A release about protection and about seeing what happens to your site.
Security
- CAPTCHA in three variants, verified on the server. It cannot be enabled without keys — otherwise forms would silently stop accepting real people.
- Security event log, separate from the change log: logins, failed attempts, blocks.
- File integrity. The engine takes SHA-256 fingerprints of its files and later shows which files have changed since the snapshot.
- Extended server diagnostics with recommendations.
Users
- Custom profile fields — "City", "Phone", anything — without new columns in the users table. A field appears at registration, in the user's account area and in the panel; required fields are checked before the account is created.
- Custom templates for email confirmation and password reset messages.
- Site time zone.
Fixed
- The "New user" page crashed with a 500 error.
- Custom profile fields were not saved from the panel.
- Eight new actions were written to the log as internal codes.
How to update
Upload the files and click "Update" in the panel. Two migrations: the security event log and profile fields.---
Links
- Release page — notes, archive size and SHA-256 checksum.
- Discussion on the forum (in Russian).
- All NEX1ON releases.