Skip to content

WireWall 1.4.0

Choose a tag to compare

View all tags
@mxmsmnv mxmsmnv released this 25 Apr 04:37
· 20 commits to main since this release
1.4.0
80ecd24

What's new

WireWall Dashboard

New companion Process module ProcessWireWall — real-time firewall dashboard at Admin → Setup → WireWall. Stat cards, hourly chart, top reasons/countries/IPs, active bans with TTL countdown, recent events table. Adapts to light and dark admin themes automatically.

Settings page refactored

10 logical sections instead of 15+ scattered fieldsets. City and subdivision blocking sections only shown when GeoLite2-City.mmdb is installed.

Security fixes

  • IP spoofing via proxy headers — CF-Connecting-IP and similar now validated against CDN IP ranges before being trusted
  • unserialize() hardened with allowed_classes: false
  • AJAX bypass via broad POST key patterns fixed
  • Datacenter detection false positives reduced

Silent 404

Now serves ProcessWire's native 404 page instead of plain text.

Assets 2
Loading