[XenForo] DragonByte Security v3.0.0 Beta 3 Released

[Fillip H.]

Hey all,

We're releasing DragonByte Security v3.0.0 Beta 3 for XenForo to improve the experience for all customers.


If you like the product you can show your support by reviewing it here: [DBTech] DragonByte Security | xenForo Community.


Complete Change Log

DragonByte Security v3.0.0 Beta 3

New Features:

Search IP Addresses: Find Potential Intruder IP Addresses

• Displays a list of IP addresses who have failed to login to valid member accounts more than once
• Also displays any successful logins from these IP addresses

Country Blocking

• You can now block any country from your forum easily by selecting the country via the new AdminCP page
• Uses XenForo's IP Ban system to ban the IP ranges assigned to each country

Browser Fingerprinting

• You can enable browser fingerprinting and have this logged alongside a member's user ID and IP address
• Used in two new security watchers
• Defaults to off

Security Watcher: New Device Fingerprints (Member Accounts)

• Triggers when a member's account is accessed from a new fingerprint
• Allows locking the member's account asking them to unlock it
• Has the same options as "Failed Logins" security watcher

Security Watcher: New Device Fingerprints (Staff Accounts)

• Triggers when a staff member's account is accessed from a new fingerprint
• Allows locking the staff member's account asking them to unlock it
• Allows locking the staff member's account asking admins to unlock it
• Has the same options as "Failed Staff Logins" security watcher

Security Watcher: New Device Fingerprints (Staff Accounts)

• Triggers when a staff member's account is accessed from a new fingerprint
• Allows locking the staff member's account asking them to unlock it
• Allows locking the staff member's account asking admins to unlock it
• Has the same options as "Failed Staff Logins" security watcher

Fingerprint Log Viewer

• Browsable log of all fingerprints
• Filtering / Sorting options

Changed Features:

• When a user is deleted, all relevant data is now also deleted to prevent broken displays and errors
• "Failed Logins" watcher can now ban the user in question
• "Failed Staff Logins" watcher can now email the user in question

Bug Fixes:

• Two event listeners for DragonByte Credits were inadvertently left in this product
• The Config Tamper action could cause a PHP error when triggered
• The email sent when a potentially compromised account is detected would not have the correct contents
• The Password Change action would not respect the "last active threshold" choice
• The "Password Rules" checkboxes would not update if the user pasted their password via the right click menu
• Browsing to the second page of any log view that was limited by date would disregard the date limitations

As always, thank you for your continued support

Discuss this news here.