axanet Tools

1.1.8

• Added: Disable REST API tab, restricting REST API access to logged-in users (including via Application Passwords) with a single toggle.
• Added: Feature Status overview on the dashboard’s Home tab, listing every feature’s current on/off state (and, for WP Pages, how many page types are disabled) without needing to open each tab.
• Fixed: Uninstalling while Comments was disabled left default_comment_status/default_ping_status closed, silently defaulting new posts to closed comments; uninstall now restores both to open in that case.
• Changed: Renamed the “Disable Comments” tab and dashboard references to “Comments,” since the tab toggles comments both on and off.

1.1.7

• Fixed: Database Cleanup’s “Trashed Posts & Pages” option only ever cleaned up posts; trashed pages and other post types are now included as the label always said.
• Fixed: Database Cleanup’s orphaned post meta/comment meta cleanup could delete legitimate data some plugins store under post/comment ID 0 as a global key-value store; that data is no longer treated as orphaned.
• Fixed: Search & Replace could silently corrupt data on tables with a composite (multi-column) primary key by updating on only the first key column; such tables are now safely skipped, matching the existing no-primary-key protection.
• Fixed: Search & Replace no longer overwrites a value with a raw string replace when it looks serialized but fails to unserialize; the row is left untouched instead.
• Added: Search & Replace now shows a confirmation prompt before a real (non-preview) run, matching the other destructive actions in the plugin.
• Fixed: Login Security’s blocked IP list is no longer autoloaded and is pruned continuously, preventing site-wide slowdown from a large, sustained brute-force attack.
• Fixed: Disabling comments with “delete all existing comments” selected could leave the plugin’s own enabled/disabled state out of sync with the site’s comment settings if the request timed out partway through a very large deletion; bulk comment deletion also now uses less memory.
• Fixed: Uninstalling the plugin now also removes its login-logo reachability cache instead of leaving it behind.

1.1.6

• Security: Login Security no longer trusts spoofable client headers (X-Forwarded-For / Client-IP) for IP blocking by default, and blocked IPs can no longer have their block indefinitely renewed by repeated attempts.
• Fixed: Search & Replace could corrupt PHP-serialized values (widgets, theme mods, plugin settings); replacements are now serialization-aware and applied per-row via each table’s primary key, with unsafe tables skipped and flagged instead of modified.
• Fixed: Maintenance Mode could enter a redirect loop when the redirect URL matched the currently requested page.
• Fixed: Login page logo reachability was checked on every single login page view; now cached to reduce load time.
• Fixed: Database Cleanup item counts could show stale numbers after running a cleanup, and the results message wasn’t fully translatable.
• Fixed: Confirmation dialogs no longer appear on safe actions (Save, Enable) that don’t need one.
• Changed: Tab navigation no longer relies on an expiring nonce, so bookmarked or shared links to a specific tab keep working.

1.1.5

• Fixed: Bug fixes

1.1.4

• Fixed: Bug fixes

1.1.3

• Optimised: Clean-up script optimised