1.2.4

Full Changelog: 1.2.3...1.2.4

1.2.3

Full Changelog: 1.2.2...1.2.3

1.2.2

Full Changelog: 1.2.1...1.2.2

1.2.1

Full Changelog: 1.2.0...1.2.1

New features

Implement WAFY action modes (block/log), add IP ban email notifications, and enhance banned IP records with reasons and request data.

1.1.1

Full Changelog: 1.1.0...1.1.1

1.1.0

Release Notes - Wafy v1.1.0

We are excited to announce Wafy v1.1.0, a major update focusing on security, stability, and developer experience.

### 🚀 New Features

1. WAF Toggle Command

You can now instantly enable or disable the WAF without changing configuration files or redeploying.

• Command: php artisan wafy:mode {enable|disable}
• Config: Added 'enabled' => env('WAFY_ENABLED', true) to config/wafy.php
• Logic: Uses Laravel Cache for runtime persistence, allowing for immediate reaction during maintenance or debugging.

2. Allowed IPs (Whitelist)

Define a list of trusted IP addresses that will never be blocked or banned, ensuring you never lock yourself out.

Config: Add 'allowed_ips' => ['127.0.0.1', ...] to
config/wafy.php

Behavior: These IPs bypass all security checks and ban middleware.

🛡️ Security Enhancements

Critical Fix: Permanent Bans

• Fixed a logic error where permanent bans (set via command or high-severity triggers) were being treated as expired and deleted. Permanent bans are now correctly enforced indefinitely.

Enhanced Detection Patterns

• SQL Injection (SQLi): Added robust patterns for UNION SELECT, hex-encoded attacks, and time-based SQLi (WAITFOR DELAY, BENCHMARK()).
• XSS & LFI: Improved regex to catch sophisticated Cross-Site Scripting and Local File Inclusion attempts (including PHP wrappers and system file access).
• RCE: Added detection for common Remote Code Execution vectors (e.g., eval(), base64_decode(), shell commands).

🛠️ Infrastructure & Quality

• Full English Translations: The entire codebase, including README.md and comments, has been translated to English for broader accessibility.
• Test Suite: Implemented a comprehensive test suite using orchestra/testbench covering middleware logic, console commands, and edge cases. (100% Pass Rate).
• Standards: Added LICENSE (MIT) and standard .gitignore

📦 upgrading

Update Composer:

composer update bdsa/wafy

Republish Configuration: (Optional, but recommended to get the new allowed_ips and enabled options)

php artisan vendor:publish --tag=wafy-config --force

1.0.0

First release !