Release highlights

Improved WAF auto-prepend disable behaviour. Disabling the WAF auto-prepend mode now neutralises the admintools-waf.php stub file instead of deleting it outright. This prevents fatal errors that could occur during the .user.ini cache TTL window on servers where the change is not picked up immediately.

Fixed disabling WAF auto-prepend on CGI/FastCGI servers. Disabling WAF auto-prepend mode on CGI or FastCGI servers was not updating .user.ini, leaving the auto_prepend_file directive active even after the WAF file was removed. This is now fixed.

Bug fixes and minor improvements, including two high-severity fixes for fatal errors and a TypeError in the Disable Obsolete Admins feature.

Changelog

Bug fixes

• [HIGH] Disabling WAF auto-prepend on CGI/FastCGI servers did not update .user.ini, leaving the auto_prepend_file directive active after the file was deleted
• [HIGH] Fatal error on sites using WAF auto-prepend mode with Disable Obsolete Admins or Save User Signup IP features enabled
• [HIGH] TypeError in Disable Obsolete Admins WAF feature on PHP 8

Miscellaneous changes

• Check frequency for Disable Obsolete Admins is now a numeric (hours) input
• Disabling WAF auto-prepend now neutralises admintools-waf.php instead of deleting it, to avoid fatal errors during the .user.ini cache TTL window
• Optimize WAF page no longer shows a spurious "changes not yet taken effect" warning while the neutralised stub file is in place