SecuPress Pro 2.3.19 NULLED

= 2.3.19 =
* 23 June 2025
* Fix: Remove "1" from "Bad Usernames" because Man/age WP use it as a fake login and it break the connection. You don't say.
* Fix: Possible multiple notices when malware database is updating.
* Fix: Possible PHP Warning when renaming a username.
* Fix: Fatal error when saving Firewall settings
* Fix: Missing captcha session on registration page
* Improve: Better UI and UX. We use the WP login page and not our own page design (byebye secupress_action_page() on some modules)
* Improve: Module "Password Lifespan" now depends of "Force Strong Passwords", because if you care about the lifetime of a password, I bet you care tyour their strengh too and before.
* Improve: Constant SECUPRESS_MODE improved, read the doc: https://docs.secupress.me/article/237-secupressmode
* Update: ZXCVBN libs

= 2.3.18.1 =
* 13 June 2025
* Fix: Cookie hash file was not created when running the autofix
* Fix: "Bad Url Access" and "Bad File Extensions" were tagged as "fixable in pro only"
* Fix: "Already done your way" message on "Security Keys" module was wrong.
* Fix: Upgrader should always check the mu version file
* Fix: Remove "mail*" from the bad usernames list, too wide (Hello Maïlis & Mailisa...)
* Improve: Regenerating salt keys will now display a notice message as a feedback #UX
* Improve: Some strings were not translated.
* Improve: Better handling for "Rename User Names"
* Improve: "Show Admin Bar Menu" & "Hide Contextual Help & Tips"
* New: "Show Contextual Help & Tips" and "Admin Bar Menu" are now a user setting

= 2.3.16.2 =
* 24 May 2025
* Fix: A possible loop when login
* Fix: A too big SQL query on site with too many users

= 2.2.5.1 =
* 21 Dec 2023
* Security Fix: TOCTOU in Limit Login Attempts (Thanks to Konan Nagashima)
* Improvement#963: Add context for secupress_die()
* Improvement: Add DE translations (Thanks to Klaus Bei)
* Improvement: Status "bad" into "warning" on bad plugins scanner results in free version
* Fix#1036: Remove REST API calls made using query parameters (Thanks to JB Audras) + usage of rawurldecode() (Thanks to Aether Black)
* Fix#1035: Malware scan file too big
* Fix#1034: Matomo was blocked
* Fix#1033: Bad referer default list, "cialis"
* Fix#1032: Uncaught TypeError: Cannot read properties of null (reading 'querySelectorAll')
* Fix#1030: Plugins&Themes settings on MS does not save correctly
* Fix#1021: PHP Deprecated: filter_var() null in parameter 3
* Fix#1015: Better output secupress_pro_sessions_control_users_column_content()
* Fix#1010: Uncaught TypeError: strpos(): Argument 1 must be of type string, array given
* Fix#1001: Move secupress_format_message()
* Fix#962: Ranged IPs can prevent ip detection to block
* Update Malware Database
* Update global i18n

= 2.2.4 =

* 17 April 2023
* Update: Malware Database
* Fix#1001: Call to undefined function secupress_format_message() in /secupress-pro/free/admin/functions/scan-fix.php:51
* Fix#1000: Passing null to parameter #1 ($string) of type string is deprecated in /secupress/free/functions/files.php on line 693
* Fix#996: PHP Fatal error: Allowed memory size of 1075838976 bytes exhausted in secupress-pro/pro/modules/file-system/tools.php on line 88
* Fix#993: joker in IPs ban everything
* Fix#977: Time to soon for antispam
* Fix#904: cannot deactivate default role lock
* Fix global i18n

= 2.2.3 =
* 14 September 2022
* Update: Malware Database v22.9.14
* Security Fix#985: IP Spoofing, thanks to Calvin Alkan on https://snicco.io/
* Fix#987: new passwordless UI didn't need to validate the captcha to get the magic link
* Fix#986: unban link for admins does not always work
* Fix#984: fix "two factor authentication" plugin detection
* Fix#981: Move Login could be activated without pretty permalinks
* Fix#980: key regeneration button is hidden by the helpers style
* Fix#962: Ranged IPs can prevent ip detection to be blocked
* Fix global i18n

• Update: Malware Database v22.8.2
• New#961: New UI/UX for PasswordLess Module!
• Fix#976: WPML was adding a suffix to the PHP constant WP_HOME
• Fix#975: Salt key mu plugin in double + auto login
• Fix#974: Error message: Uncaught TypeError: explode(): Argument #2 ($string) must be of type string, array given in /pro/modules/firewall/plugins/bad-referer.php:13
• Fix#972: Salt keys scanner too loose
• Fix#971: Undefined array key “registration” in /free/modules/users-login/plugins/move-login.php on line 205
• Fix#969: Remove user enumeration made using query parameters on REST API calls
• Fix#965: NULL Coalescing Operator in pro/modules/firewall/tools.php on line 182
• Fix#917: Uncaught Error: Call to undefined function secupress_status()
• Fix global i18n