-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathchangelog.txt
3203 lines (2847 loc) · 138 KB
/
changelog.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
== Changelog ==
= 2.142 Sep 16 2024
* Upd. Settings. Modal window common style updated.
* Mod. Settings. Scanner tab. Quarantine action text updated.
* Mod. Scanner. Accordion actions. Approve action is require active license now. No confirmation requested for restricted actions.
* Fix. Scanner. Accordion actions. Bulk action confirm fixed.
* Upd. Code. Security logs DTO classes implemented.
* Fix. CSS. Adaptive content. Nav wrapper flex direction.
* Fix. CSS. Adaptive content. Long description places.
* Fix. CSS. Adaptive content. Get more details clicks.
* Fix. CSS. Adaptive content. Scanner legend.
* Fix. CSS. Adaptive content. Path full description.
* Upd. SQL schema. The column "view" of spbc_auth_log table set to varchar(16).
* Fix. CSS. Adaptive content. Malware removal top settings banner adapted.
* Upd. Modal window. Support link removed from restricted actions notice.
* Upd. Auth. Open 2fa support link in new page.
* Fix. Code. Get admin email call moved.
* Fix. Security log. Parse URL. Fix for wptexturize.
* Fix. Settings. Unknown accordion description fixed.
* Fix. FSwatcher. Skip init on WP_Estimation_Form
= 2.140 Aug 19 2024
* Upd. WAR. Analysis php://input
* Fix. FSWatcher. Added exclusion for NotifierForPhone.
* Fix. Phpcs
* Upd. WAF. Exploit check from php://input
* Fix. Typo. Updated warning message.
* Upd. WAF. Error Control Operators
* Fix. Code. Unit tests fixed.
* Fix. FSW. Added exclude for GFForms output hook.
* Upd. Scanner. Trial license not allowed curing malware.
* Upd. Scanner. Trial license not allowed quarantine and delete actions.
* Fix. Code. Code style fixed.
* Fix. Modal window. Error modal title fixed.
* Fix. Scanner. Outbound links page_url parameter fixed.
* Fix. Scanner. Outbound links collecting fixed.
* Fix. ScannerQueue. Checking for the existence of a key when scanning frontend
= 2.134.3 June 06 2024
* Upd. FSWatcher. FIle system watcher functionality improved.
= 2.134.2 June 01 2024
* Fix. Admin panel. Banners. Renewal links fixed.
= 2.134.1 May 28 2024 =
* Fix. Security log. Auth actions logging fixed.
= 2.134 May 27 2024 =
* Fix. Scanner. Cure request banner fixed.
* Upd. Settings. Updated option description.
* Fix. Code Style lib. Regex to found spec symbols updated to exclude any human-language symbols.
* Fix. Scanner. Skipped files. Description fixed.
* Upd. Firewall Update. Update log extended.
* Upd. Settings. Summary of vulnerability check results
* Fix. Cron. Fixed updateTask function to save the last_call param.
* New. SecFW. Pass statuses for the test page has been described.
* Upd. Scan. Removed spam-active column from outbound links tab.
* Upd. Settings. Sending to the cloud analysis option modified - added `auto` mode.
* Upd. Scanner. Audit banner on unknown list implemented.
* Upd. Scanner. Heuristic scanner module updated.
* Fix. Security Firewall. Log admin actions fixed.
= 2.133 May 13 2024 =
* Fix. Scan. Hid appear of error.
* Fix. Add form for pagination block
* Fix. Settings. Escape single back-quote on errors output.
* New. Settings. New endpoint WP 'user' blocking option
* Fix. Settings. Server::inUri
* Fix. Auth. Updated encoder for generate qr code.
* Fix. Cookies. Cookie spbc_is_logged_in logic fixed.
* Ref. Scanner. Common lib. Heuristic. Code Style. Docs and refactoring.
* Upd. Settings. Scanner. Outbound links description updated.
* Fix. Vulnerability alarm. Safe badge layout fixed.
* Upd. Lib. Heuristic scanner library updated.
= 2.132 Apr 15 2024 =
* Upd. Heuristic. Adding noise param.
* Fix. Admin dashboard widget data update fixed.
* Fix. Empty actions.
* Upd. Widget. Gain page action type. Gain actions with users.
* Fix. Edit comments
* Mod. Scanner. Heuristic. Comments noise refactored.
* Fix. Widget. Action of user adding implemented to search.
* Upd. Security log actions. More page actions parsed.
* Fix. Scanner. Disapproving bulk action fixed.
* Upd. VulnerabilityAlarm. Layout of the new logo
* Upd. MScanFilesDTO. Added new fields
* Fix. Name fild plugin_heuristic_checked
* Fix. Settings. WPMS fixes.
* Upd. Vulnerability Alarm. Changing the vulnerability text
* Fix. Admin. Cookies logged_in fixed.
* Max file sizes + skipped accordion tab.
= 2.131 Apr 1 2024 =
* New. Settings. New design of settings page.
* New. Vulnerability Alarm Service. Themes check implemented.
* Udp. Vulnerability Alarm Service. Added a link to research.cleantalk.org
* Upd. UploadChecker. Check vulnerabilities. Use get_file_data() to find plugin info file to get the necessary data.
* Mod. Scanner. Heuristic analysis. Long lines check temporary disabled.
* Upd. Scanner tabs. Unknown files description updated.
* Upd. Scanner tabs. Removed the limit for outbound links found.
* Fix. Scanner. Heuristic scan by `Variables` module fixed.
* Fix. Scanner tabs. Unnecessary comma usage fixed.
* Fix. Scanner tabs. JS logic fixed on sending for analysis.
* Fix. Security log. User authorization logging fixed.
* Fix. Debug. Adding key validity during debug_remote
* Fix. Code. FileInfoExtended.
* Upd. Readme. Tested up to 6.5.
= 2.130.1 Mar 25 2024 =
* Fix. FSWatcher. Security improvements.
* Fix. Scanner. Signatures list updating fixed.
= 2.130 Mar 12 2024 =
* Mod. UploadChecker. Now user can proceed the module installation even if got warning from the UploadChecker.
* Mod. Outbound links accordion. Layout refactored.
* Mod. Vulnerability Alarm. Run request to research.cleantalk.org after any plugin installation.
* Fix. Scanner. Heuristic scan by mathematics module fixed.
* Fix. Code. Common lib `cleantalk/spbct-heuristic-analyser` updated.
* Fix. Scanner. Auto scan scheduling fixed.
* Fix. Frontend scanner. Sending logs. Bad encoding cases handled. Log record keys number fixed.
= 2.129 Feb 26 2024 =
* Upd. Scanner accordions. Text and HTML updated.
* Upd. Vulnerability alarm. Added check to install and update process.
* Upd. FSWatcher. Refactoring settings, add file view, fix dates format.
* Upd. Heuristic. Removed checking inline js.
* Fix. Vulnerability alarm. Unexpected type of plugin data handled.
* Fix. HTTP. Request. Fixed socket error handling.
* Upd. Debug call. Added las scan result. Connection check skipped if no get param "do_test_connection" added.
* Fix. Cron. Scanner background. Transaction parsed. Cron "scanner_launch" update implemented instead of adding new.
* Upd. SecFW. Added ipv6 count to summary.
* Fix. Settings. 2FA option fixed.
* Fix. CDNheaders. Check type of stored serialized value before unserialize.
* Fix. Get CMS hashes. Preventing errors of other actions for hook "plugins_api".
* Upd. Heuristic. Skipping svg in long line check.
* Fix. Vulnerability alarm. Checking installed plugins fixed.
* Fix. Schema. Redundant columns analysis_status and `analysis_comment` removed.
* Fix. FS Watcher. FS Watcher description fixed.
* Fix. Scanner. Default service data `State` fixed.
* Fix. Vulnerability alarm. Skip saving apps info without versions.
* Fix. Scanner. Frontend malware accordion fixed.
* Fix. CDNHeadersChecker. Run 1m cron instead of immediate run on settings save.
= 2.128.1 Feb 21 2024 =
* Fix. Test connection. Do not check response code on testing connection.
* Fix. Common. Redundant expression removed.
= 2.128 Feb 12 2024 =
* New. Calling cloud user_data_update during dismissing review notice.
* New. System plugins. Vulnerability alarms implemented.
* Fix. Settings. Show stored IPs count in the summary block.
* Upd. SecFW. Switch to direct update if updating is freezing.
* Upd. Scan. Auto send suspicious files.
= 2.127 Jan 29 2024 =
* New. File System Journal feature implemented.
* New. CodeStyle. Use new hasPHPOpenTags() to skip files with no actual PHP code.
* Fix. Settings. Changed the period in the message
* Fix. Auth. Change text.
* Fix. Settings. Refactoring settings page
* Fix. Scanner file send. Fix processing statuses if user has files that were send for analysis on old scanner versions.
* Fix. 2FA. Show role Subscriber, correction of user data verification
* Fix. Settings. Getting API key errors display.
* Fix. FS Watcher. Selecting snapshots fixed.
* Fix. Settings. ListTable unused attribute `data-before` removed.
* Fix. Scanner. Suspicious items display fixed.
= 2.126.1 Jan 24 2024 =
* Fix. UploadChecker good result now skipped from logging.
* Fix. Common. Database tables prefix usage implemented.
= 2.126 Jan 16 2024 =
* New. Firewall update. All queue stages is logged now.
* New. Scanner results. Now all the heuristic fired files being suspicious instead of critical.
* New. Scanner. Sends suspicious files to cloud report.
* New. Feature. CDN headers self check implemented.
* New. UploadChecker. Checking archive in media uploader.
* Mod. Code. UploadChecker.php extracted from WAF module.
* Mod. Settings. Remove button "Delete" from Approved files accordion.
* Mod. SQL. IP networks separated to v4/v6 tables to reduce database size.
* Fix. Settings. Changed the period in the message.
* Fix. Accordions. Red dot status fixed.
* Fix. Code. mergeWithSavingNumericKeysRecursive() fixed.
* Fix. Code. File sending. Fix DTO and results merging.
* Fix. Code. SQL request for pages selector.
* Fix. Lib. Localization global style.
* Fix. Lib. Change headers logic for adaptive tales.
= 2.125 Dec 18 2023 =
* New. Activator class implemented.
* New. Deactivator class implemented.
* Upd. Heuristic. Add math module.
* Upd. Code. Common lib (heuristic) updated.
* Fix. Scanner. Undefined data key fixed.
* Fix. Scan. Added check for signatures count.
* Fix. Settings. Getting Access Key message fixed.
* Fix. SecFW. FW results priority fixed.
* Fix. PHP 8.2 deprecated notice fixed (creation of dynamic property ::cookie_domain)
* Fix. PHP 8.2 deprecated notice fixed (creation of dynamic property ::data__set_cookies)
= 2.124 Dec 05 2023 =
* Fix. Table cells popup of hidden long text - CSS fixed.
* Upd. Traffic control. TC logic updated.
* Fix. FireWall. Statuses of the triggered networks displayed.
* Upd. Scanner. Manual cure button implemented.
= 2.123 Nov 20 2023 =
* Fix. Scanner. Files deletion. Comparison of site responses before and after actions added.
* Fix. Heuristic. Command shell detection. Regex fixed.
* Fix. Heuristic. Mathematics module fixed.
* Fix. RenameLoginPage. Skip login renaming process for password-protected pages.
* Fix. Integrations. Add Password-protected compatibility.
* Fix. WafBlocker. Compatible with php8.
* New. Scanner. Analysis bulk actions: deleting implemented.
* Fix. Scan. Excluded invalid index.
* Fix. Scan. Added retry for unstable connection.
* Fix. SecFW. FireWall priority fixed.
* Fix. Settings. Enqueue scanner-plugin.js script fixed.
* Fix. Scan. Increasing amount dynamically.
* Fix. Auth. Removed conflict with password protected pages.
* Fix. Scan. Handling empty signature_found.
* Upd. Settings. Additional headers IP getting option updated.
* Mod. WAF blocker. New reason code "-10". New description for blocking page.
= 2.122 Nov 08 2023 =
* New. Scan. Hashes blacklists.
* New. FireWall. New module added: WAF Blocker.
* Update. Scan. Keep surroundings code of FMS weak in db.
* Fix. SecFW. Updated the launch rule on wpms.
* Fix. RenameLoginPage. Skip login renaming process for password-protected pages.
* Fix. RenameLoginPage. Skip login renaming process for password-protected pages.
* Fix. Heuristic. Command shell detection. Regex fixed.
= 2.121 Oct 25 2023 =
* Update. Common. Getting ip from resource by option.
* Update. Scanner. Hidden the listing backups and quarantine directories.
* Update. Scanner. Added check line length and mark of unreadable.
* Update. Scanner. Shell commands detection updated.
* Fix. Notice. Show review banner only administrator.
* Fix. Helpers. Data. Ignore unlink warnings.
* Fix. Scanner. Delete row from analysis log.
* Fix. Settings. Additional exclusions ruleset fixes.
= 2.120 Oct 09 2023 =
* New. Scanner. Automatic send of critical files.
* New. Scanner. Detecting shell commands into backticks implemented.
* New. Scanner. Allow to send unknown files for analysis.
* New. General. New readme and screenshots.
* Update. Browser sign. Updated sign make logic, and count of remembered devices.
* Update. Scanner. DANGER files moved to SUSPICIOUS accordion.
* Update. Scanner. Improve view of suspicious code.
* Fix. Scanner. Request an audit button fixed.
* Fix. Scanner. Analysis log fixed.
= 2.119 Sep 25 2023 =
* Fix. Scan. Improve directory filter.
* New. Admin. Dashboard widget implemented.
* Fix. Settings. Description about additional headers has been updated.
* Mod. Heuristic package update. System function shell_exec() now gains "critical" severity.
* Fix. FireWall. BruteForce protection fixed.
* Fix. Scanner. Ot extensions support added.
* Fix. Scanner results. Approved category updated.
* Fix. System function shell_exec() now gains "critical" severity.
* Fix. AMP integration
* Fix. Security log. Security logs description fixed.
* Fix. Scanner. Disapproving files fixed.
* Fix. Scanner. Remove disapproving button for approved by CT.
= 2.118 Sep 11 2023 =
* Upd: Scan. Added .ott files for scanning.
* Fixed spbc_scanner__get_cure_log_data()
* New. Settings. Drop state data to defaults and remove all the cron tasks on empty key entered.
* Fix. Extended search for malware with SQL quotes (``).
* Fix. From heuristic package. Entropy fix.
* Fix to found superglobals in the code without semicolones
* Empty key actions
* Fixed Security Audit Banner, added this to Suspicious
* Update. Firewall. Table save last 20 rows after send logs, instead of delete all.
* Fix. Scanner. Unknown section fixed.
= 2.117 Aug 28 2023 =
* New: Settings. Add ability to change admin email.
* New: Heuristics. Detect super variables in the system commands.
* New: Show different types of weakspots in severity order.
* Upd: Scan. Find and show all malwares in Frontend Malware accordion.
* Upd: Security. Improve security logs view.
* Upd: Scan. Unset approved by ct status if no hash in list.
* Upd: Scan. Added .otc files for scanning.
= 2.116 Aug 14 2023 =
* New: WL. Added constants for custom description and FAQ link.
* Fix: FW. Delete all lines after send fw logs.
* Fix: WL. Support link in errors.
* Fix: WL. Email 2FA fixed.
* Fix: WL. Fixed block pages.
* Fix: WL. There is no Templates if WL is active.
= 2.115 July 31 2023 =
* New: Firewall. Protect login from brute force even if expired key.
* New: Scanner. Added extensions to find malware.
* Fix: Whitelabel. Added rules for check brand info.
* Fix: Front Scanner. Fixed modal view suspicious code for drive by download malware.
* Fix: General. Check response code on file delete.
* Fix: Scanner. Bulk actions fixed and improved.
* Fix: Scanner. Entropy analyse - Index invalid or out of range.
* Ref: General. WP 6.3 compatibility. Fixed version checking before scanner run.
* Ref: Rename login URl. For new instances default new login page rename.
* Ref: Scanner. Accordeon fields custom length.
= 2.114 July 17 2023 =
* New: Scanner. Added pop up with info how to fix file listening and unsafe permissions.
* New: SecFW. Manage Firewall as option and refactored clear scanner logs button for admin access.
* New: User can disable email notification on change login url.
* Ref: General. HTTP lib refactoring.
* Ref: Settings. Added spbc__get_exists_directories().
* Fix: Scan. Fixed count outbound links.
= 2.113 July 03 2023 =
* Ref: Update. Scanner. Remove green dot and fix typo.
* Ref: Update. Scanner. Added bulk actions for frontend malware and fix tabs view.
* New: Implemented a file recovery mechanism.
* Ref: Refactoring spbc_settings__field__draw().
* Fix: Scanner. Shuffle salts suggestion after curing fixed.
* Ref: Update. Scan. Removed duplicate of status in quarantine tab.
* New: Scanner. Entropy analysis added.
= 2.112 June 19 2023 =
* New: Scanner. Heuristic and signatures scanner libraries implemented.
* Fix: Code. Auto Tests fixed.
* Fix: Code. Auto Tests fixed.
* Fix: Code. Travis config fixed.
* Ref: Refactoring spbc_field_scanner__prepare_data__files().
* Fix: Common. Checking ajax requests improved.
* Fix: Common. Checking ajax requests fixed.
* New: Code. Release notice automation added.
* New: Cure Log - Cure action implemented
* New: Important Files Monitoring.
* Fix: Dashboard. Replaced wp_timezone_string to spbc_wp_timezone_string.
= 2.111 June 5 2023 =
* New: PDF report. Cure log support.
* Fix: Fixed trial banner.
* Fix: Scanner PDF report. PHP 8+ compatibility.
* New: Cure log implementation. Cure log PDF updates.
* Mod: Added new Security license status.
* Fix: Code. Code style fixed.
* Fix: Settings. Firewall tab moved to the first spot.
* Fix: Traffic control. Do not log TC records if user is skipped by a role.
* Fix: Cookies. Unset spbc_is_logged_in cookie on logout hook.
* Fix: Security logs. Do not send already sent logs on events.
* Fix: File deletion. Cancel if file is required in PHP ini.
* Mod: Frontend approved pages.
* Fix: File replacement with original fix.
* Mod: Analysis. Handled files can be deleted from analysis log.
= 2.110 May 22 2023 =
* Fix: Scanner. Making verdict fixed.
* Mod: Improved security log
* Fix: MscanFilesDTO. Make weak_spots signs unique.
* Fix: Scanner. Approved files will be check again if they were modified.
* Fix: Settings. List unknown files is active for the new installations.
* Fix: Trial expired. Remove forbidden error message in dashboard if trial expired.
* Fix: File analysis. Approved files shown as approved in abnalysis log.
* New: Firewall. Ipv6 handler implemented.
* Ref: Settings. spbc_seconds_to_human_time refactored and docs added.
* New: Remote calls. update_pscan_statuses
= 2.109.1 May 15 2023 =
* Fix. Scanner. Heuristic logic fixed.
= 2.109 May 11 2023 =
* Fix. Scanner. Improved heuristic.
* Fix. Code. Created checkingSpecialDecryptedToken().
* Fix. Code. Created FunctionsDecryptorService.
* Fix. Scanner. Modified SQL for SUSPICIOUS results.
* Fix. Firewall. Skip records with foud status 99.
* Update. Whitelabel. Replace brand data to spbc->data.
* Update. Scan. Add frontend malware send method to scanner queue.
* Fix. White label. Some custom brand entries fixed.
* Fix. WL mode. Affiliate section settings disable if the WL mode is active.
= 2.108.1 Apr 27 2023 =
#### Fix-release. Fixed error during tries to resend approved files.
* Fix. Pscan. Now sends files correctly in case if file approved_by_ct.
= 2.108 Apr 24 2023 =
#### Cloud Malware Scanner (CMwS) implemented. Now suspicious files that sent for analysis will be checked via Cloud logic.
* New. Cloud Malware Scanner (CMwS) implemented.
* Fix. Firewall logs. IPv6 records now adds correct to the local database on feedback.
= 2.107 Apr 10 2023 =
#### Ready to apply settings template from CleanTalk dashboard, uploading files WAF check improved and heuristic scanner fix for Windows systems.
* New. Settings. Plugin is ready to set a preset plugin settings template from the CleanTalk dashboard.
* Mod. WAF. Uploading files. Check files with signature analysis in addition to heuristic analysis.
* Fix. Scanner. Heuristic analysis. Files counting now works correctly on Windows systems.
= 2.106.1 Mar 30 2023 =
#### Fix release. Traffic control and Brute-Force protection now work and correct handle with IPV6 addresses.
* Fix. TC & BFP database handling fixed.
= 2.106 Mar 27 2023 =
#### Tested with WordPress up to: 6.2, traffic control timing options updated and some minor fixes applied.
* Mod. Tested WordPress up to: 6.2.
* Mod. Traffic control. Changed time selector options.
* Fix. Do not glue spbc dialog rows on bad code/file content preview.
* Fix. WAF. Upload checker details area fixed.
* Fix. Reduce firewall priority calculation cycle.
* Fix. HTTP lib. WP 6.2+ supporting implemented.
* Fix. Do not skip files analysis if aggregated size is overlimited.
* Fix. Do not show suspicious files if they have been sent for analysis.
* Fix. Heuristic. Unsetting verdict removed.
= 2.105 Mar 14 2023 =
#### Traffic control IP table fixed, JS files now scans via scanner, service post meta hiding, fix of timezone appearances and some other minor improvements.
* Mod. Post meta. Hide post meta fields to prevent their display.
* Mod. Scanner. Add js files to scan.
* Fix. Lot of changes in timezones layout.
* Fix. BFP. Remove outdated BFP code.
* Fix. Traffic control. Cleaning TC table fixed.
* Fix. Scanner. FilesystemIterator return .. and . begins with php8.2
* Fix. Suspicious files now appears correct.
= 2.104 Feb 28 2023 =
#### Improved code style, fixed some bugs, added new functionality.
* Fix: Heuristic. Variables execution fixed.
* Fix: Scanner. Slicing tokens fixed.
* New: Added SPBCT_ALLOW_CURL_SINGLE for frontend analysis.
* Mod: Sending logs. Files curing result now sends to the cloud correctly.
* Fix: Do not clear cured files array.
* Mod: Banner on trial end. Banner is not dismissible on the SPBC settings pages.
* Fix: Scanner. Added handler for errors caused third-party plugins.
* Fix: 2FA. Corrected work to find the user account.
* Fix: Scan. Commented decodeData method in heuristic class, because it's unstable.
* Fix: Firewall. Extend Helper\IP logic for x_real_ip, for handle ipv6 if there is ipv4 with stubs.
= 2.103 Feb 13 2023 =
#### Improved code style, fixed some bugs, added new functionality
* Fix: Heuristic. De-obfuscated strings concatenation fixed.
* Fix: TC. Traffic control checking logic simplified.
* Fix: Check php_uname or PHP_OS is available. Prevent fatal error and do not allow start scanner if so.
* Ref: All is_windows checks moved to SpbctWp/State.
* Fix: Apply changes to parent method except WP specific.
* Upd: Firewall. Rename firewall block status.
* Upd: Firewall. Added column "requests per n minutes".
* New: Scanner. Able to get a pdf version of scan log.
* Mod: Added clearing of custom message from unallowed tags.
* Fix: Fixed event_runtime.
* Fix: Scanner. Scanner tab content layout fixed.
* Fix: Scanner. Refresh scan info after scanning.
= 2.102 Jan 30 2023 =
#### Improved code style, fixed some bugs, added new functionality
* Mod: Improved scan log.
* Mod: Improved the mechanism for adding signatures to the database.
* Fix: Scanner. Fixed final scan log array offset warning.
* Fix: Collecting themes via themes_api instead of plugins_api.
* Fix: Try to get firewall files hashes agagin before throw an error.
* Fix: Scanner. Exclude approved files from send.
* Fix: FW update. Now does not ignore networks with different statuses
* Fix: Generate backups tab and link anyway.
= 2.101 Jan 16 2023 =
#### Improved code style, fixed some bugs, added new functionality
* New: Logging of scanning stages
* New: Settings. Brute force protection settings added.
* New: Malware Scanner. Warn user on settings and admin bar if critical files or frontend malware found.
* New: Malware Scanner. Warn user on settings and admin bar if critical files or frontend malware found.
* Mod: Mscanner. Custom period autostart.
* Mod: Red dot for malware scanner files list and admin bar
* Mod: Log layout refactored.
* Upd: Scanner. Added functionality of description for frontend results.
* Upd: Settings. FW logs tab updated.
* Ref: Log layout refactoring
* Ref: Settings hints refactoring
* Ref: "users online" name refactored to admins online
* Fix: Scanner. Compelled refactoring from "Error Control Operators" to try-catch.
* Fix: Admins online bar counter now count admin users only.
* Fix: Autocure end condition fix.
* Fix: Reverted previous fix, autocure result data moved to another condition.
* Fix: Settings. Admin bar - extra attention marks removed.
* Fix: Settings. Firewall tab - description updated.
* Fix: Settings. Typo fixed.
* Fix. Errors. Correction for resending to analysis error.
* Fix. Query. WPMS stat.
* Fix. Frontend query change.
* Fix. SecFW. New statuses 99 implemented.
* Fix. Code. Code style fixed.
* Fix. Files listing. Display accessible files fixed.
* Fix. Heuristic. Scanning process modified.
= 2.100 Dec 12 2022 =
#### Improved code style, fixed some bugs, added new functionality
* New: Trusted text and affiliate settings.
* New: Remote calls. Private records handler.
* New: TC. New option added - exclude authorized user.
* Mod: Frontend scanner. Getting content for scanning is asynchronous now.
* Mod: Frontend scanner. Scan amount increased to 20.
* Mod: Analysis log. Date format changed.
* Mod: SFW. Checking hashes of uploaded files
* Mod: Added anchors to navigate through the settings sections.
* Fix: Variables. Cookies secure flag fixed.
* Fix: Fixed Unsafe Permissions description
* Fix: Login page. Warnings custom login url on php 8.
* Fix: Zapier works with 2FA
* Mod: Added a description to the analysis results
= 2.99 Nov 28 2022 =
#### Improved code style, fixed some bugs, added new functionality
* Fix: WAF logs. Single quote escape during SQL write on WAF logs write.
* Fix: WAF logs. Single quote escape enchance.
* Ref: spbc_get_modules_by_type() - fixed getting Name
* Ref: get_modules_hashes()
* Mod: Admin page. Url is changed when switch tab, and added hotkey Ctrl+F5 for reload current tab.
* Fix: HTTP lib. Response::runCallbacks method fixed.
* Mod: Update. Frontend. Urls in text message render to links.
= 2.98 Nov 14 2022 =
#### Improved code style, fixed some bugs, added new functionality
* Mod: the confirmation code length is 8 digits
* Ref: Updated description for option SEND PHP LOG
* Ref: Removed unused issueHandlers from psalm.xml
* Ref: spbc_PHP_logs__detect_EOL_type()
* Ref: Updated Website total files description
* Ref: Removed HOST checking in spbc_scanner_page_view()
* Fix: Frontend. Tooltip hide when mouseover
* Fix: ScannerQueue. Class usage fixed.
* Mod: Added description for file scan results
= 2.97 Oct 28 2022 =
#### Improved code style, fixed some bugs, added new functionality
* Mod: Frontend scanner - exclude unmodified pages
* Test: Compatibility tested up to WP 6.1
* New: MScanFilesDTO class implemented.
* Fix: Now correctly transfer number of core files and total count of files.
* Fix: Scanner. Now run autocure even if has results of previous heuristic scan.
* Fix: Surface scanner. Prevent type error if directory permission is restricted due surface scanning.
* Fix: spbc_resend_failed_files_for_analysis. Text fixes.
= 2.96 Oct 17 2022 =
#### Improved code style, fixed some bugs, added new functionality
* Fix: Improved code style, fixed some bugs
* Fix. Use wp_send_json() instead die(json_encode(...))
* Mod: Added bulk action for Deleting into Analysis log
* Mod: Unsafe Permissions - Checking permission to access important files and folders
* Fix: spbc_resend_failed_files_for_analysis()
* Fix: RC. Update settings remote call fixed
* Fix: Fixed SQL for critical files
* Fix: Fixed key_changed after getting template
= 2.95 Oct 03 2022 =
#### Improved functionality of the tab with files sent for analysis, removed the ability to send unknown files for analysis, fixed some bugs.
* Fix. spbc_scanner_page_view()
* Fix. Frontend scan. Wordpress postmeta table now selects correctly.
* Fix. Scanner log bulk actions.
* Fix. Critical files log.
* Fix. spbc_scanner_file_check_analysis_status.
* Fix. spbc_scanner_file_send_for_analysis__bulk.
* Mod. Scanner actions. View "bad" code buttons renamed.
* Mod: Removed the ability to send unknown files for analysis
* Mod: Improved functionality of the tab with files sent for analysis
= 2.94 Sep 15 2022 =
#### Fixed some bugs, improved performance, improved scanner operation.
* New. Frontend scanner. Approving malware implemented.
* Fix: Changed captures on banners
* Fix: List table. Actions separator displaying fixed.
* Fix. spbc_firewall__check(). If module poppyz is active, force new WP
* Ref: PSR-12 Standarts
* Fix: Fixed the incompatibility of the banner system between antispam
* Fix: Fixed the data that the function spbc_get_source_info_of returns
* Fix: Fixed spbc_get_source_info_of return data
* Fix: Fixed frontend_analysis method
* Fix: Fixed Frontend->getPagesUri
* Fix: Fixed Frontend::countUncheckedPages
* Fix. Settings template. Reset setting fixed.
= 2.93 Sep 05 2022 =
#### Complete deactivation fixed, Frontend scanner improved, WPMS issues fixed and some minor issues fixed.
* New: Backups. Delete when complete deactivation.
* New. Frontend scanner. Re-scan the page during view bad code.
* Fix: Scanner. Heuristic. Add a detected_at for heuristically spotted attachments.
* Fix: Firewall. WPMS. Update on child blogs. Remote calls using its own blog URL.
* Fix: Firewall. WPMS. Update on child blogs. 'fw_stats' option loads for each blog separately.
* Fix: Scan logs. Hide last scan log on a new scan process.
* Fix: Removed fw__append_standard_message and server_response_combine
* Fix: Scanner. Sending results fixed.
* Fix. Settings template. Reset setting fixed.
= 2.92 Aug 15 2022 =
#### SecFW updating fixed, scanner cure fixed and some minor issues fixed.
* Mod: HTTP lib. Prepare URLs array in the setURL() method.
* Mod: Security Firewall. Update. Download 20 files by one queue execution.
* Upd: Common. Additional security headers added.
* Fix. Scanner. Cure backups fixed.
* Mod: Exclude files approved by the user from verification
* Fix. Settings template. Reset setting fixed.
= 2.91.1 Jul 27 2022 =
#### Missed commits implemented. Minor issues fixed.
* New: FW Update. Make dependence for retries related to files count.
* Fix. API request. Do not retry request if error contain CleanTalk prepared server error.
* Fix: Heuristic. Use files paths without root due scan.
* Fix: Queue. Unset error in stage if stage has been retried successfully.
* Fix: Error output. Fix wrong variable name.
* Fix: SpbctWP\Scanner\ScannerQueue::controllerBackground(). Use correct transaction name.
* Fix: Scanner. The file 'Detected at' property is set for every file.
* Fix: Common\Sanitize cast integer filter to integer return type.
= 2.91 Jul 26 2022 =
#### Last scan logs now displaying always, a brand new feedback banner added , sending files for analysis interface improved, code quality improved and some minor issues fixed.
* New. Scanner last result log now always visible in the scanner tab.
* New. Sending files for analysis mechanism now works without page reloading.
* New. Admin dashboard feedback banner.
* Fix: Settings. Scanner tab. Notice layout fix.
* Fix: spbc_resend_failed_files_for_analysis. Return if no files were sent to analysis.
* Fix: API. Correct comparison of the option of api servers provided in retryRequestToFastestServers()
* Fix: FW. Block pages styles fixed.
* Fix. Custom login. Fix redirect while logout.
* Fix: Quarantine and de-quarantine. Notice fixed.
* Fix: Send for analysis. Notice fixed.
* Fix: API. Logic in retrying request to the fastest API-server.
* Fix: Constants. Links logs table name fixed.
* Fix: Settings. Firewall tab. TC link now works correct.
* Fix: 2FA. Do not clean security logs on the general login form submitting if 2FA is enabled.
* Fix: 2FA. Now always sends 6 digits codes.
* Imp: 2FA. Google 2FA description improved.
= 2.90 Jul 11 2022 =
#### Scan process duration displaying, admin banners updated, code quality improved and some minor issues fixed.
* New. Scanner. Scan duration implemented.
* Fix. Rewrite login-url. Does not create new WP_Rewrite if no custom login form is set in the plugin settings.
* Fix. Scanner table actions messages. Improved messages style and logic.
* Fix. TablesAnalyzer.php. Now reset to initial blog ID on WPMS.
* Fix. SPBC_TBL_SCAN_FILES. Now uses base_prefix instead of prefix to prevent handling of unavailable blog scan result data on WPMS.
* Refactoring Admin Banners
* Fix. Admin banner. Security attention mark fixed.
* Fix. Scanner results. Remove undeleted separator after sending files for analysis.
* Fix. Scanner. Transferring stages names to the JS script fixed.
* Fif. Settings. Description fixed - hyperlinks protocol changed.
* Fix. Scanner. Signatures updating fixed.
* Fix. SecFW. Sending logs fixed.
* Fix. Scanner. Frontend scanning fixed.
* Fix. Scanner. Some scan stages fixed - signatures scan, heuristic scan, auto cure - fixed.
* Fix. Scanner. Scanned files count fixed.
* Fix. HTTP. Prevent caching during website answer code checking.
= 2.89 Jun 27 2022 =
#### Additional data to the scanner's report added, available remote posting of api key, code quality improved and some minor issues fixed.
* New. Post api key remote call implemented.
* New. API key length extended to 30 symbols.
* New. Scanner. Additional data was added to the scanner report.
* New. Waf new params
* Fix. ScannerQueue.php. Now clear state->modules before new check.
* Fix. Heuristic. Getting inline HTML for checking implemented.
* Fix. Heuristic. Tokens max position fixed.
* Fixed spbc->notice_show
* Fix. Scanner. Sending results fixed.
= 2.88 Jun 14 2022 =
#### SecFW updating fixed and some minor issues fixed.
* Fix. - spbc-scanner.php - ListTable.php Add application/json header for every die($output) to.
* Fix. Firewall. Custom message will be wrapped on div tags instead of h2.
* Fix: Fixed colspan attribute in table row on plugin settings page
* Fix. IP.php. Private networks check fix.
* Mod: Surface.php - resave full_hash if different
* Fix. SecFW. Updating process fixed.
* Fix. HTTP lib. No cache pattern fixed.
* Fix. RemoteCalls. No cache parameter added.
* Fix. HTTP lib. Useragent for WP HTTP API requests fixed.
* Fix. Scanner. Heuristic. Includes. Empty include body.
* Fix. TablesAnalyzer.php. Remove incorrect table prefix for searched DB schema.
* Fix. TablesAnalyzer.php. Add collation search results check.
* Fix: Scanner. Preventing files actions during scanning.
* Fix. TablesAnalyzer.php. Rename possible collision with table names due collation check.
= 2.87.1 Jun 2 2022 =
* Fix. - spbc-admin.php - spbc-backups.php - spbc-scanner.php Add application/json header for every die($output) to.
* Fix. spbc-scanner.php-> spbc_scanner_file_send. Fix 'unknown field checked' while send for analysis.
* Fix. ScannerQueue.php->controllerFront. Add application/json header to the output of stage result.
= 2.87 May 30 2022 =
* Fix. API::method_service_get() and its result processing.
* Fix. From test. Scanner. Heuristic. Strings. Chars conversion.
* Fix. From test. Scanner. Heuristic. Includes.
* Fix. From test. Updater to 2.86.1.
* Fix. From test. Resend file for analysis only for the main site.
* Fix. get_cms_hashes(). Delete ex-core files if there is a same undeleted CORE hashes received from remote file.
* Fix. Updater. Add settings for custom block message to the firewall blocking screens.
* Fix: convertSchemaToStandard() fixed
* Fix: perform() fixed
* Fix: State->error_add() fixed
* Fix: getDataFromRemoteGZ() fixed
* Fix: important_files_listing() fixed
* Fix: spbc_settings__register() fixed
* Fix: spbc_field_scanner__files_listing__get_data() fixed
* Fix: spbc_field_scanner__files_listing__get_total() fixed
* Fix. Move spbc_resend_failed_files_for_analysis() from notice_paid_till processing logic.
* Fix. Scanner. Actions. View bad code from file.
* Fix. Scanner. Heuristic. Speed up.
* Fix. spbc_resend_failed_files_for_analysis. Variable name fix.
* Fix. SQLSchema.php Changes reverted. If there is no "checked" column the updater can't seek changes. Debug. UpdaterScripts.php. Debug removed.
* Fix. get_modules_hashes(). SQL error fix.
* Fix. Frontend.php->check(). Moved frontend scanner object creation to prevent collisions.
* Fix. FrontendScan.php. Type of check added.
* Fix. Switch heuristic analysis to 0 for 2.86 version.
* Fix. HTTP. Request. Process unexpected errors.
* Fix. Settings. Error output.
* Fix. API::method_service_get() and its result processing #3.
* Fix. API::method_service_get() and its result processing #2.
* New. Firewall. Add custom block message to the blocking screens.
* New. RemoteCalls. perform_service_get().
* New. Add error type 'service_customize'.
* New. Implementation of API::method_service_get(): - in synchronize function; - in cron.
* New. API::method_service_get() and its result processing.
* New. Settings: - fw__custom_message; - fw__append_standard_message.
* New. Add extra package logic.
* New: Cherry pick from settings/extra-package.sr.
* New: Settings. Collect PHP log description changed. It depends from 'extra_package' flag.
* New. UpdaterScripts.php. Update to 2_87_0 - delete "checked" row. New. SQLSchema.php. Removed checked row from schema. Debug. Version updated temporarily.
* New. Methods in Scanner\Heuristic\Tokens: - convertOffset; - reindex; - getTokenFromPosition; - glueAllTokens; - getIterationTokens.
* New. Implementation of Scanner\Heuristic\TokenGroups.
* New. Scanner\Heuristic\Token implementation of \Iterator, \ArrayAccess, \Countable interfaces.
* New. Scanner\Heuristic\DataStructures\Token. Represents instance of token.
* New. Scanner\Heuristic\TokenGroups. Class with static properties. This class gather all types of token we are using to parse, analyze and deobfuscate the code.
* New. DataStructure\SplFixedArray::append().
* New. spbc_check_files_sent_and_received(). Add check on timestamp if already sent in last 10 minutes. New. spbc_check_files_sent_and_received(). Errors handling
* New. spbc_check_files_sent_and_received(). Check if count of sent and received files is equal. If not send differnce files again.
* New. ScannerQueue.php. Changes to differ "checked" to "cheked_heuristic" and "checked_signatures"
* New. Helper.php->isRegexp(). Now supports custom delimiters. Doc. Helper.php->isRegexp(). Docblock is set.
* New. Helper.php->isRegexp(). Checks if signature is rexep, supports modifiers. Ref. Scanner. Regex checking moved to isRegexp. Ref. Firewall. Regex checking moved to isRegexp. Debug. spbc-admin.php. States commented.
* Refactor. Scanner\Heuristic\Controller. Add getters.
* Refactor. Scanner\Heuristic\Controller. Implementation of Token class.
* Refactor. Scanner\Heuristic\Controller. Constructor and properties.
* Refactor. Scanner\Heuristic\Controller. New way to iterate content.
* Refactor. Scanner\Heuristic\CodeStyle. Minor fix.
* Refactor. Scanner\Heuristic\Variables: - Improve search sequences; - Implementation of Token class.
* Refactor. Scanner\Heuristic\Variables. Minor fix.
* Refactor. Scanner\Heuristic\Variables. Improve search sequences.
* Refactor. Scanner\Heuristic\Transformations: - Implement Token class; - Multiple error fixes.
* Refactor. Scanner\Heuristic\Strings: - Implement Token class; - Multiple error fixes.
* Refactor. Scanner\Heuristic\SQLs::processRequest(). Preventing from multiple addition same SQL-request.
* Refactor. Scanner\Heuristic\SQLs:: Implement Token class.
* Refactor. Scanner\Heuristic\Simplifier:: Implement Token class.
* Refactor. Scanner\Heuristic\Includes::process(). Remove useless heading whitespace.
* Refactor. Scanner\Heuristic\Includes: - Code beautify; - Constructor refactor; - Implement Token class.
* Refactor. Scanner\Heuristic\HTML code beautifying.
* Refactor. Scanner\Heuristic\Evaluations: - Update constructor; - New way to check evaluations; - New method isSafe(); - Implementation of Token class.
* Refactor. Scanner\Heuristic\CodeStyle implementation of Token class.
* Refactor. Scanner\Heuristic\Tokens implementation of Token class.
* Refactor. Scanner\Heuristic\Tokens minor improvements. Cleaning up code.
* Refactor. Scanner\Heuristic\Tokens delete useless methods for the token comparing.
* Refactor. Scanner\Heuristic\Tokens: - update convertTokensToStandard() method; - delete setMaxKey() method; - delete newIteration() method.
* Refactor. DataStructure\SplFixedArray::slice().
* Refactor. DataStructure\SplFixedArray::reindex(): - reducing memory consumption; - opportunity to reindex from the given key.
* Refactor. spbc_resend_failed_files_for_analysis(). Renaming function. Ref. spbc_resend_failed_files_for_analysis(). Custom delay added. Doc. spbc_resend_failed_files_for_analysis(). Docbloc and comments. Debug. spbc_resend_failed_files_for_analysis(). Debug removed.
= 2.86 May 18 2022 =
* Fix. Scanner. Interface. Forbid user to check file analysis status for 10 minutes after sending.
* Fix. spbc-settings.php Correct slash char "\" is set in description.
* Fix. From test. Catching unknown error.
* Fix. Spbc-settings. Preloader fix. New. spbc-settings_tab--scanner.js. Spinner while content uploading.
* Fix. spbc-settings_tab--scanner.js Debug removed
* Fix. spbc-admin.php. States rolled back.
* Fix: API. Add application agent to API-request.
* Fix: Updater. Update to 2.82.
* Fix. spbc_scannerButtonViewBad_callback(). Line width fix. New. spbc-settings.php. New test local domain New. FrontendScan.php WeakSpots lines length validation
* Fix: Scanner. Links. Scanning posts with large amount of comments.
* Fix. spbc_scannerButtonViewBad_callback(). Frame height fix.
* Fix. spbc_scannerButtonViewBad_callback() Weak spot string style set. Fix. spbc_scanner_page_view() Weak spot redline style set.
* Fix. spbc_scannerButtonViewBad_callback() Bad code highlight fixes.
* Fix. spbc_scannerButtonViewBad_callback() Trying to fix HTML layout when view bad code.
* Fix: Firewall. Update. End of update. To often setting savings.
* Fix: Firewall. Update. Pass remote call action to Queue.
* New. spbc-settings_tab--scanner.js. Spinner inside loading window.
* Refactor. spbc-scanner.php. Debug removed.
* Refactor. FrontendScan.php. Common weakspot parts of front-checks moved to constructWeakSpotArray() Ref. FrontendScan.php. validateLineLenght is redundant. Ref. FrontendScan.php. Debug removed. Ref. spbc-settings_tab--scanner.min.js Minified JS upload.
* Refactor. Debug. spbc_scanner_clear().
* Refactor. Frontend.php. Some explanation add. Fix. FrontendScan.php. Weak_spot cutting fix.
= 2.85.1 May 12 2022 =
* Fix: Checking the existence of a function wp_is_maintenance_mode
* Fix. CleantalkSP\Common\SpbctWP\Request. Use 'blocking' option for async requests.
* Fix. CleantalkSP\Common\SpbctWP\Request. Process exception passed from WordPress \Requests class.
* Fix: CleantalkSP\Common\HTTP\Request. Timeout error while async request.
* Fix: SpbctWP\Scanner\Heuristic\Variables::updateArray_newElement(). Empty variable slice.
* Fix: DataStructures\ExtendedSplFixedArray::slice().
* Fix: Scanner. Heuristic. Fatal error.
* Fix: Scanner. Compatibility with PHP lower than 7.4.
* Fix: Firewall. Brute-Force Protection module. Unexciting WP_Rewrite() object.
* Fix: Scanner. Wrong progress percentage.
* Refactor: CleantalkSP\SpbctWP\Scanner\Heuristic\Tokens::convertTokensToStandard().
= 2.85 Apr 28 2022 =
* Fix: WordPress Multisite. Receive an access key in mode "Mutual account, Individual access key".
* Fix. Scanner. Heuristic. Unset tokens.
* Fix: Firewall. Calculation of the results priority logic.
* Fix: Heuristic. Includes processing error.
* Fix: Complete deactivation. Deleting all plugin settings from *_options.
* Fix: Security Firewall update.
* Fix: Call to undefined method CleantalkSP\SpbctWP\Helpers\IP::ip__v6_reduce().
* Fix: SpbctWP\HTTP\Request::appendParametersToURL().
* Fix: DataStructures\ExtendedSplFixedArray::getColumn() and slice() methods.
* Fix: Delete useless class import.
* Fix: SpbctWP\HTTP\Request. Inheritance bug.
* Fix: fixed reloading of scanner accordion.
* Fix: Complete deactivation.
* Fix: result_wp_api_modules - version not exists
* Fix: fixed colspan for approve message.
* Fix: spbc->plugins for the first start.
* Mod: Beautifying class import.
* New: Common\HTTP\* wrapper for WordPress: SpbctWP\HTTP\Request.
* New: Namespace Common\HTTP\ included classes: - Common\HTTP\Request; - Common\HTTP\Response.
* New: SpbctWP\Helper::http__get_data_from_gz() and implementation.
* New: DataStructure\ExtendedSplFixedArray class.
* New: ExtendedSplFixedArray::unshift() method. Implementation of array_unshift for \SplFixedArray.
* Ref: Implementation of DataStructures\ExtendedSplFixedArray to Heuristic\* classes.
* Ref: Implementation of new Helpers. Refactoring: PSR recommendation implementation.
* Ref: Implementation of *\HTTP\Request. Refactoring: *\RemoteCalls class upgrade.
* Ref: Implementation of *\HTTP\Request for API requests.
* Ref: Splitting *\Helper class to the number of classes into name space \Helpers\*.
* Ref: Common\Helpers\HelperHTTP rename method append_parameters_to_URL to appendParametersToURL.
* Ref: Common\Helper renaming methods.
* Ref: SpbctWP\Helper renaming methods.
* Ref: Implement 'Truly moving IP* method from Common\Helper to Common\Helpers\HelperIP'.
* Ref: Truly moving IP* method from Common\Helper to Common\Helpers\HelperIP.
* Ref: Rename Common/Helpers/HelperHTTP::$headers to $http_headers.
* Ref: Rename Common/Helpers/HelperHTTP::getHeaders() to getHTTPHeaders().
= 2.84 Apr 11 2022 =
* Fix: Firewall. Update. DB request.
* Fix: Delete useless 'use';
* Fix: Adding isText filter.
* Fix: Signatures. Input 'NULL' for empty values when updating signatures.
* Fix: Scanner. Accordion. 'Critical' tab. Check for if signatures exists before output result.
* Fix: Common\Helper::buffer__csv__get_map(). Use of validation class.
* Fix: SpbctWP\ListTable. Translations.
* Fix: WAF. File check. Return result.
* Fix: Scanner tab. CSS.
* Fix: Few small fixes.
* Fix: Fixed typo
* Fix: Scanner. SpbctWP\Scanner\ScannerQueue. Use ScannerQueue::$db instead $wpdb in signature_analysis and heuristic_analysis.
* Fix: Scanner. Implementing variable amount of checked files in one pass for heuristic and signature analysis.
* Fix: Scanner. Percents count.
* Fix: Scanner. Display spinner for row actions with files.
* Fix: Scanner. Output error for row actions with files.
* Fix. 2FA. Code sending email fixed.
* Fix. 2FA. 2fa logic fixed.
* Mod: Sanitize, Escape, Validate classes.
* Mod: Signatures. Using 'mapped' CSV file for signatures.
* Mod: Signatures. Automatically parse CSV with map.
* Mod: Update spbc_scanner_file_send() to use new DB structure.
* Mod: spbcModal. CSS modify for error comment.
* Mod: ListTable. Adding new bulk action 'send for analysis' and refactor bulk actions handlers.
* Mod: Do not make a remote calls when maintenance mode is enabled.
* Mod: Updated phpDOC
* Mod: Added escaping html for translate
* Mod: Created Escape:class for escaping data
* Mod: Refactoring Validator and Sanitizer classes
* Mod: Added modificators in regexp for WAF
* Mod: Settings. Do not show the support button if the access key is not correct.
* New: WAF. Additional params to filter with. Prepare DB structure.
* New: Scanner. Category 'Analysis log'.
* New: spbc_scanner_get_files_by_category() adding support for the new category 'analysis_log'.
* New: Implement table action 'check_analysis_status'.
* New: spbc_scanner_file_check_analysis_status(). Checks analysis status of passed file(s). Could handle multiple files input.
* New: Variables\Validator::isText() filter.
* New: Common\API. Process data for API::method__security_mscan_status().
* New: Common\API::method__security_mscan_status().
* New: DB schema. Adding columns 'analysis_status' and 'analysis_comment' to 'scan_results' table.
* New: AJAX error comment output.
* New: spbc_scanner_file_send_for_analysis__bulk() and handle error from a very single file.
* New: spbc_scanner_get_file_by_id().
* Ref: Decomposition of a class CleantalkSP\Common\Helper.
* Del: Unused file Validator.php.
= 2.83 Mar 28 2022 =
* Fix: Scanner. Uploaded themes and plugins.
* Fix: Set input parameter types for different functions using Security\Firewall\Result DTO.
* Fix: Security\Firewall\Result. Set status after parent::constructor().
* Fix: Delete debug.
* Fix: Resolve CSS conflict with 'WP Lightbox 2' plugin.
* Fix: Scanner. File viewers. JS. Plenty of fixes.
* Fix: 2FA. Users profile. Script attaching.
* Fix: Scanner. File viewers. CSS fixes.
* Fix: Common\Helper::ip__v6_normalize(). hexdec() deprecated error.
* Fix: Scanner. Frontend. File scan log.
* Fix: UpdaterScripts. updateTo_2_82_0.
* Fix: JavaScript. Table action.
* Fix: Variables\ServerVariables. Filters.
* Fix: Scanner. Heuristic. Strings. Deprecated notice.
* Fix. Scanner. Debug exclusions removed.
* Mod: Security\Firewall. Get changes from 'refactoring-prioritize-AA' branch.
* Mod: Alter SQL scheme for table firewall_logs. New 'signature_id' column.
* Mod: Alter SQL scheme for table scan_signatures. New 'waf_action' column.
* Mod: Add new properties to Security\Firewall\Result: - signature_id; - waf_action;
* Mod: Move numeric status handling from Security\Firewall\Result::__constructor() to SpbctWP\Firewall\FW::check().
* Mod: Added new columns to scan results
* Mod: Firewall. Consider a smaller network as a prioritized result.
* Mod: Update jQueryUI to version 1.13.1.
* Mod: Optimization. Set the autoload flag to false where is possible.
* Mod: Registration. Error message.
* Mod: Interface. Terminology. Change 'API key' to 'access key'.
* Mod: JS. Update minimized files.
* Mod: Added to waf__suspicious_check() pattern as string.
* Mod: Added to waf__exploit_check() pattern as string.
* Mod: Added to waf__sql_check() pattern as string.
* Mod: Added Validator::class and Sanitizer::class.
* Mod: Authentication log. Do not send double log for a new device.
* Mod: SpbctWP\ListTable. Don not pass arguments to frontend.
* Mod: JavaScript. Pass modified arguments when doing AJAX.
* Mod: Added xss check by regular expression
* Mod: Added link output for shuffle salts when treatment is performed.
* Mod: Added new methods to Validator and Sanitizer.
* New: spbc_list_table__get_args_by_type(). Get arguments for ListTable.
* New: spbc_list_table__get_args_by_type() implemented.
* New: SpbctWP\ListTable. Process arguments in a new way.
* New: ServerVariables. Filters.
* New: SpbctWP\Firewall. Update update_log.
* New: SpbctWP\Firewall\WAF. Add middle_action() method to log a suspicious signatures.
* New: SpbctWP\Firewall\WAF. Update. Working with suspicious signatures.
* New: Implement Security\Firewall\Result class.
* New: Security\Firewall\Result class. Represents a contract between firewall components.
* New: Templates\DTO class.
* Refactoring: added method::hasSignature
* Refactor: Security\Firewall. Adding missing statuses to priority list.
* Refactor: Security\Firewall::prioritize().
= 2.82 Mar 14 2022 =
* Mod: Settings. Change salts. Change layout.
* Mod: Reset wp salts
* Mod: Variables\ServerVariables is abstract.
* Mod: Variables\*. Move storing and recalling variables to ServerVariables class.
* Mod: Templates\Singleton. Separate child instances.
* Mod: Added link for shuffle salts when curing is done
* Mod: Added updater script.
* Mod: Added description for section RESET SALTS.
* Fix: Scanner. JavaScript class. Percentages display.
* Fix: Scanner tab. Output errors for actions with files.
* Fix: Scanner. Cleaning from heuristic results #2.
* Fix: WPMS. Error when blog creating.
* Fix: Varibales\ServerVariables. Logic fix.
* Fix: Wordpress Multisite. Database error while adding a new blog.
* Fix: Wordpress Multisite. Monitoring.
* Fix: Wordpress Multisite. Settings. Database error.
* Fix: Wordpress Multisite. Banner. Setting link.
* Fix: Wordpress Multisite. Severe errors.
* Fix: Added scripts
* Fix: Remote Calls. Token calculation.
* Fix: Scanner. Amount of scanned files.
* Fix: preloader.gif for debug button
* Fix: reset salts
* Fix: Scanner. Cleaning from heuristic results.
* Fix: Fixed notification about deprecated operation of the hexdec function.
* Fix: update there_was_signature_treatment in Cure.php.
* Fix: Changed animation time.
= 2.81.2 Mar 5 2022 =
* Fix: Scanner. Increase timeout and reduce amount of files checked in one iteration.
* Fix: Scanner. Increase execution time for scanner.
* Mod: Scanner. Heuristic. Memory consumption decreased.
* Fix: Scanner. Heuristic. Processing errors.
* Fix: Scanner. Heuristic. SQL module. Error.
* Mod: Scanner. Manual. Speed up.
* Mod: Scanner. Manual. Error for the changed nonce.
= 2.81.1 Mar 3 2022 =
* Fix: Scanner. Manual. Errors output.
* Fix: Do not bother user with useless errors.
* Fix: Scanner. Surface. Skip bad file paths.
* Fix: PHP Errors in ScannerQueue.php.
= 2.81 Feb 28 2022 =
* Fix. Code. Singleton trait fixed.
* Fix. Updater. 2.73 updater script fixed.
* Fix. Git. Gitignore updated.
* Fix. Updater. Transaction flow fixed.
* Fix: \Templates\Multiton::getInstance() Input parameters.
* Fix: \Templates\Singleton::getInstance() Input parameters.
* Fix: \Templates\Multiton::getInstance() Input parameters.
* Fix: \Templates\Singleton::getInstance() Input parameters.
* Fix: Variables\* instance parameter scope.
* Fix: Common\Transaction.
* Fix: Updater transaction implementation. Deleting transaction when it's completed.
* Fix: Scanner. Skip trusted files.
* Fix: spbc-common.js. spbcSendAJAXRequest(). Revised.
* Fix: Common\Transaction. Wrong order of input parameters.
* Fix: Scanner. File system scanner. Return file parameters in the strict order.
* Fix: Namespaces for ScannerQueue.php.
* Fix: Scanner. Minor performance improvement.
* Fix: Do no check online admins when feature is disabled.
* Fix: Firewall. Update. SpbcWP\Firewall\FW::data_tables__delete()
* Fix: SFW: maximum priority for trusted networks
* Fix: Fixed spbc_fix_error_messages() for custom filters
* Fix: Error while merging with branch 'mod/scanner.scheduled.implementing-queue.SR'.
* Fix: Addition to the branch merge 'mod/scanner.scheduled.implementing-queue.SR'. JS minimized files.
* Fix: Scanner. False positive on functions.
* Fix: Modal window. Max width.
* Fix: Modal window. Center the content.