Version 6.3.5 is out!

  • Greetings all. We have a point release for Wordfence today, version 6.3.5. Please update as soon as you are able.

    • Improvement: Sites can now specify a list of trusted proxies when using X-Forwarded-For for IP resolution.
    • Improvement: Added options to customize which dashboard notifications are shown.
    • Improvement: Improvements to the scanner’s malware stage to avoid timing out on larger files.
    • Improvement: Provided additional no-caching indicators for caches that erroneously save pages with HTTP error status codes.
    • Improvement: Updated the bundled GeoIP database.
    • Improvement: Optimized the country update process in the upgrade handler so it only updates changed records.
    • Improvement: Added our own prefixed version of jQuery.DataTables to avoid conflicts with other plugins.
    • Improvement: Changes to readme.txt and readme.md are now ignored by the scanner unless high sensitivity is on.
    • Fix: Addressed an issue with multisite installations where they would execute the upgrade handler for each subsite.
    • Fix: Added additional error handling to the blocked IP list to avoid outputting notices when another plugin resets the error handler.
    • Fix: Made the description in the summary email for blocks resulting from the blacklist more descriptive.
    • Fix: Updated the copyright date on several pages.
    • Fix: Fixed incorrect wrapping of the Group by field on the live traffic page.

    Thanks everyone for great comments and suggestions. Send any of those you might have to [email protected] and someone will get back to you.
    Keep in mind, the feedback address is not a place to request support.
    Also, no support questions will be answered in this thread.
    Free support requests can be posted at https://www.ads-software.com/support/plugin/wordfence
    Our premium customers can open a ticket at https://support.wordfence.com

Viewing 2 replies - 1 through 2 (of 2 total)

  • Hello,
    After upgrade I get “504 Gateway Time-out” from about 10 to 10 minutes.
    I have wp 4.7.3

    We are using free version of wordfence for now and planning to go premium as soon as our wp website get completed, I noticed that our outsourcing developers are working fast but we are getting serious optimization issues with following wordfence script which is appearing in main and all inner-pages of website.

    Found JavaScript inside head
    <script type=”text/javascript”>
    (function(url){
    if(/(?:Chrome\/26\.0\.1410\.63 Safari\/537\.31|WordfenceTestMonBot)/.test(navigator.userAgent)){ return; }
    var addEvent = function(evt, handler) {
    if (window.addEventListener) {
    document.addEventListener(evt, handler, false);
    } else if (window.attachEvent) {
    document.attachEvent(‘on’ + evt, handler);
    }
    };
    var removeEvent = function(evt, handler) {
    if (window.removeEventListener) {
    document.removeEventListener(evt, handler, false);
    } else if (window.detachEvent) {
    document.detachEvent(‘on’ + evt, handler);
    }
    };
    var evts = ‘contextmenu dblclick drag dragend dragenter dragleave dragover dragstart drop keydown keypress keyup mousedown mousemove mouseout mouseover mouseup mousewheel scroll’.split(‘ ‘);
    var logHuman = function() {
    var wfscr = document.createElement(‘script’);
    wfscr.type = ‘text/javascript’;
    wfscr.async = true;
    wfscr.src = url + ‘&r=’ + Math.random();
    (document.getElementsByTagName(‘head’)[0]||document.getElementsByTagName(‘body’)[0]).appendChild(wfscr);
    for (var i = 0; i < evts.length; i++) {
    removeEvent(evts[i], logHuman);
    }
    };
    for (var i = 0; i < evts.length; i++) {
    addEvent(evts[i], logHuman);
    }
    })(‘//demo-octalogo.com/iworldteam/?wordfence_logHuman=1&hid=1427550101F48143BEA564C41AB6CA1F’);
    </script>

    I read in previous post that is for live traffic monitoring, but why it is automatically appearing in head of site, where all optimization testing website is marking it as error and not good for placement. Also our hosting provider, where we have just 25 processes available is indicating that these javascripts in head might be the reason of “extra processes” consumption on our hosting account, due to which we are running out of server resources fast, please check the aforementioned script and enlighten us with your professional point-of-view, thank you.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Version 6.3.5 is out!’ is closed to new replies.