-usernames/ https://wordpress.org/support/topic/good-831/
• The lockouts log has been inversed. https://wordpress.org/support/topic/inverse-log/

2.3.0

• IP addresses can be white-listed now. https://wordpress.org/support/topic/legal-user/
• A “Gateway” column is added to the lockouts log. It shows what endpoint an attacker was blocked from. https://wordpress.org/support/topic/xmlrpc-7/
• The “Undefined index: client_type” error is fixed. https://wordpress.org/support/topic/php-notice-when-updating-settings-page/

2.2.0

• Removed the “Handle cookie login” setting as they are now obsolete.
• Added bruteforce protection against Woocommerce login page attacks. https://wordpress.org/support/topic/how-to-integrate-with-woocommerce-2/
• Added bruteforce protection against XMLRPC attacks. https://wordpress.org/support/topic/xmlrpc-7/

2.1.0

• The site connection settings are now applied automatically and therefore have been removed from the admin interface.
• Now compatible with PHP 5.2 to support some older WP installations.

2.0.0

• fixed PHP Warning: Illegal offset type in isset or empty https://wordpress.org/support/topic/limit-login-attempts-generating-php-errors
• fixed the deprecated functions issue
  https://wordpress.org/support/topic/using-deprecated-function
• Fixed error with function arguments: https://wordpress.org/support/topic/warning-missing-argument-2-5
• added time stamp to unsuccessful tries on the plugin configuration page.
• fixed .po translation files issue.
• code refactoring and optimization.