{"id":4916,"date":"2013-11-11T17:14:23","date_gmt":"2013-11-12T00:14:23","guid":{"rendered":"http:\/\/www.ait-pro.com\/aitpro-blog\/?p=4916"},"modified":"2013-11-11T17:15:48","modified_gmt":"2013-11-12T00:15:48","slug":"whats-new-in-bulletproof-security-pro-7-9","status":"publish","type":"post","link":"https:\/\/www.ait-pro.com\/aitpro-blog\/4916\/bulletproof-security-pro\/whats-new-in-bulletproof-security-pro-7-9\/","title":{"rendered":"Whats New In BulletProof Security Pro 7.9"},"content":{"rendered":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n


BPS Pro 7.9 Primary Focus:\u00a0<\/strong><\/span>
Pre-Installation & Setup Wizard Plugin Firewall Scanning & Filtering<\/span><\/h2>\n<\/td>\n<\/tr>\n

\n


BPS Pro 7.9 Secondary Focus:\u00a0<\/strong><\/span>
Root .htaccess File Code Modifications\/Changes<\/span><\/h2>\n<\/td>\n<\/tr>\n

\n


Pre-Installation & Setup Wizard Plugin Firewall Scanning & Filtering:<\/strong><\/span><\/h3>\n

The Pre-Installation Wizard will now scan up to 250 Pages & Posts on your website to find plugin scripts that need to be whitelisted in your Plugin Firewall. The Setup Wizard will use those Plugin Firewall whitelist rules found during the Pre-Installation Wizard scan to create your Plugin Firewall .htaccess file. Additional filtering has been added to filter out source code that will generate invalid or incorrect Plugin Firewall whitelist rules.<\/p>\n<\/td>\n<\/tr>\n

\u00a0<\/td>\n<\/tr>\n
Pro-Tools cURL Scan Tool Improvement\/Enhancement:\u00a0<\/strong><\/span>
Scans up to 250 Pages & Post on your website by default. A new Form field has been created that allows you to add the total number of Pages & Posts to scan on your website. If you website has more than 250 Pages & Posts you can add the total number to the Limit Number Of Pages To Scan: Form field and click the Scan button. The scanner has been tested up to scanning 1500 pages and will scan up to 1500 Pages & Post simultaneously, but your WP Dashboard will temporarily display broken after the scan completes. If your WP Dashboard displays broken after running this scan then click your Browser’s Back button and click any link in your WP Dashboard and it will display normally again.<\/td>\n<\/tr>\n
\u00a0<\/td>\n<\/tr>\n
Pre-Installation Wizard Improvement\/Enhancement:\u00a0<\/strong><\/span>
Additional WP Filesystem API Method checking conditions added for DSO Server types.<\/td>\n<\/tr>\n
\u00a0<\/td>\n<\/tr>\n
Ini_set Options Code Improvement\/Enhancement: P-Security & Setup Wizard<\/strong><\/span>
In previous versions of BPS Pro prior to BPS Pro 7.9 an additional step was required before the BPS Pro ini_set Options code could be added to the wp-config.php file for WordPress versions in other languages. That additional step is no longer required in the BPS Pro 7.9 Setup Wizard or the ini_set Options page in P-Security.<\/td>\n<\/tr>\n
\u00a0<\/td>\n<\/tr>\n
\n

Root .htaccess File code modifications\/changes:<\/strong><\/span><\/h3>\n

The new .htaccess code modifications\/changes are done automatically during the BPS Pro upgrade. No further action is required by you, unless you have previously copied the BPS Query String Exploits code to BPS Custom Code then you will see a Dashboard Notice with instructions on copying the new Root .htaccess Query String Exploits code to the BPS Custom Code Query String Exploits text box.<\/p>\n

OLD: RedirectMatch 403 \/\\..*$
NEW: RedirectMatch 403 \\.(htaccess|htpasswd|errordocs|logs)$<\/p>\n

BPS Query String Exploits Code Changes<\/strong>
OLD: RewriteCond %{QUERY_STRING} (\\.\\.\/|\\.\\.) [OR]
NEW: RewriteCond %{QUERY_STRING} (\\.\\.\/|%2e%2e%2f|%2e%2e\/|\\.\\.%2f|%2e\\.%2f|%2e\\.\/|\\.%2e%2f|\\.%2e\/) [NC,OR]<\/p>\n

OLD: RewriteCond %{QUERY_STRING} (\\.\/|\\..\/|\\…\/)+(motd|etc|bin) [NC,OR]
NEW: RewriteCond %{QUERY_STRING} (\\.{1,}\/)+(motd|etc|bin) [NC,OR]<\/p>\n

OLD: RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:\/\/ [OR]
NEW: RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:\/\/ [NC,OR]<\/p>\n

OLD: RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\\.\\.\/\/?)+ [OR]
NEW: RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\\.\\.\/\/?)+ [NC,OR]<\/p>\n<\/div>\n<\/td>\n<\/tr>\n

\u00a0<\/td>\n<\/tr>\n
Bonus Code Dismiss Notice Added: Author Enumeration BOT Probe Code:<\/span>\u00a0<\/strong>
This WordPress Author Enumeration Bot Probe Protection Bonus Code protects against hacker Bot Probes looking for WordPress author enumeration (a numbered list of Author ID’s \/ User ID’s) to exploit. Generates a standard WordPress 404 Error instead of displaying Author ID’s \/ User ID’s. What is especially nice about this code is that to the hacker bot it appears that this Author ID \/ User ID does not exist on your website without giving any clues that the Author ID \/ User ID does actually exist on your website.<\/td>\n<\/tr>\n
\u00a0<\/td>\n<\/tr>\n
Activation page additional check for: WP_HTTP_BLOCK_EXTERNAL & WP_ACCESSIBLE_HOSTS Constants:\u00a0<\/strong><\/span>
The Activation page has additional checks for wp-config.php Constants which can prevent successful BPS Pro Activation Key Requests. The displayed message contains instructions on how to whitelist the AIT-pro.com API Server in the WP_ACCESSIBLE_HOSTS Constant.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

BPS Pro 7.9 Primary Focus:\u00a0 Pre-Installation & Setup Wizard Plugin Firewall Scanning & Filtering BPS Pro 7.9 Secondary Focus:\u00a0 Root .htaccess File Code Modifications\/Changes Pre-Installation & Setup Wizard Plugin Firewall Scanning & Filtering: The Pre-Installation Wizard will now scan up to 250 Pages & Posts on your website to find plugin scripts that need to […]<\/p>\n","protected":false},"author":167,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_links_to":"","_links_to_target":""},"categories":[393],"tags":[559,558],"class_list":["post-4916","post","type-post","status-publish","format-standard","hentry","category-bulletproof-security-pro","tag-bps-pro-7-9-whats-new","tag-bulletproof-security-pro-7-9-whats-new"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/posts\/4916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/users\/167"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/comments?post=4916"}],"version-history":[{"count":0,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/posts\/4916\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/media?parent=4916"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/categories?post=4916"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ait-pro.com\/aitpro-blog\/wp-json\/wp\/v2\/tags?post=4916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}