Securitycheck Pro
Jul 01 2020: Released version 3.2
- + Database update until Jun 30 2020 (5 new Joomla core vulnerabilities added) (both versions).
- + IMPORTANT: This version is needed for Control Center 2.0 (Only Pro version).
- Due to the complete redesign of Control Center, since its 2.0 version we need this version or upper to manage our sites.
- + Fixed minor bug in File integrity (thank you very much for your time Lukasz!) (Only Pro version).
- We got a blank page in PHP 7.4 after clicking on the "Mark all modified files" button.
- + Fixed minor bug in logs (Only Pro version).
- We got a warning if we don't select any log and press any "mark as" button.
- + Improvements in javascript to avoid 'unsale-eval' expressions (Only Pro version).
- + Removed cookie file and its code; using Joomla core instead and added "strict" value for "samesite" attribute (Only Pro version).
- + Added new security header: Feature policy (Only Pro version).
- The 'Feature policy' header is available into the .htaccess protection feature.
- + Changed default priority in list (thank you very much for your suggestion Jeff!) (Only Pro version).
- Now Whitelist is set as 'First priority'.
- + Improvements in firewall code (thank you very much for your help Alex!) (Only Pro version).
- To avoid warnign messages when an attack is detected and connection cut.
Apr 28 2020: Released version 3.1.12
- + Database update until Apr 28 2020 (14 new Joomla core and 3 new vulnerabilities added) (both versions).
- + Support for Control Center 2.0 (both versions).
- Next version of Securitycheck Pro (3.2) will support only Control Center 2.0 and higher.
- + Fixed bug to update Joomla core from Control Center (both versions).
- In php 7.4 this feature didn't work properly.
- + Fixed bug in priority options (both versions).
- There was a missing reference to the geoblock feature.
- + Default user-agent's blacklist updated (thank you very much for your contribution Ovidiu!) (both versions).
- Remove a couple of lines to avoid blocking linkedin bot.
- + Improvement in installation process (thank you very much for your contribution Thierry!) (both versions).
- There was a table with no default character set. This could cause issues during installation.
- + Added an exception to some sql injection filters (both versions).
- + Improvements generating security headers (both versions).
- I have replaced 'Header set' for 'Header always set' for every security header generated.
Feb 24 2020: Released version 3.1.11
- + Database update until Feb 24 2020 (5 new Joomla core added) (both versions).
- + IMPORTANT: Geolocation services are no longer available(Only Pro version).
- Due to the changes in Maxmind TOS, all services that provided geolocation are no longer available. This is, you won't be able to use the "Geoblocking" feature nor there will be geopraphic info from every IP added to logs, whitelist, blacklist, dynamic blacklist and so on. This has not been an easy decision, but taking into consideration their new terms of service and that spoofing the IP-based location has always been trivial I finally have chosen to remove this feature from Securitycheck Pro.
- + Improvements in the method to determine the offensive IP (thank you very much for your contribution George!) (Only Pro version).
- Now we can determine the real IP when we use a service like Cloudflare.
- + Improvements in logs (thank you very much for your contribution George!) (Only Pro version).
- Now the url is not truncated.
- + Changes in default configuration (Only Pro version).
- There are some settings that could potentially block an user after installing the extension (i.e. user session protection). For non-technical users this could be a great deal, so now I enable the 'Easy config' feature for new installations. This can reduce a bit the initial level of protection, but settings can be enabled after reading the user guide.
- + Improvements in source code to adapt it to Joomla namespace. (both versions)
- + New language available: Ukrainian (thank you very much for your contribution Dima!) (Only Pro version).
- + Fixed bug related to control center connect plugin (thank you very much for your reporting this Erik!) (Only Pro version).
- IPs were not added to be consumed by the plugin.
