Wordfence Security – Firewall & Malware Scan - Version 6.3.19

Version Description

  • Emergency Fix: Updated wpdb::prepare calls using %.6f since it is no longer supported.
Download this release

Release Info

Developer wfmatt
Plugin Icon 128x128 Wordfence Security – Firewall & Malware Scan
Version 6.3.19
Comparing to
See all releases

Code changes from version 6.3.18 to 6.3.19

Files changed (3) hide show
  1. lib/wordfenceClass.php +5 -5
  2. readme.txt +11 -2
  3. wordfence.php +2 -2
lib/wordfenceClass.php CHANGED
@@ -2013,7 +2013,7 @@ SQL
2013
$wfdb = new wfDB();
2014
global $wpdb;
2015
$p = $wpdb->base_prefix;
2016
- $rawBlocks = $wfdb->querySelect("SELECT SQL_CALC_FOUND_ROWS IP, ctime, actionData FROM {$p}wfHits WHERE ctime > %.6f AND action = 'blocked:wfsnrepeat' ORDER BY ctime ASC LIMIT 100", $threshold);
2017
$totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
2018
$ipCounts = array();
2019
$maxctime = 0;
@@ -6968,9 +6968,9 @@ to your httpd.conf if using Apache, or find documentation on how to disable dire
6968
$attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
6969
WHERE action = 'blocked:waf' " .
6970
(count($wafAlertWhitelist) ? "AND HEX(IP) NOT IN (" . implode(", ", array_fill(0, count($wafAlertWhitelist), '%s')) . ")" : "")
6971
- . "AND attackLogTime > %.6f
6972
ORDER BY attackLogTime DESC
6973
- LIMIT 10", array_merge($wafAlertWhitelist, array($cutoffTime))));
6974
$attackCount = $wpdb->get_var('SELECT FOUND_ROWS()');
6975
$threshold = (int) wfConfig::get('wafAlertThreshold');
6976
if ($threshold < 1) {
@@ -7044,8 +7044,8 @@ ALERTMSG;
7044
$lastSendTime = wfConfig::get('lastAttackDataSendTime');
7045
$attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
7046
WHERE action in ('blocked:waf', 'learned:waf', 'logged:waf', 'blocked:waf-always')
7047
- AND attackLogTime > %.6f
7048
- LIMIT %d", $lastSendTime, $limit));
7049
$totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
7050
7051
if ($attackData && wfConfig::get('other_WFNet', true)) {
2013
$wfdb = new wfDB();
2014
global $wpdb;
2015
$p = $wpdb->base_prefix;
2016
+ $rawBlocks = $wfdb->querySelect("SELECT SQL_CALC_FOUND_ROWS IP, ctime, actionData FROM {$p}wfHits WHERE ctime > %f AND action = 'blocked:wfsnrepeat' ORDER BY ctime ASC LIMIT 100", sprintf('%.6f', $threshold));
2017
$totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
2018
$ipCounts = array();
2019
$maxctime = 0;
6968
$attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
6969
WHERE action = 'blocked:waf' " .
6970
(count($wafAlertWhitelist) ? "AND HEX(IP) NOT IN (" . implode(", ", array_fill(0, count($wafAlertWhitelist), '%s')) . ")" : "")
6971
+ . "AND attackLogTime > %f
6972
ORDER BY attackLogTime DESC
6973
+ LIMIT 10", array_merge($wafAlertWhitelist, array(sprintf('%.6f', $cutoffTime)))));
6974
$attackCount = $wpdb->get_var('SELECT FOUND_ROWS()');
6975
$threshold = (int) wfConfig::get('wafAlertThreshold');
6976
if ($threshold < 1) {
7044
$lastSendTime = wfConfig::get('lastAttackDataSendTime');
7045
$attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
7046
WHERE action in ('blocked:waf', 'learned:waf', 'logged:waf', 'blocked:waf-always')
7047
+ AND attackLogTime > %f
7048
+ LIMIT %d", sprintf('%.6f', $lastSendTime), $limit));
7049
$totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
7050
7051
if ($attackData && wfConfig::get('other_WFNet', true)) {
readme.txt CHANGED
@@ -2,8 +2,8 @@
2
Contributors: mmaunder
3
Tags: security, secure, security plugin, wordpress security, login security, firewall, malware, antivirus, web application firewall, block hackers, country blocking
4
Requires at least: 3.9
5
- Tested up to: 4.8.1
6
- Stable tag: 6.3.18
7
8
Secure your website with the most comprehensive WordPress security plugin. Firewall, malware scan, blocking, live traffic, login security & more.
9
@@ -160,6 +160,15 @@ Secure your website with Wordfence.
160
161
== Changelog ==
162
163
= 6.3.17 =
164
* Improvement: Prepared code for upcoming scan improvement which will greatly increase scan performance by optimizing malware signatures.
165
* Improvement: Updated the bundled GeoIP database.
2
Contributors: mmaunder
3
Tags: security, secure, security plugin, wordpress security, login security, firewall, malware, antivirus, web application firewall, block hackers, country blocking
4
Requires at least: 3.9
5
+ Tested up to: 4.8.2
6
+ Stable tag: 6.3.19
7
8
Secure your website with the most comprehensive WordPress security plugin. Firewall, malware scan, blocking, live traffic, login security & more.
9
160
161
== Changelog ==
162
163
+ = 6.3.19 =
164
+ * Emergency Fix: Updated wpdb::prepare calls using %.6f since it is no longer supported.
165
+
166
+ = 6.3.18 =
167
+ * Improvement: Reduced size of some JavaScript for faster loading.
168
+ * Improvement: Better block counting for advanced comment filtering.
169
+ * Improvement: Increased logging in debug mode for plugin updates to help resolve issues.
170
+ * Fix: Reduced the minimum duration of a scan stage to improve reliability on some hosts.
171
+
172
= 6.3.17 =
173
* Improvement: Prepared code for upcoming scan improvement which will greatly increase scan performance by optimizing malware signatures.
174
* Improvement: Updated the bundled GeoIP database.
wordfence.php CHANGED
@@ -4,14 +4,14 @@ Plugin Name: Wordfence Security
4
Plugin URI: http://www.wordfence.com/
5
Description: Wordfence Security - Anti-virus, Firewall and Malware Scan
6
Author: Wordfence
7
- Version: 6.3.18
8
Author URI: http://www.wordfence.com/
9
Network: true
10
*/
11
if(defined('WP_INSTALLING') && WP_INSTALLING){
12
return;
13
}
14
- define('WORDFENCE_VERSION', '6.3.18');
15
define('WORDFENCE_BASENAME', function_exists('plugin_basename') ? plugin_basename(__FILE__) :
16
basename(dirname(__FILE__)) . '/' . basename(__FILE__));
17
4
Plugin URI: http://www.wordfence.com/
5
Description: Wordfence Security - Anti-virus, Firewall and Malware Scan
6
Author: Wordfence
7
+ Version: 6.3.19
8
Author URI: http://www.wordfence.com/
9
Network: true
10
*/
11
if(defined('WP_INSTALLING') && WP_INSTALLING){
12
return;
13
}
14
+ define('WORDFENCE_VERSION', '6.3.19');
15
define('WORDFENCE_BASENAME', function_exists('plugin_basename') ? plugin_basename(__FILE__) :
16
basename(dirname(__FILE__)) . '/' . basename(__FILE__));
17