It’s becoming customary now: a major update within a short delay. This version brings one new feature and one nice admin UI feature, then a significant improvement to the malware scanner interface, and finally a few minor bug fixes.
SecuPress 2.6
The Mark L was Tony Stark’s first foray into using nanotechnology to create his armor. He had a removable arc reactor implanted in his chest, where the armor’s nanites were stored. It represented a significant leap forward in the technological level used in Iron Man’s armor.
The idea behind choosing the 50th is to improve the UI in the malware scanner module. And yet, I already know I’ll also try to improve how the scanner works so I can then add the option for you to use your favorite AI’s API key (or not) to refine the detection of potential false positives (hello Jetpack).
GeoIP Logins
This new module, which further enhances the security of member account connections on your site, is unrelated to the GeoIP Visit Protection module.
The process is very similar: the actual location of the IP address performing the action is checked, and if it’s not valid, the connection is blocked. However, while the existing module blocks all types of visits (excluding cached access) via a list of blocked countries, this module only checks the location of the connection itself upon login to ensure it matches a location from which the account typically connects. An API call is made via https://free.freeipapi.com/. The free version allows 60 calls per minute and can be used in commercial software (yay). You can also purchase a key to remove the call limit if needed.
Otherwise, a code is sent by email to the account owner to verify their identity and their intention to connect from this new location.
With the selection of roles affected by this module.
This module comes with two expert options to fine-tune its functionality. These options are optional for most sites; only use them if you have an expert profile.
Checking Level
5 level more or less stricts:
- Strict IP should only be used if you have few IP addresses you connect from and they are static; otherwise, you risk having to re-enter a code for each connection. However, it’s still a good choice for maximum security.
- Soft IP is the default choice; here, only the first three octets of the IP address are checked (compatible with IPv4 and IPv6).
- City, Region, and Country are fairly self-explanatory; they check the location with varying degrees of precision, from country for a very broad check to city level for greater accuracy.
Choose the option that best matches the roles you are assigning.
4/5 by default, IP smooth
Device Check
By checking this option, we’ll perform an additional detailed check of the device, including its operating system, browser, computer type, etc. This adds an extra layer of verification. For example, combined with the extensive “Country” selection, this ensures that the device connecting is indeed one of your verified devices.
Device check
In both cases, when you connect with a new device or from a new location, you can add this as a trusted source. Here’s an example of a screen that will challenge you (the map is loaded from https://facilmap.org/, not Google Maps):
Let’s go validating Tehran…
Improved virus scanner interface
The core of SecuPress Pro remains its essential feature: our malware scanner.
The interface has been redesigned to better display what is being scanned and to better integrate the results. It’s not perfect yet; I will continue to improve it and also revamp the way I scan for malware in a future version if I can.
new malware scanner fr
Search for a feature
You can now search by keyword about any feature in SecuPress, you can even make mistake when writing you words, we still understand 😉 Also, any search is cached in your localstorage, which means the next time your search for that, the result will be instant with no ajax call, best for perfs.
search a feature
The rest
- Two-factor authentication compatibility with the “WP 2FA” plugin
- 7 simple fixes.
