BulletProof Security Blog

Whats New in BPS Pro 9.9.1

Pro-Tools Online Base64 Decoder & Offline Base64 Decode/Encode Tools:

These 2 Pro-Tools have been removed by default in BPS Pro 9.9.1. Our Host is now using a scanner that is mistakenly seeing the valid legitimate code in these 2 tools as malicious code and is quarantining the bulletproof-security.zip file. Since scanners cannot really tell the difference between good/safe code or malicious code these 2 tools have been removed from BPS Pro by default to avoid all the headaches that come with scanners incorrectly seeing good code as malicious code. If you would like to have these 2 Pro-Tools and add them to BPS Pro Pro-Tools then please send us an email.

Plugin Firewall AutoPilot Mode Additional Error Checking:

Additional Plugin Firewall AutoPilot Mode error checking added for unusual and server specific issues. Plugin Firewall AutoPilot Mode Alert is displayed with instructions on how to correct the issue.

JTC Anti-Spam / Anti-Hacker Comment Form CSS Styling Options Added:

You can position the JTC Title/Text Form label and the JTC CAPTCHA Form Input text box by editing the CSS in these text boxes. By default the position of the JTC Title/Text label and the JTC CAPTCHA Form Input text box is below your Comment Form submit button. For CSS code styling examples go to this Forum Topic: JTC Comment Form CSS Styling

JTC Anti-Spam / Anti-Hacker jQuery UI Tooltip Ghost Text BugFix Option Removed:

This option is not necessary and a simple CSS “fix” has been created instead.

Cause: The WordPress /wp-includes/js/jquery/ui/tooltip.min.js file is using the jQuery appendTo Method and appending an additional div to the document body, which is actually a very common known issue when using the jQuery appendTo Method and is not a WordPress issue or bug.

Solution: CSS .ui-helper-hidden-accessible{display:none;} has been added to JTC, which hides the appended div/text/class so there is no need for this additional JTC option. This “fix” is automatically applied and does not require any manual settings/changes.

BugFixes/Code Corrections/Misc/CSS/Visual/Other:

• Maintenance Mode str_replace has been changed to dirname for GWIOD site types to get the site root index.php file path.
• Automatic correction during upgrade for any existing timthumb RFI filter duplicate Referer lines.