WordPress.org

Changelog

1.0.3

• Bug: Fixed "headers already sent" warning when starting sessions.

1.0.2

• Enhancement: Added messages to the login window to indicate whether Semisecure Login is enabled and functional.
• Clarified documentation.

1.0.1

• Enhancement: Forced expiration of the login nonce after its one potential use. Previously, this could stick around and thus would be vulnerable to a replay attack if a session was hijacked.

1.0

• Initial Release