OwlCyberSecurity - MANAGER

Edit File: CHANGELOG.php

<?php die() ?> Admin Tools 4.2.0 ================================================================================ ! Yet another BIG Joomla! 3.7.0 bug throws an exception when using the CLI backup under some circumstances. ! Joomla! 3.7.0 has a broken System - Page Cache plugin leading to white pages and wrong redirections - Removing the automatic update CLI script. Joomla! 3.7.0 can no longer execute extension installation under a CLI application. # [HIGH] Follow symlinks option would not work in the NginX Maker due to a missing newline Admin Tools 4.1.3 ================================================================================ ! The workaround to Joomla! 3.7's date bugs could cause a blank / error page (with an error about double timezone) under some circumstances. Admin Tools 4.1.2 ================================================================================ ! Joomla! 3.7.0 broke backwards compatibility again, making CLI scripts fail. ! Joomla! 3.7.0 broke the JDate package, effectively ignoring timezones, causing grave errors in date / time calculations and display + gh-115 Monitor critical files and receive an email when they change + gh-116 Monitor Super Users, receive an email when Super Users are added outside of Joomla's Users page and automatically block them ~ Record creation date of .htaccess / nginx.conf / web.config in the user's local timezone instead of GMT in the file's header ~ PHP File Change Scanners now display dates and times in the user's local timezone ~ Show local timezone in the security exceptions and auto-blocked IP addresses views ~ Suppress misleading login failure emails for blacklisted IPs. ~ Suppress the Joomla mail system's error message when trying to send an email to an email which is empty or invalid ~ Disable RFIShield when it's not necessary. See https://www.akeebabackup.com/home/news/1674-not-a-vulnerability-in-admin-tools.html ~ Workaround for badly configured servers which print out notices before we have the chance to set the error reporting ~ Workaround for NginX choking on CRLF line endings if they are accidentally present in the NginX Conf Maker generated file # [LOW] Work around Joomla bugs which prevented the CHANGELOG from being rendered correctly in the Control Panel page # [LOW] www to non-www redirection sometimes fails if the site is in a subdirectory # [LOW] Joomla! 3.7 added a fixed width to specific button classes in the toolbar, breaking the page layout # [LOW] Fixed detecting if IP workarounds are needed during QuickStart Admin Tools 4.1.1 ================================================================================ ! PHP fatal error if the blocked IP was from a private network and you didn't have any plugin loading FOF 3 already installed Admin Tools 4.1.0 ================================================================================ + Warning (with documentation link) when you have too many blacklisted IPs + gh-109 Include the whole request in the file log while using the WAF Blacklist feature + gh-111 Suggest turning on Enable IP Workarounds when we see local network IPs being automatically blocked + gh-112 Prevent backend account creation from the frontend of the site + gh-114 Email when Global Configuration and / or component Options changes take place + gh-117 Prevent the plugin from being disabled through the Plugins Manager + gh-118 Block requests using PHP Wrappers # [MEDIUM] gh-120 Fixed creating scan diffs while running the scanner from CLI # [LOW] Fixed ordering in Scan results page # [LOW] gh-124 Do not enable link migration if we don't have a list of old domains Admin Tools 4.0.2 ================================================================================ + Added warning if database updates are stuck due to table corruption + Added font files to the expiration optimization features of NignX and Htaccess Maker + Added a Published field to the WAF Blacklist records, allowing you to enable/disable rules + Added mitigation for user registration exploit in Joomla! 3.4.4 to 3.6.3 (inclusive). The mitigation rule is added in the WAF Blacklist feature. ~ .htaccess Maker: Remove default expiration time for HTML documents because it conflicts with back-end editing # [HIGH] NginX Conf Maker generates invalid code for allowed PHP files # [HIGH] WAF Blacklist was incompatible with SEF URLs as it was being triggered onAfterInitialize instead of onAfterRoute # [MEDIUM] Web.config Maker: Block access from specific user agents feature causes a 500 Internal Server Error # [MEDIUM] Fixed custom HTML template used to display the block message # [LOW] The automatic redirection to HTTP when you're using the HSTS header in the .htaccess Maker would end up in an invalid URL on some servers with a bad configuration # [LOW] The Security Exceptions page had the wrong default ordering # [LOW] Fixed modal windows when graphs are not displayed in the Control Panel # [LOW] NginX Conf Maker and Web.config Maker claim they are not supported when they actually are # [LOW] NginX Conf Maker: “Optimise file handle cache” and “Optimise output buffering” options were mixed up # [LOW] Removed unused option in “Admin Tools Joomla! Update Email” system plugin # [LOW] Could not preview generated nginx.conf and web.config Admin Tools 4.0.1 ================================================================================ ! YOU MUST UPDATE TO THIS RELEASE MANUALLY. The Download ID was not registered with Joomla, making updates from 4.0.0.b1, 4.0.0.b2, 4.0.0.rc1 and 4.0.0 impossible. # [MEDIUM] Master password does not work with passwords containing special characters # [MEDIUM] Configure Permissions does not work with folder names containing special characters # [MEDIUM] Administrator Password Protection does not work with passwords containing special characters # [MEDIUM] PHP File Scanner's front-end scanning feature does not work with secret keys containing special characters # [LOW] If you were living under a rock and hadn't updated to Admin Tools 3.6 or later the last 2 years you may get a fatal error after update to 4.0 # [LOW] Layout / Javascript issues with IE11 on the Configure WAF page Admin Tools 4.0.0 ================================================================================ + Improved performance while importing settings with thousands of IP addresses + Added option to display hidden files in Permissions Configuration page # [LOW] Missing language key for user signup notes Admin Tools 4.0.0.rc1 ================================================================================ ~ Changing the #__akeeba_common table schema ~ Exceptions from WAF are not available on broken servers which don't set the HTTP_HOST environment variable # [HIGH] The PHP File Change Scanner front-end scheduling feature was broken # [HIGH] The Professional package was missing the CLI scripts # [MEDIUM] The Quick Setup Wizard would claim to have already run even on fresh installations (thanks @brianteeman) # [LOW] Missing language strings # [LOW] PHP File Change Scanner emails (from CLI) displayed the HTML markup instead of formatted text # [LOW] The “Reload update information” button in the control panel page resulted in an error # [LOW] Incorrect language strings, thank you @brianteeman # [LOW] The warnings about the IP white/blacklist being disabled were displayed under the wrong conditions # [LOW] PHP notices on installation from missing method arguments Admin Tools 4.0.0.b1 ================================================================================ + Rewritten using FOF 3.0 + Improved detection and removal of duplicate update sites + You can export/import WAF Blacklist and Exceptions (always forbidden and always allowed component/view/task access) + Highlight the suspicious and malicious matches on the file source in the PHP File Change Scanner results + IP whitelist will warn you when the feature is not enabled + IP blacklist will warn you when the feature is not enabled + .htaccess / nginx.conf / web.config maker: added .well-known to the default list of allowed access folders for non-PHP files + Enabling HSTS in .htaccess Maker will now also avoid unsafe (HTTP) redirections wherever possible and not send the HSTS header over plain HTTP. Does not apply to NginX Conf and web.config Makers. PLEASE READ THE DOCUMENTATION! + URL Redirection is now available in the free of charge Core release ~ Extremely conservative .htaccess Maker settings applied by the Quick Setup Wizard because people don't bother reading the big, fat warning above the apply button ~ Joomla! 3.6 has moved the logs folder inside /administrator. Our software is now adjusted for this change. ~ Warn about eAccelerator ~ Warn about end of life PHP versions ~ Remove obsolete FOF 2.x update site if it exists # [LOW] Joomla bug would cause URL redirections to issue HTTP 303 See other (temporary) redirection instead of 301 Moved (permanent) redirection # [HIGH] WAF Blacklist with RegEx matching would block all requests all the time # [HIGH] Joomla! "Conservative" cache bug: you could not enter the Download ID when prompted # [HIGH] Joomla! "Conservative" cache bug: you could not apply the proposed Secret Word when prompted # [HIGH] Joomla! "Conservative" cache bug: component Options (e.g. Download ID, Secret Word, front-end file scanner feature) would be forgotten on the next page load