Solid Security
Fixes
- Comparisons of IPv4 addresses and ranges now include the IP's at the edge of the ranges.
- IPv4 tests now work as expected when deciding if a blacklisted IP or range overlaps a whitelisted IP's and ranges.
- Fixed styling issue that affected the display of the horizontal tabs on settings pages in WordPress 4.5.
- Replaced old module sorting order in settings screens.
- Fixed PHP 7 compatibility issue that triggers the following error: "Uncaught Error: Call to undefined function mysql_get_client_info()".
- Fixed warnings and errors that could occur when deleting the plugin.
- Fixed warning that could occur on a failed login when Local Brute Force Detection is disabled.
- All data added to the options table by iThemes Security is removed on uninstall.
- Fixed the cause of the following warning: call_user_func_array() expects parameter 1 to be a valid callback, class 'ITSEC_SSL_Setup' does not have a method 'execute_deactivate'
Tweaks
- When a lockout is being executed, wp_logout() will only be called if the current page request comes from a logged in user. This prevents plugins that log logout events from logging log outs from unknown users.
- Improved the descriptions used for some of the data displayed in the "System Information" section of Security > Dashboard.
- Added "Use MySQLi" entry to the "System Information" section of Security > Dashboard to show whether the MySQLi driver is enabled.
- Updated the "SQL Mode" entry in the "System Information" section of Security > Dashboard to show the full details if that value is set.
- Improved code that ensures that tables and options table entries created by iThemes Security are removed on uninstall only when no other iThemes Security plugin is active.
Fixes
- Removed Yandex and Sogou from the HackRepair blacklist as they are legitimate search engine bots.
- No longer enables display of database errors when an event is logged.
Tweaks
- Added detailed information about Sucuri malware scan errors to Malware Scan log details.
Compatibilitys
- Added support for ITSEC_TEST_MALWARE_SCAN_DISABLE_SSLVERIFY. Setting it to true can bypass "SSL peer certificate or SSH remote key was not OK" errors on servers with bad SSL configurations.
