Changelog

Version 2025050700

Fixed

• Issue #67: Fixed non-compliand privacy provider for Cloudflare rule.
• Issue #68: Added missing cache definition language strings.

Security

• Fixed hassiteconfig permission check in plugin stetings page.

Version 2025042300

Fixed

• Several small fixes for Moodle 5.x compatibility.
• Fixed exception on new site installs.

Version 2025040100

Added

• CAPTCHAs and other appropriate rules can now be added to the forgotten password form.
• Unit tests to cover core functionality.
• Add caching and periodic refresh for disposable emails list.
• Clarify timezone used by limitdatetime rule.

Fixed

• Replace login_captcha_enabled to restore 4.1 compatibility.
• Do not display Add CAPTCHA button when site captcha is enabled.
• Reorder internal rule instance list when instance is moved.
• Remove unnecessary calls to encode_instance_config() to improve performance.

Version 2025022700

Added

• New Verify Mail Server ruleto ensure submitted email domain DNS records point at an email server (i.e. have MX records).
• Simplify settings menu options and clarify naming around rule/instances/plugin etc.

Fixed

• Fix error shown in certain situations when using limitdatetime rule, caused by incorrect deferred_deny callback logic.

Version 2025021800

Fixed

• Removed superfluous "name" field from rule instances.
• Add ratelimit to bundled rule plugins list.
• Ensure fieldsets are closed on regstration form before adding new elements.

Version 2025021300

Added

• New Rate Limit rule for limiting the number of registration attempts over a period of time based on the user's session and/or IP address.

Fixed

• Issue #65: Removed unused dB tables.
• Issue #66: Make some CSS rules more specific.

Version 2025020700

Added

• New Cloudflare Turnstile CAPTCHA rule.
• Added separate dropdown for CAPTCHA rules.
• Automatic selection of text in forced instances modal.

Fixed

• Improved notifications and guidance text.
• Only one CAPTCHA rule can be added at a time.
• Fixed some typos and incorrect links.
• Use remote IP for hcaptcha.
• Ensure plugin does no processing if not enabled.

Version 2025012000

Added

• Migrate away from using $CFG->tool_registrationrules_forcedinstances setting in config.php, now using $CFG->forced_plugin_settings properly.
• Add more detail to readme.

Fixed

• Address some stylelint warnings.

Version 2025011800

Added

• A message is now displayed on the Registration rule instances page to highlight that there are disabled rule plugins that cannot added.
• The hCaptcha settings page now provides a link to documentation detailing how to find a sitekey and secret.

Fixed

• Bundled rule plugins will now be enabled by default on install.
• Improved plugininfo code.

Security

• Added missing admin capability check in editruleinstance.php

Version 2025011700

Fixed

• Add better validation for forced instance config json.