Sucuri Security – Auditing, Malware Scanner and Security Hardening - Version 1.8.17

Version Description

  • Update Terms of Service and Privacy Policy
Download this release

Release Info

Developer ycampo
Plugin Icon 128x128 Sucuri Security – Auditing, Malware Scanner and Security Hardening
Version 1.8.17
Comparing to
See all releases

Code changes from version 1.8.16 to 1.8.17

Files changed (8) hide show
  1. inc/tpl/register-site.html.tpl +3 -3
  2. readme.txt +7 -3
  3. src/event.lib.php +2 -0
  4. src/hook.lib.php +1 -1
  5. src/interface.lib.php +1 -1
  6. src/settings-alerts.php +1 -1
  7. src/settings-general.php +2 -2
  8. sucuri.php +2 -2
inc/tpl/register-site.html.tpl CHANGED
@@ -38,9 +38,9 @@
38
 
39
  <p>
40
  <label>
41
- <input type="hidden" name="sucuriscan_consent_storage" value="0" />
42
- <input type="checkbox" name="sucuriscan_consent_storage" value="1" />
43
- <span>I agree to have my email address and audit logs stored. This written consent can be requested to be revoked at any time by sending an email to <a href="mailto:gdpr@sucuri.net">gdpr@sucuri.net</a>.</span>
44
  </label>
45
  </p>
46
 
38
 
39
  <p>
40
  <label>
41
+ <input type="hidden" name="sucuriscan_consent_priv" value="0" />
42
+ <input type="checkbox" name="sucuriscan_consent_priv" value="1" />
43
+ <span>I have read and understand the <a target="_blank" href="https://sucuri.net/privacy">Privacy Policy</a>.</span>
44
  </label>
45
  </p>
46
 
readme.txt CHANGED
@@ -4,7 +4,7 @@ Donate Link: https://sucuri.net/
4
  Tags: malware, security, firewall, scan, spam, virus, sucuri, protection, blacklist, detection, hardening, file integrity
5
  Requires at least: 3.6
6
  Tested up to: 4.9.4
7
- Stable tag: 1.8.16
8
 
9
  The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
10
 
@@ -168,6 +168,10 @@ Not that we are aware of.
168
 
169
  No, it is not required. The Website Firewall runs in the cloud without the need of anything installed. This plugin only helps see and manage the service from the WordPress dashboard.
170
 
 
 
 
 
171
  == Screenshots ==
172
 
173
  1. WordPress Integrity Tool - Detects added, modified, and removed files.
@@ -186,8 +190,8 @@ This version adds support for the latest version of WordPress. Introduces new fe
186
 
187
  == Changelog ==
188
 
189
- = 1.8.16 =
190
- * Update Terms of Service for GDPR compliancy
191
 
192
  = 1.8.15 =
193
  * Make default plugin options filterable
4
  Tags: malware, security, firewall, scan, spam, virus, sucuri, protection, blacklist, detection, hardening, file integrity
5
  Requires at least: 3.6
6
  Tested up to: 4.9.4
7
+ Stable tag: 1.8.17
8
 
9
  The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
10
 
168
 
169
  No, it is not required. The Website Firewall runs in the cloud without the need of anything installed. This plugin only helps see and manage the service from the WordPress dashboard.
170
 
171
+ = What information does Sucuri collect? =
172
+
173
+ We take your privacy seriously. For free plugin users without an API key, no information is collected by Sucuri. After activating an API key, Sucuri will store some information, such as logs. Please see our [Terms of Service](https://sucuri.net/terms) and [Privacy Policy](https://sucuri.net/privacy). Please email gdpr@sucuri.net if you have other questions about your privacy.
174
+
175
  == Screenshots ==
176
 
177
  1. WordPress Integrity Tool - Detects added, modified, and removed files.
190
 
191
  == Changelog ==
192
 
193
+ = 1.8.17 =
194
+ * Update [Terms of Service](https://sucuri.net/terms) and [Privacy Policy](https://sucuri.net/privacy)
195
 
196
  = 1.8.15 =
197
  * Make default plugin options filterable
src/event.lib.php CHANGED
@@ -355,6 +355,8 @@ class SucuriScanEvent extends SucuriScan
355
  */
356
  private static function reportEvent($severity = 0, $message = '')
357
  {
 
 
358
  $user = wp_get_current_user();
359
  $remote_ip = self::getRemoteAddr();
360
  $username = false;
355
  */
356
  private static function reportEvent($severity = 0, $message = '')
357
  {
358
+ if (!function_exists('wp_get_current_user')) return;
359
+
360
  $user = wp_get_current_user();
361
  $remote_ip = self::getRemoteAddr();
362
  $username = false;
src/hook.lib.php CHANGED
@@ -696,7 +696,7 @@ class SucuriScanHook extends SucuriScanEvent
696
  * that must be reported, so after the first execution the operation
697
  * falls into an infinite loop.
698
  *
699
- * @date 30 June, 2018
700
  * @see https://wordpress.org/plugins/postman-smtp/
701
  * @see https://wordpress.org/support/topic/unable-to-access-wordpress-dashboard-after-update-to-1-8-7/
702
  */
696
  * that must be reported, so after the first execution the operation
697
  * falls into an infinite loop.
698
  *
699
+ * @date 30 June, 2017
700
  * @see https://wordpress.org/plugins/postman-smtp/
701
  * @see https://wordpress.org/support/topic/unable-to-access-wordpress-dashboard-after-update-to-1-8-7/
702
  */
src/interface.lib.php CHANGED
@@ -248,7 +248,7 @@ class SucuriScanInterface
248
  * security related newsletter where they can learn about better security
249
  * practices and get alerts from public vulnerabilities disclosures.
250
  *
251
- * @date Featured added at - May 01, 2018
252
  */
253
  self::info('Do you want to get vulnerability disclosures? Subscribe to our newsletter <a href="http://sucuri.hs-sites.com/subscribe-to-security" target="_blank" rel="noopener">here</a>');
254
  }
248
  * security related newsletter where they can learn about better security
249
  * practices and get alerts from public vulnerabilities disclosures.
250
  *
251
+ * @date Featured added at - May 01, 2017
252
  */
253
  self::info('Do you want to get vulnerability disclosures? Subscribe to our newsletter <a href="http://sucuri.hs-sites.com/subscribe-to-security" target="_blank" rel="noopener">here</a>');
254
  }
src/settings-alerts.php CHANGED
@@ -433,7 +433,7 @@ function sucuriscan_settings_alerts_events($nonce)
433
  * in the posts and the other plugin creates temporary post objects to track
434
  * the emails.
435
  *
436
- * @date 30 June, 2018
437
  * @see https://wordpress.org/plugins/postman-smtp/
438
  * @see https://wordpress.org/support/topic/unable-to-access-wordpress-dashboard-after-update-to-1-8-7/
439
  */
433
  * in the posts and the other plugin creates temporary post objects to track
434
  * the emails.
435
  *
436
+ * @date 30 June, 2017
437
  * @see https://wordpress.org/plugins/postman-smtp/
438
  * @see https://wordpress.org/support/topic/unable-to-access-wordpress-dashboard-after-update-to-1-8-7/
439
  */
src/settings-general.php CHANGED
@@ -96,8 +96,8 @@ function sucuriscan_settings_general_apikey($nonce)
96
 
97
  if ($user_obj && user_can($user_obj, 'administrator')) {
98
  // Check consent
99
- if (SucuriScanRequest::post(':consent_tos') != 1 || SucuriScanRequest::post(':consent_storage') != 1) {
100
- SucuriScanInterface::error('You must accept the Terms of Service in order to request an API key.');
101
  unset($_POST['sucuriscan_dns_lookups']);
102
  } else {
103
  // Send request to generate new API key or display form to set manually.
96
 
97
  if ($user_obj && user_can($user_obj, 'administrator')) {
98
  // Check consent
99
+ if (SucuriScanRequest::post(':consent_tos') != 1 || SucuriScanRequest::post(':consent_priv') != 1) {
100
+ SucuriScanInterface::error('You must accept the Terms of Service and Privacy Policy in order to request an API key.');
101
  unset($_POST['sucuriscan_dns_lookups']);
102
  } else {
103
  // Send request to generate new API key or display form to set manually.
sucuri.php CHANGED
@@ -6,7 +6,7 @@
6
  * Plugin URI: https://wordpress.sucuri.net/
7
  * Author URI: https://sucuri.net/
8
  * Author: Sucuri Inc.
9
- * Version: 1.8.16
10
  *
11
  * PHP version 5
12
  *
@@ -83,7 +83,7 @@ define('SUCURISCAN', 'sucuriscan');
83
  /**
84
  * Current version of the plugin's code.
85
  */
86
- define('SUCURISCAN_VERSION', '1.8.16');
87
 
88
  /**
89
  * Defines the human readable name of the plugin.
6
  * Plugin URI: https://wordpress.sucuri.net/
7
  * Author URI: https://sucuri.net/
8
  * Author: Sucuri Inc.
9
+ * Version: 1.8.17
10
  *
11
  * PHP version 5
12
  *
83
  /**
84
  * Current version of the plugin's code.
85
  */
86
+ define('SUCURISCAN_VERSION', '1.8.17');
87
 
88
  /**
89
  * Defines the human readable name of the plugin.