Fixed problem with quarantine file naming convention causing duplicate file names under certain circumstances and failing to quarantine the second instance
Fixed spurious Cpanel::Version::gettree() warning in cPanel error log
Added new BETA feature – User Interface. This feature provides a HTML UI to csf and lfd, without requiring a control panel or web server. The UI runs as a sub process to the lfd daemon. See csf.conf and readme.txt for information and requirements
Fixed issue with RT_* regex routine ignoring 127.0.0.1
Fixed detection of DNSONLY cPanel installs
Added Security Check on cPanel server checks for disabled “Proxy subdomains” and “Proxy subdomain creation”
Added new option LF_CPANEL_ALERT_ACTION. If a LF_CPANEL_ALERT event is triggered, then if LF_CPANEL_ALERT_ACTION contains the path to a script, it will run the script and passed the ip and username and the DNS IP lookup result as 3 arguments
New –options [P]. This option will search standard web application configuration files for MySQL database passwords. It will then attempt to login via FTP on localhost with the username of the account being processed and the detected password (it will attempt up to two password hits per configuration file). If the login is successful, the option will trigger a match. See CLI documentation for more info
Separated and highlighted advanced Exploit Scan options in the UI that can affect user data and/or produce false-positives in the vain hope it will stop some people just ticking everything and then wondering where their files have gone
Added Net::FTP to the perl module requirements (this is a core perl module so should already be installed)
New options –uidmin [uid] and –uidmax [uid] for the GENERIC install when used with –allusers. These have no effect on cPanel and DA