Securitycheck Pro
Apr 28 2020: Released version 3.1.12
- + Database update until Apr 28 2020 (14 new Joomla core and 3 new vulnerabilities added) (both versions).
- + Support for Control Center 2.0 (both versions).
- Next version of Securitycheck Pro (3.2) will support only Control Center 2.0 and higher.
- + Fixed bug to update Joomla core from Control Center (both versions).
- In php 7.4 this feature didn't work properly.
- + Fixed bug in priority options (both versions).
- There was a missing reference to the geoblock feature.
- + Default user-agent's blacklist updated (thank you very much for your contribution Ovidiu!) (both versions).
- Remove a couple of lines to avoid blocking linkedin bot.
- + Improvement in installation process (thank you very much for your contribution Thierry!) (both versions).
- There was a table with no default character set. This could cause issues during installation.
- + Added an exception to some sql injection filters (both versions).
- + Improvements generating security headers (both versions).
- I have replaced 'Header set' for 'Header always set' for every security header generated.
Feb 24 2020: Released version 3.1.11
- + Database update until Feb 24 2020 (5 new Joomla core added) (both versions).
- + IMPORTANT: Geolocation services are no longer available(Only Pro version).
- Due to the changes in Maxmind TOS, all services that provided geolocation are no longer available. This is, you won't be able to use the "Geoblocking" feature nor there will be geopraphic info from every IP added to logs, whitelist, blacklist, dynamic blacklist and so on. This has not been an easy decision, but taking into consideration their new terms of service and that spoofing the IP-based location has always been trivial I finally have chosen to remove this feature from Securitycheck Pro.
- + Improvements in the method to determine the offensive IP (thank you very much for your contribution George!) (Only Pro version).
- Now we can determine the real IP when we use a service like Cloudflare.
- + Improvements in logs (thank you very much for your contribution George!) (Only Pro version).
- Now the url is not truncated.
- + Changes in default configuration (Only Pro version).
- There are some settings that could potentially block an user after installing the extension (i.e. user session protection). For non-technical users this could be a great deal, so now I enable the 'Easy config' feature for new installations. This can reduce a bit the initial level of protection, but settings can be enabled after reading the user guide.
- + Improvements in source code to adapt it to Joomla namespace. (both versions)
- + New language available: Ukrainian (thank you very much for your contribution Dima!) (Only Pro version).
- + Fixed bug related to control center connect plugin (thank you very much for your reporting this Erik!) (Only Pro version).
- IPs were not added to be consumed by the plugin.
Dec 09 2019: Released version 3.1.10
- + Database update until Dec 09 2019 (1 new Joomla core and 1 new vulnerabilities added) (both versions).
- + GeoIP database updated (Only Pro version).
- + Improve PHP 7.4 compatibility (both versions).
- + Improvements in 'session hijack' protection (thank you very much for your contribution Juan Carlos and company!) (Only Pro version).
- Now we have the option to select which elements (IP and/or User-agent) will be checked to avoid session hickjaking.
- + Improvements in Geolocation (thank you very much for reporting this Compolaser!) (Only Pro version).
- Now I check if, for some reason, there is no IP to check.
- + Fixed small notice message checking scan files (Only Pro version).
- + Joomla 4 compatibility till Alpha 12 (both versions).
