Wordfence Security – Firewall & Malware Scan - Version 6.3.19

Version Description

  • Emergency Fix: Updated wpdb::prepare calls using %.6f since it is no longer supported.
Download this release

Release Info

Developer wfmatt
Plugin Icon 128x128 Wordfence Security – Firewall & Malware Scan
Version 6.3.19
Comparing to
See all releases

Code changes from version 6.3.18 to 6.3.19

Files changed (3) hide show
  1. lib/wordfenceClass.php +5 -5
  2. readme.txt +11 -2
  3. wordfence.php +2 -2
lib/wordfenceClass.php CHANGED
@@ -2013,7 +2013,7 @@ SQL
2013
  $wfdb = new wfDB();
2014
  global $wpdb;
2015
  $p = $wpdb->base_prefix;
2016
- $rawBlocks = $wfdb->querySelect("SELECT SQL_CALC_FOUND_ROWS IP, ctime, actionData FROM {$p}wfHits WHERE ctime > %.6f AND action = 'blocked:wfsnrepeat' ORDER BY ctime ASC LIMIT 100", $threshold);
2017
  $totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
2018
  $ipCounts = array();
2019
  $maxctime = 0;
@@ -6968,9 +6968,9 @@ to your httpd.conf if using Apache, or find documentation on how to disable dire
6968
  $attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
6969
  WHERE action = 'blocked:waf' " .
6970
  (count($wafAlertWhitelist) ? "AND HEX(IP) NOT IN (" . implode(", ", array_fill(0, count($wafAlertWhitelist), '%s')) . ")" : "")
6971
- . "AND attackLogTime > %.6f
6972
  ORDER BY attackLogTime DESC
6973
- LIMIT 10", array_merge($wafAlertWhitelist, array($cutoffTime))));
6974
  $attackCount = $wpdb->get_var('SELECT FOUND_ROWS()');
6975
  $threshold = (int) wfConfig::get('wafAlertThreshold');
6976
  if ($threshold < 1) {
@@ -7044,8 +7044,8 @@ ALERTMSG;
7044
  $lastSendTime = wfConfig::get('lastAttackDataSendTime');
7045
  $attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
7046
  WHERE action in ('blocked:waf', 'learned:waf', 'logged:waf', 'blocked:waf-always')
7047
- AND attackLogTime > %.6f
7048
- LIMIT %d", $lastSendTime, $limit));
7049
  $totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
7050
 
7051
  if ($attackData && wfConfig::get('other_WFNet', true)) {
2013
  $wfdb = new wfDB();
2014
  global $wpdb;
2015
  $p = $wpdb->base_prefix;
2016
+ $rawBlocks = $wfdb->querySelect("SELECT SQL_CALC_FOUND_ROWS IP, ctime, actionData FROM {$p}wfHits WHERE ctime > %f AND action = 'blocked:wfsnrepeat' ORDER BY ctime ASC LIMIT 100", sprintf('%.6f', $threshold));
2017
  $totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
2018
  $ipCounts = array();
2019
  $maxctime = 0;
6968
  $attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
6969
  WHERE action = 'blocked:waf' " .
6970
  (count($wafAlertWhitelist) ? "AND HEX(IP) NOT IN (" . implode(", ", array_fill(0, count($wafAlertWhitelist), '%s')) . ")" : "")
6971
+ . "AND attackLogTime > %f
6972
  ORDER BY attackLogTime DESC
6973
+ LIMIT 10", array_merge($wafAlertWhitelist, array(sprintf('%.6f', $cutoffTime)))));
6974
  $attackCount = $wpdb->get_var('SELECT FOUND_ROWS()');
6975
  $threshold = (int) wfConfig::get('wafAlertThreshold');
6976
  if ($threshold < 1) {
7044
  $lastSendTime = wfConfig::get('lastAttackDataSendTime');
7045
  $attackData = $wpdb->get_results($wpdb->prepare("SELECT SQL_CALC_FOUND_ROWS * FROM {$wpdb->base_prefix}wfHits
7046
  WHERE action in ('blocked:waf', 'learned:waf', 'logged:waf', 'blocked:waf-always')
7047
+ AND attackLogTime > %f
7048
+ LIMIT %d", sprintf('%.6f', $lastSendTime), $limit));
7049
  $totalRows = $wpdb->get_var('SELECT FOUND_ROWS()');
7050
 
7051
  if ($attackData && wfConfig::get('other_WFNet', true)) {
readme.txt CHANGED
@@ -2,8 +2,8 @@
2
  Contributors: mmaunder
3
  Tags: security, secure, security plugin, wordpress security, login security, firewall, malware, antivirus, web application firewall, block hackers, country blocking
4
  Requires at least: 3.9
5
- Tested up to: 4.8.1
6
- Stable tag: 6.3.18
7
 
8
  Secure your website with the most comprehensive WordPress security plugin. Firewall, malware scan, blocking, live traffic, login security & more.
9
 
@@ -160,6 +160,15 @@ Secure your website with Wordfence.
160
 
161
  == Changelog ==
162
 
 
 
 
 
 
 
 
 
 
163
  = 6.3.17 =
164
  * Improvement: Prepared code for upcoming scan improvement which will greatly increase scan performance by optimizing malware signatures.
165
  * Improvement: Updated the bundled GeoIP database.
2
  Contributors: mmaunder
3
  Tags: security, secure, security plugin, wordpress security, login security, firewall, malware, antivirus, web application firewall, block hackers, country blocking
4
  Requires at least: 3.9
5
+ Tested up to: 4.8.2
6
+ Stable tag: 6.3.19
7
 
8
  Secure your website with the most comprehensive WordPress security plugin. Firewall, malware scan, blocking, live traffic, login security & more.
9
 
160
 
161
  == Changelog ==
162
 
163
+ = 6.3.19 =
164
+ * Emergency Fix: Updated wpdb::prepare calls using %.6f since it is no longer supported.
165
+
166
+ = 6.3.18 =
167
+ * Improvement: Reduced size of some JavaScript for faster loading.
168
+ * Improvement: Better block counting for advanced comment filtering.
169
+ * Improvement: Increased logging in debug mode for plugin updates to help resolve issues.
170
+ * Fix: Reduced the minimum duration of a scan stage to improve reliability on some hosts.
171
+
172
  = 6.3.17 =
173
  * Improvement: Prepared code for upcoming scan improvement which will greatly increase scan performance by optimizing malware signatures.
174
  * Improvement: Updated the bundled GeoIP database.
wordfence.php CHANGED
@@ -4,14 +4,14 @@ Plugin Name: Wordfence Security
4
  Plugin URI: http://www.wordfence.com/
5
  Description: Wordfence Security - Anti-virus, Firewall and Malware Scan
6
  Author: Wordfence
7
- Version: 6.3.18
8
  Author URI: http://www.wordfence.com/
9
  Network: true
10
  */
11
  if(defined('WP_INSTALLING') && WP_INSTALLING){
12
  return;
13
  }
14
- define('WORDFENCE_VERSION', '6.3.18');
15
  define('WORDFENCE_BASENAME', function_exists('plugin_basename') ? plugin_basename(__FILE__) :
16
  basename(dirname(__FILE__)) . '/' . basename(__FILE__));
17
 
4
  Plugin URI: http://www.wordfence.com/
5
  Description: Wordfence Security - Anti-virus, Firewall and Malware Scan
6
  Author: Wordfence
7
+ Version: 6.3.19
8
  Author URI: http://www.wordfence.com/
9
  Network: true
10
  */
11
  if(defined('WP_INSTALLING') && WP_INSTALLING){
12
  return;
13
  }
14
+ define('WORDFENCE_VERSION', '6.3.19');
15
  define('WORDFENCE_BASENAME', function_exists('plugin_basename') ? plugin_basename(__FILE__) :
16
  basename(dirname(__FILE__)) . '/' . basename(__FILE__));
17