ochSimpleFirewall package 4.1.0.rc.3 for Joomla 5.3+/6.0+
| Version | 4.1.0.rc.3 |
|---|---|
| Maturity | Release Candidate |
| Release Date | 2026-08-13 |
| Tags | |
Changelog
| Type | Change |
|---|---|
| Fix | [rc.1] Remove obsolete JS files from old version |
| Fix | [rc.2] Guard against a null application identity (reported by Tim) |
| Addition | [rc.1] New Dashboard view |
| Addition | [rc.1] New Super User account monitoring |
| Addition | [rc.1] New installed Extension monitoring |
| Addition | [rc.1] New: allow cidr notation (ip range) in allow / block addresses |
| Addition | [rc.3] Joomla-core reference matching for the Extension baseline monitor: The first-confirm review screen for Extension Installation Monitoring otherwise shows 300+ rows on a fresh install, nearly all of them stock Joomla core. ExtensionMonitor now splits the review list against a bundled, version-matched reference of what a clean Joomla install actually ships |
| Addition | [rc.3] Extended OchsimplefirewallHelper::checkRequiredSettings() to warn when Super User/Extension monitoring is enabled in Options but the backing scheduled task is missing or disabled |
| Addition | [rc.3] Add version, subscription, and system status information to Dashboard via two new cards alongside the existing Super Users / Extensions baseline |
| Change | [rc.1] Updated helper files |
| Change | [rc.1] Performance: convert IpSetsCache from JSON to PHP files (opcache) |
| Change | [rc.1] Refactor: unify cache file format |
| Change | [rc.1] Code style changes |
| Change | [rc.2] percent-encoding bypass in Active Scanner SQLi query-string rules |
| Change | [rc.2] Bound reverse DNS lookups on blocked requests via Joomla cache |
| Change | [rc.2] Cap Active Scanner input length with new rule AF-0001 |
| Change | [rc.2] Escape externally sourced values in HTML notification emails |
| Change | [rc.2] Escape username in account protection admin email |
| Change | [rc.2] Forward confirm hostname whitelist matches (FCrDNS) |
| Change | [rc.3] Updated installer helper file |
| Change | [rc.3] Bound reverse/forward DNS lookups with a real timeout via NetDNS2 (composer mikepultz/netdns2) |
| Change | [rc.3] Gate the Super User Baseline card behind core.admin (super users), not core.manage |
| Change | [rc.3] Convert Dashboard status cards to self-contained accordions |
| Notes | This version will only install on Joomla 5.3+ and PHP 8.1+ |
Installation Notes
Joomla! 6 Joomla! 5 Joomla! 4 (EOL - Not supported) Joomla! 3 (EOL - Not supported) PHP 8.1+
See: Documentation