eSherpa Login Guard

3.0.0

• Release: Version bump to 3.0.0 for the current major feature set.
• UI (Mobile): Admin log tables are now horizontally scrollable on small screens.
• UI (Mobile): Added a visible swipe/scroll hint for wide tables.
• UI: Reduced “blocked User-Agent attempts” list in admin overview from 50 to 20 entries for better readability.
• Docs: Expanded README feature list (proactive User-Agent blocking, blocked-UA logs, neutral login errors, bot password capture, mobile table UX).

2.7.0

• Feature: JavaScript Honeypot for automatic bot detection with progressive lockout (like protected usernames)
• UI: Visual bot indicators (🤖 emoji) in both locked IPs and failed attempts tables
• UI: Clickable User-Agent filtering in all log tables (like IP filtering) – optimized display to 100 chars
• Security: Enhanced bot detection combining multiple methods
• Fix: XML-RPC Honeypot now generates properly formatted XML without double-escaping

2.6.0

• Security: Fixed critical IP address handling vulnerability – now properly supports proxy headers
• Feature: Added comprehensive User-Agent logging to all login attempts and successful logins
• Feature: Added JavaScript Honeypot for automatic bot detection (1-hour lockout)
• Performance: Optimized admin menu badge query with caching
• Security: Enhanced input validation with reasonable limits on all settings
• UI: Visual bot indicators in admin tables with 🤖 emoji
• Code: Improved code formatting and consistency throughout

2.5.4

• Fix: Immediate lockout for protected usernames (honeypot usernames) was setting back attemts and multipliers
• Sort by IP -> Better overview for single IP hashs.
• Improved design for mobile

2.5.1

• Immediate lockout for protected usernames (honeypot usernames)
• Live alarm for new failed attempts on admin page
• Email notification on attacks against existing users
• Extended XML-RPC honeypot with configurable fake users
• Automatic cleanup of old failed attempts
• Improved design and many detail enhancements

2.1.1

• Full multilingual support (DE/EN/FR/IT)
• Confirmed compatibility with WordPress 6.9 and PHP 8.3
• Minor optimizations

2.0

• Introduced progressive lockout times
• Admin menu with red badge for active locks
• Improved user guidance

1.0

• Initial stable release