8.1.3
Fix6 Tweak3 Security2Fixes
- File Logs not rotating.
- PHP warning when loading Icon Fonts in certain configurations.
- Don't attempt to Hide Backend when a Cron request is being processed.
- Prevent entering invalid date values when selecting a custom date range in the Security Dashboard.
- Preliminary PHP 8.1 compatibility.
- File Change "notify_admin" settings validation error.
Tweaks
- iThemes Security now requires PHP 7.3 and WordPress 5.9 or later.
- Add "Ban Lockout" button to the Active Lockouts card.
- Thanks to Calvin Alkan for reporting the security issues fixed in this release.
Security
- Add support for encrypting Two-Factor Mobile App secrets. Enable via Tools -> Set Encryption Key.
- Deprecate Automatic Proxy Detection. Instead, manually configure Proxy Detection or use Security Check. Fix IP spoofing attacks.