NEX1ON 0.9.2 — CAPTCHA, security log, file integrity

A release about protection and about seeing what happens to your site.

Security

• CAPTCHA in three variants, verified on the server. It cannot be enabled without keys — otherwise forms would silently stop accepting real people.
• Security event log, separate from the change log: logins, failed attempts, blocks.
• File integrity. The engine takes SHA-256 fingerprints of its files and later shows which files have changed since the snapshot.
• Extended server diagnostics with recommendations.

Users

• Custom profile fields — "City", "Phone", anything — without new columns in the users table. A field appears at registration, in the user's account area and in the panel; required fields are checked before the account is created.
• Custom templates for email confirmation and password reset messages.
• Site time zone.

Fixed

• The "New user" page crashed with a 500 error.
• Custom profile fields were not saved from the panel.
• Eight new actions were written to the log as internal codes.

How to update

Upload the files and click "Update" in the panel. Two migrations: the security event log and profile fields.

---

Links

• Release page — notes, archive size and SHA-256 checksum.
• Discussion on the forum (in Russian).
• All NEX1ON releases.