== Changelog ==

= 11.8.5 =
fix: code regression in custom slug login due to code compliance changes
fix: wp cli fails to load due to worng class declaration ( code compliance problem )

= 11.8.4 =
fix: happyfence sec cli fails on free version due to wrong settings
fix: cli sec fails due to regression on logging system

= 11.8.3 =
enhancement: scanner now normalize directly URI to match a better range of cases

= 11.8.2 =
fix: susq scanner may not match correctly regex due to wrong pre-filter

= 11.8.2 =
fix: susq scanner may not match correctly regex due to wrong pre-filter

= 11.8.1 =
fix: integity check checker registered with wrong parameters fails

= 11.8.0 =
enhancement: now scanners have different priority during registration so the don't compete 
enhancement: added more logging also for debugging and ip investigation
enhancement: added full execution scanner chain debug logging to inspect/audit 

= 11.7.18 =
moved: full changelog from readme to changelog.md
enhancement: better organization of logging channels

= 11.7.17 =
* Enhancement: Logging system improved. Blocked threats now include additional attacker details for better forensic analysis.

= 11.7.16 =
* fix: postfilterscanner option is too aggressive 

= 11.7.15 =
* fix: resh scanner fails due to wrong variable conversion
* fix: block user enumeration option not rendered correctly 

= 11.7.14 =
* fix: light filter not saved as expected.

= 11.7.13 =
* fix: author enumeration scanner not running even if activated - HOTFIX
* fix: TOR & VPN guard scanner not running even if activated - HOTFIX
* fix: option block user enumeration not saved correctly 
* enhancement: author enumration scanner now checks both redirect and direect scan

= 11.7.12 =
* enhancement: 403 will be showed as 200 with custom access denied page to confuse scanners
* enhancement: changed priority for scanners to maximum
* enhancement: all die messages are now handled by common function
* removed: it is not possible to disable code integrity check anymore
* enhancement: core autofilter blocks automatically sensitive files requested

= 11.7.11 =
* enhancement: input filter discard unknown variables without blocking the code
* enhancement: more detailed loggin when changing flag values



= 11.7.10 =
* enhancement: use leet for patterns to avoid aggressive filters (eg. mod_security ) to break the HappyFenceNG admin interface.
* enhancement: better code for custom login path interceptor
* fix: log view not fully working as expected
* fix: miss OK placeholder raise errors in some scanners
* fix: ipbl guard wrong variable breaks the code execution

= 11.7.9 =
* fix: some imports could randomly raise errors during plugin activation

= 11.7.8 =
* fix: burn table not uninstalled correctly when requested.
* fix: logger raise error due to autoloader mismatch
* known bug: cf guard "admin only mode" not working as expected.
* fix: UI anti tampering flag not rendered correctly
* fix: failfast does not handle empty burn token correctly
* fix: UI Resh interface does not show message after saving

= 11.7.7 =
* upgrade: library
* upgrade: patterns
* fix: integrity panel shows apache options even if the web server is not instead of hiding panel.

= 11.7.6 =
* enhancement: more log verbosity for uploadguard
* fix: uploadguard can mismatch binary when dealing with backticks
* fix: wp-cron blocked from scanners
* enhancement: .htaccess now enabled only if the server is apache.
* fix: wayback machine filtered by scanners
* fix: paging in logging
* enhancement: call to service with unknown ip will be logged with full headers for better inspection.

= 11.7.5 =
* enhancement: better 404 evasion trap.
* fix: template selection 404 return always pageId 0 
* fix: 404 mode resets to stealth after committing changes
* fix: uri pattern scanner empty property raise a warning


= 11.7.4 =
* fix: service rest filter does not appear in the running processes as expected.
* fix: 404 cloaking not working as expected
* enhancement: better cfguard flare id message

= 11.7.3 =
* fix: blockip guard expects multiple ips to check
* fix: postguard block wp-cron due to comparison mismatch
* fix: wp-cli not working due to autoload mismatch in util class


= 11.7.2 =
* fix: clourflare guard chek ray id and other headers
* fix: auto-reverse-proxy discovery
* fix: geoip resolver
* new: added anti wp-links-opml pattern

= 11.7.1 =
* new: added xss, xframe, referrer automatic headers
* new: added automatic deny for readme.txt/html and debug.log access 
* fix: typo prevents custom login from working correctly
* enhancement: added note for custom login (secure https only)

= 11.7.0 =
* fix: code autoloader raise errors trying to include some features

= 11.6.0 =
* new: added cloudlfare ip detector
* fix: Cf enabler does not work as expected

= 11.5.0 =
* refactor: moved ip resolution to a central utility
* fix: uripatternscanner blocks access to wp-admin due to redirect 
* fix: privacy banner use wrong text color instead of the one provided by wordpress template setup

= 11.4.0 =
* fix: rest filter bug prevents correct access of privacy plugin to the std banner.

= 11.3.1 =
* fix: ipbl service registration bug
* fix: acore shield slug check even if disabled

= 11.3.0 =
* enhancement: added more that 70 audit checkpoints for better security log inspections.
* fix: wrong properties conversion can lead to unexpected errors
* fix: quarantine database insert not working 
* fix: warning remains "ON" even if the corresponding feature is disabled

= 11.2.16 =
* new: added TOR guard protection in IPBL menu
* new: added PROTON VPN protection in IPBL menu

= 11.2.15 =
* fix: wrong adv shields login rate interval input field 
* fix: wrong adv shields login max attempt input field 
* fix: wrong resh scanner custom dir input field 

= 11.2.14 =
* fix: ipv6 ip/cidr check may fail due to negtive bit shift
* fix: wrong message representation in deep filtering menu
* suspicious query menu does not show correclty all available options
* db logger won't insert correctly logs into database due to wrong conversion in facility/severity

= 11.2.13 =
* fix: filter management in db log
* fix: some endpoints wrongly check for get action istead of post

= 11.2.12 =
* improvement : better data input filtering
* improvement : now invalid data does not raise a "die" but return a placeholder used to deliver useful message to the end-user
* fix: custom slug worngly filtered as string and not as slug
* fix: advanced view html markup was re-filtered by renderer


= 11.2.11 =
* improvement: all errors logs in logcore file
* improvement: removed legacy filter which causes bugs in endpoint selection
* fix: dblogger can crash due to wrong variable assigment
* improvement: extedended severity and facility selection
* changed: ring0 is now init in facility
* compliance: various changes for wordpress code compliance 

= 11.2.10 =
* fix: wrong url for happtwpress.com
* improvement: improved security checks in endpoints

= 11.2.9 =
* fix: various bug fixes

= 11.2.8 =
* new: oebmed option in advanced menu
* new: x-pingback option in advanced menu

= 11.2.7 =
* fix: sometimes security checks can refuse admin input even if it is valid due to a bug.

= 11.2.6 =
* fix: various bug fixes

= 11.2.5 =
* fix: interface flags on some pages does not show correctly.
* fix: MFA feature in premium editions non working correctly due to null initialization.

= 11.2.4 =
* fix: uripatternscanner bug may lead an internal server error

= 11.2.3 =
* code compliance: removed cdn load of javascript library.

= 11.2.2 =
* fix: minor fix in privacy menu management

= 11.2.1 =
* fix: wrong data conversion may lead to unchecked options in menus.

= 11.2.0 =
* new(last): better user view (graphic and usability enhancement) - part VI
* code cleanup
* wordpress code compliance

= 11.1.6 =
* new(partial): better user view (graphic and usability enhancement) - part V
* fix:remote shell scanner malfunction due to wrong variable conversion
* new: better disclaimer in welcome page

= 11.1.5 =
* fix: minor fixes in GUI 
* fix: some endpoint return 404 due to FailFast mismatch
* fix: wrong option table in license view
* new: brand new license table and welcome page
* new(partial): better user view (graphic and usability enhancement) - part V

= 11.1.4 =
* new:added opt-in for Geoip
* new(partial): better user view (graphic and usability enhancement) - part IV

= 11.1.3 =
* new:FastFail™ Anti Hijacking protection
* new(partial): better user view (graphic and usability enhancement) - part III


= 11.1.2 =
* fix:new dashboard does not show "offline" services when "show only running" option is selected.
* fix:advanced sysshield interface error due to missing licensing information 

= 11.1.1 =
* new(partial): better user view (graphic and usability enhancement) - part II
* new: release, version and build available in all pages for quick check
* new: lockout message for code integrity break Redesigned
* new: error message window now has the new style
* refactor: some components were moved to improve code clarity

= 11.1.0 =
* fix: rendering can fail due to static function declared as non-static
* fix: WPCli list_hf_filters shows endpoints that are not services due to new architecture
* fix: Backing services does not answer when calling from ajax
* WP Code compliance
* fix: bug introduced from code compliance changes:
* -> Cannot render due to wrong script order serialization
* -> Unmatched variabiles in javascript raise null exception
* -> Autoloader checks for removed GEOIP class (moved to premium only code)
* -> Geoip menu completely removed from the plugin does not show in the feature menu
* -> GUI Ajax endpoint does not register correctly
* -> Templating engine fail to render correctly pages due to access error to backend variabiles
* -> Mismatch in params can lead to undefinite state of current view



= 11.0.0 =
* Release codename: Slim Lighter
* major: code refactor for performance improvement
* NEW(partial): better user view (graphic and usability enhancement)

= 10.3.2 =
* compliance: wordpress code compliance

= 10.3.1 =
* fix: rendering in privacy options displays json format instead pure html.

= 10.3.0 =
* minor: fix ip filter.
* new: dashboard shows release version, build and name
* new: dashboard shows current WP prefix with warning for std wp_ installations
* fix: uguard default allowed extension error due to mismatched enabled controls
* fix: rendering sysshield interface rain an error due to wrong classname call
* new: anti tampering now uses PK Key 
* fix: block user enum does not activate correctly
* fix: display privacy policy inline banners
* compliance: wordpress.org code compliance

= 10.2.2 =
* minor:fixes and code cleanup.

= 10.2.1 =
* minor:small refactor, cleanup code, compliance

= 10.2.0 =
* new:ZTV secure validator(s) now lock out the attacker (even in admin mode)

= 10.1.0 =
* new: secure data validator(s)

= 10.0.1 =
* fix: uninstall may forget to remove tables even if required
* fix: database cound return null values that is not allowed

= 10.0.0 =
* Release codename: Armored Core
* major: code cleanup, security compliance, wp compliance

= 9.9.0 =
* fix: sometimes LM gets wrong answare deactivating random features

= 9.8.0 =
* improved database management to avoid conflicts and errors during license migration

= 9.7.18 =
* fix: multiple name collision

= 9.7.17 =
* fix: mfa engine override ui due to name collision

= 9.7.16 =
* fix: geoip module fails due to wrong filename

= 9.7.15 =
* fix: plugin reinstall may fail if db tables were preserved

= 9.7.14 =
* fix: Under certain conditions DB Log creation may fail

= 9.7.13 =
* fix: Log Db Storage may not work when activated due to erroneous flag

= 9.7.12 =
* fix: dashboard output does not match with current state

= 9.7.11 =
* fix: remote shell scanner may not work due to erroneous flag setup

= 9.7.10 =
* fix: 404 trap may fail due to incorrect call

= 9.7.9 =
* fix: siem logger fails due to incorrect access level
* fix: remote shell scanner can fail in result evaluation due to an error in db manager

= 9.7.8 =
* fix on db manager, can fail during initialization 

= 9.7.7 =
* fix on license management ( freemius compliance )

= 9.7.6 =
* fix on virtual function call (upgrade problem)

= 9.7.5 =
* fix on anti-tampering mode, added better messages.

= 9.7.4 =
* fix missing call due to unmatched import

= 9.7.3 =
* fix on module management causing crash due to mismatch filenames

= 9.7.2 =
* code compliance

= 9.7.1 =
* fix IP Blacklist user interface(minor)

= 9.7.0 =
* added IP Blacklist functionality
* minor fixes on CF guard

= 9.6.3 =
* add "admin only" option on CloudFlare Guard

= 9.6.2 =
* fix on CloudFlare Guard ip management

= 9.6.1 =
*added vslug improvement for wp-admin custom slug

= 9.6.0 =
*improved security on custom slug authentication
*added uniform access error management output
*fixed some issue with after admin login
*fix on geoip database

= 9.5.1 =
* activation/deactivation hook fix (minor)

= 9.5.0 =
* improved security check on inputs
* re-enabled geoip for free version
* added custom page for core security errors
* better logging for security errors

= 9.4.3 =
* wp code compliance (minor)
* cf guard menu fix (minor)

= 9.4.2 =
* core filters minor fixes ( added logging )

= 9.4.1 =
* extended wp-cli commands to show status of each hook

= 9.4.0 =
* new wp-cli commands to show active filters

= 9.3.1 =
* wp-cli fix

= 9.3.0 =
* Database management improvements (Major) and bugfix

= 9.2.0 =
* Database management improvements (Major)

= 9.1.2 =
* Code compliance

= 9.1.1 =
* Minor fixes on database management

= 9.1.0 =
* WP code compliance
* Major fix on MFA Encrypted Db

= 9.0.0 =
* Release codename: Phoenix
* Major internal refactor affecting over 100 classes
* Centralized encryption/decryption handler for all database storage
* Enhanced Remote Shell Scanner:
  - Supports quarantine, delete, trust, suspicious actions
  - Anti-duplicate hashing to prevent redundant detections
* Auto-registration of all modules on system boot


= 8.2.1 =
* fix on privacy module

= 8.2.0 =
* added dashboard admin interface
* added WP-CLI dashboard

= 8.1.2 =
* minor code refactor to improve memory footprint and performances
* upgrade to freemius 8.1.2 (lastest version)

= 8.1.1 =
* removed redundant logging causing slowness

= 8.1.0 =
* refactor on privacy subsystem 
* added missing terms url management in privacy module
* added better options descriptions in privacy module
* changed order of elements to improve readability in privacy module 

= 8.0.2 =
* minor fixes on privacy subsystem 
* added better options descriptions

= 8.0.1 =
* minor fixes on menu system 

= 8.0.0 =
* Release Name:  Code Shifter
* major refactor for compliance with wordpress and Freemius
* code performance optimization
* various minor bug fixes

= 7.1.0 =
* optimization in core system performance 
* optimization in two-way log management

= 7.0.3 =
* minor fix on logging system

= 7.0.2 =
* Added dedicated file channel for core logging (audit)

= 7.0.1 =
* Fix circular reference that caused 500 Internal Server Error when trying to log to file

= 7.0.0 =
* Release Name: Firecall
* Major fixes in code execution
* Added INIT Logging to help customer Troubleshooting

= 6.3.0 =
* performance improvements
* added multi-instance barrier check

= 6.2.0 =
* code cleanup
* minor fixes 
* wp code compliance

= 6.1.1 =
* minor fixes 

= 6.1.0 =
* Fixed uninstaller
* Improved boot system
* Fix redundant booting (loop)
* Fix runtime error when raising core exceptions

= 6.0.3 =
* Minor fixes

= 6.0.2 =
* Fixes in logging system
* Fixes in bootstrap sequence

= 6.0.1 =
* Improved code stability
* Improved detailed logging 

= 6.0.0 =
* Release Name: Fermented Firewall
* Major refactoring of core components
* Critical bug fixes and security improvements
* Performance optimizations
* Introduction of new features
* Improved modularity and maintainability


= 5.0.2 = 
* added Advanced Menu
* updated editions compare

= 5.0.1 =
* minor fix on plugin activation

= 5.0.0 =
* Release name: Dragon
* Feature comparison in license menu
* Better welcome page
* New free features implemented
* WP-Cli integration for recovering random slug when active

= 4.5.3 =
* Redesigned menu flow subsystem for clarity
* Fix on license panel

= 4.5.2 =
* Fix on menu subsystem

= 4.5.1 =
* New Welcome page with better Description
* New log functionality for premium editions

= 4.5.0 =
* New menu system with functional grouping
* Fixed permission registration issues
* Fixed database encryption/decryption logic
* Fixed "NotFound warning in admin interface"
* Added WP-CLI command to disable Cloudflare Guard: `wp happyfenceng disable-cf-guard`

= 4.4.0 =
* Added fine-grained control for Suspicious Query Filter: enable/disable individual patterns via admin panel
* Extended pattern detection for real-world attack vectors
* Improved internal error logging and graceful degradation system

= 4.3.2 =
* Code compliance fixes for WordPress Plugin Directory guidelines (warning problems)

= 4.3.1 =
* Code compliance fixes for WordPress Plugin Directory guidelines (parsing problems)

= 4.3.0 =
* Code compliance fixes for WordPress Plugin Directory guidelines (security improvements)

= 4.2.2 =
* refined internal permission system

= 4.2.1 =
* fixed errors in db initialization 

= 4.2.0 =
* removed redundant ascendant calls 

= 4.1.0 =
* better exception handling 

= 4.0.2 =
* code cleanup ( light-refactor)

= 4.0.1 =
* Fix tags

= 4.0.0  =
* Release name: Butterfly
* Major code change, security improvements, new anti-tampering and anti hack on mem protection  

= 3.3.1 =
* Fix inheritance inconsistency 

= 3.3.0 =
* Anti-bruteforce tampering 

= 3.2.3 =
* Minor fix on SYS instance hierarchy

= 3.2.2 =
* SYS LSB cache

= 3.2.1 =
* Fix on admin interface

= 3.2.0 =
* Better memory management

= 3.1.5 =
* Fix wrong logger autoselect

= 3.1.4 =
* Better exception handling

= 3.1.3 =
* Logger code improvements

= 3.1.2 =
* Removed quarantine av (not supported anymore)

= 3.1.1 =
* Fingerprint fix

= 3.1.0 =
* Major changes for performance improvements + bugfix

= 2.1.3 =
* Reduce memory footprint

= 2.1.2 =
* Guard fix to avoid wp crash

= 2.1.1 =
* Minor fixes

= 2.1.0 =
* Changed signature

= 2.0.3 =
* Minor fixes

= 2.0.2 =
* Minor fixes

= 2.0.1 =
* Minor fixes

= 2.0.0 =
* Production release

= 1.6.0 =
* Major improvements
* Anti Tampering
* Anti Hook

= 1.5.0 =
* Major improvements

= 1.4.0 =
* Added PostFilter for indepth filtering

= 1.3.0 =
* Added anti-inference user scanning (aka login enumeration)
* Added admin db log interface with paging and filtering
* Added geoip blocking 
* Added uploadguard with reverse shell and encode base64 scanner
* Added anti-reverse shell (filesystem) scanner

= 1.2.0 =
* Added log and SIEM facility
* Added 404 Shield Black Mode, Template Mode, Stealth Mode enumeration defence

= 1.1.0 =
* Added MFA
* Fix and improvements 

= 1.0.0 =
* Initial HappyFenceNG release
* Complete architectural redesign from HappyFence
* Enterprise tiered licensing system with Freemius integration
* Advanced threat detection and filesystem scanning
* Ghost method security and distributed checks
* REST API protection with endpoint blocking
* Intelligent XML-RPC and pingback management
* Advanced login security with rate limiting
* Real-time malware detection (Enterprise tier)
* Automated security scanning (Agency tier)
* TOP hardening features
* Modular, scalable enterprise architecture


