BruteProtect

BruteProtect is no longer supported or under active development In August of 2014, BruteProtect became a part of the Automattic family, and our technology has been integrated into Jetpack. Please upgrade to Jetpack to continue using BruteProtect.

2.5

• No more new API keys.

2.4.2

• Fix error in 2.4.1, fix transients in multisite to not autoload

2.4.1

• Fix potential circumvention method (Props Ruben van Vreeland - bitsaver.nl)

2.4

• Improve casting in API calls
• Add 403 status to blocked logins (props neoxx)
• Adding announcement for new Jetpack features
• Remove the ability to link your site to My.BruteProtect.com
• Announcing the closing of My.BruteProtect.com services as of February 2015

2.3.3

• Patch brute_check_preauth so that Google Apps login will work (props jay-s)

2.3.2

• Remove shoutouts

2.3.1

• Fix false downtime notifications

2.3

• Add ability for users to turn off monitoring
• Improve IP detection
• Added noncing on admin pages

2.2.6

• Minor updates admin config, removed secure login

2.2.5

• Fixed URL typo (props koke)

2.2.4

• Fix potential warning if current user isn't set (props migueluy)

2.2.3

• Add in filters for private IPs (props tellyworth)

2.2.2

• The future is bright

2.2.1

• Replaced placeholder with dynamic data

2.2

• Reformatted all plugin code to meet WP style standards
• Added icons for WP 4.0 Plugin Browser
• Removed secure login option
• Changed link to my. mechanism from username/pass to key

2.1

• BruteProtect dashboard gets a makeover
• Fixed some broken links
• Fixed the way that beta versions of WP report that they need updating

2.0.9.2

• Fix minor issue with secure login

2.0.9.1

• Fix minor issue with secure login

2.0.9

• Change the hook used for our backstop check to ensure complete effectiveness
• Improve secure login redirect

2.0.8.1

• Fixing a glitch that deactivated the Secure Login feature
• Improving the urls in the Secure Login feature

2.0.8

• Improve the way site urls are saved
• Improve how we determine if a site is linked to my.bruteprotect.com

2.0.7

• Fix minor bug in multisite admin

2.0.6

• Support for sites where WordPress is installed in a sub folder
• More readable UI
• Fixed bugs that where causing PHP errors

2.0.5

• Now you can opt out of the Secure Login feature from the login page
• Secure Login is automatically disabled if you are connecting to your site via SSL already

2.0.4

• Add color options for the front end widget
• Add a site disconneciton button
• Improve plugin deactivation
• Bug fixes in the back end widget

2.0.3

• Minor fixes to the api calls

2.0.2

• Use strval on subdirectory url

2.0.1

• Add in core update
• Minor bug fixes
• Track subdirectory urls

2.0

• Redesign everything
• Add My BruteProtect
• Add remote secure login
• Add remote monitoring
• Add remote plugin monitoring and updating
• This update includes over 2,000 man hours of programming and design work, and countless sleepless nights. Thank you to Rocco, Jesse, Stephen, Jeff, Derek and Ryan, and to our incredibly patient significant others. We really hope that everyone loves what we've done.

1.1.6

• Make the security auditing messaging less offensive
• Add in better text around the text requiring users to get a unique API key for each site

1.1.5

• Fix offline blocked attempt counter
• Add one-click-clef back in
• Add information about Pro
• Add information about our security auditing

1.1.4.1

• Allow for graceful fallback if filter_var isn't available
• Corrected CloudFlare header

1.1.4

• Updated API key process to make it even easier (API key is auto-added)
• Updated Math CAPTCHA error handling to help teach people about login form best practices
• Updated IP retrieval function to ensure as few false readings as possible

1.1.3

• Bug fix to the API Endpoint

1.1.2

• Update API Endpoints

1.1.1

• Minor bug fixes

1.1

• Continued code improvements
• Improve troubleshooting options
• Improve methodology for fetching remote IP... using X_FORWARDED_FOR and HTTP_CLIENT_IP if available
• Add options for privacy
• Update icon for 3.8
• Update interface

1.0.0.2b

• Remove 1-click clef until we figure out the bug.

1.0.0.1b

• File got corrupted when uploading to the plugin repository. All better now

1.0b

• Bite the bullet and say 1.0
• Code stabilization and optimization
• Performance improvements

0.9.10

• More backwards compatibility

0.9.9.9d

• Squash a bug which caused an error in older versions of PHP

0.9.9.9c

• Integrate Clef install
• Add debug information for hosts, improve copy for sites with broken install

0.9.9.9b

• Remove left over debug code

0.9.9.9

• Fix error with server identification and errors in older versions of PHP
• Version Codename: I really don't want to say 1.0

0.9.9.8

• Fix error with cached blocks

0.9.9.7

• page-now fallback fix

0.9.9.6

• Fix bug on local environments

0.9.9.5

• Major code rewrite! Every line of code was reviewed, optimized, and made prettier. It can be prettier, though, and we're going to keep working on that
• Blocked users from obtaining a key on a local environment
• Laid groundwork for Clef Integration

0.9.9

• Add in the ability to whitelist IPs or IP blocks
• Improve wp-login.php performance via $pagenow -- thanks Mark Barnes!

0.9.8.6.2

• Don't ever block localhost

0.9.8.6.1

• Fixed typo

0.9.8.6

• Expired transients now get cleaned up-- thanks KirkM, Tevya, David Anderson, and Seebz!

0.9.8.4

• Fixed a few PHP parsing notices, thanks Till and clwill!

0.9.8.3

• Added hooks: brute_log_failed_attempt and brute_kill_login -- both are passed the offending IP address

0.9.8.2

• Remove unused code from upcoming functionality.

0.9.8.1

• Admin can now prevent other users from seeing BruteProtect statistics
• Fixed a typo in the admin panel

0.9.8

• Added a fallback for failed multisite blog count reporting
• Added the ability to hide BruteProtect stats from network blog dashboards

0.9.7.2

• Fixed a minor display issue in 0.9.7.1

0.9.7.1

• Fixed a minor display issue in 0.9.7

0.9.7

• BruteProtect now supports multisite networks! One key will protect every site in your network, and will always be free for small networks!
• Fixed API URI logic so that we fall back to non-https if your server doesn't support SSL
• Fixed admin config page image (thanks, flick!)
• Added index.php to prevent directory contents from being displayed (thanks, flick!)

0.9.6

• Admin-side updates for better compatibility and readability -- Thanks again, Michael Cain!

0.9.5

• Changed API server to HTTPS for increased security
• Improved domain check method even further
• Added a "Settings" link to the Plugins page
• Made things prettier

0.9.4

• Changed domain check method to reduce API key errors

0.9.3

• Added hooks in for upcoming remote security and uptime scans

0.9.2

• Fixed error if Login Lockdown was installed
• Improve admin styling (thanks Michael Cain!)
• Added statistics to your dashboard
• If the API server goes down, we fall back to a math-based human verification