You are strongly requested to update to Sabre 1.2.2 in order to suppress a security flaw discovered in the previous releases of this plugin.
Sabre v1.2.1 is missing some files, use v1.2.2 instead.
IMPORTANT! This version is a security fix.
You are strongly requested to update to Sabre 1.2.1 in order to suppress a security flaw discovered in the previous releases of this plugin.
CAUTION: This version won't run with WordPress versions prior to 3.0. See the NOTE 1 of the Description paragraph if you want to use Sabre with an older version of WordPress.
Compliant with WordPress 3.0 or higher.
(NEW) Usable in multisite mode. See list of features for restrictions.
(ENHANCED) Random security test now choose among active tests only.
(ENHANCED) Password no longer included in the registration mail if the custom password option is activated.
(FIXED) Few bugs fixed like Password strength indicator and missing HTML tags.
(FIXED) Fix a bug preventing to display the captcha image with WordPress 3.0.
(FIXED) Fix the display of the policy rules in the registration screen.
(ENHANCED) Link to an policy page and policy text can be both used at the same time.
Compliant with WordPress 3.0 in mono-site configuration (formerly standalone WordPress).
CAUTION: The use of Sabre in multi-site mode (formerly WordPress MU) is an untested feature and will probably not work or give unexpected results.
(ENHANCED) One can choose now by parameter if registration's informations are to be included in the user profile screen.
(FIXED) Sabre can again be used with WordPress version prior to 2.8.
(FIXED) Fix some HTML stuff preventing the login screen to be XHTML 1.0 Transitional compliant.
Compliant with WordPress 2.9.2
(NEW) Registration's informations included in the user profile screen.
(ENHANCED) Policy text can now be an external html or WordPress page shown as a link on the registration form.
(FIXED) Added input fields have now the look and feel of the default WordPress registration form but can be customized in the sabre_login.css file.
Compliant with WordPress 2.9.1
(NEW) Captcha test added : The TEXT test. An alternative to the graphic captcha. The user will have to enter the n-th letter of a randomly generated word.
(NEW) Custom sender's name and Email on the registration's mails sent by Sabre.
(ENHANCED) Invitation codes management: Auto-generation of codes, limited use of the same code, period of validity of the codes.
(FIXED) Timestamps didn't take into account the GMT offset from the WordPress general options.
Compliant with WordPress 2.8.2
Administrator can force the confirmation of registration even when user's confirmation is required.
New design of the options screen to reduce the need of scrolling. The various blocks of parameters can be hidden/shown for easier navigation in the form.
Timestamps now take into account the GMT offset set in the WordPress general options.
No more reference to "blog" in the messages sent or displayed. This was done to stick with the fact that WordPress can be used in many other ways than a mere blog.
Reinforced security against potential SQL injection using $wpdb->prepare function during database accesses.
Action hooks added to allow third part plugins to run functions according to Sabre's events. See FAQ section for more details.
Made compliant with WordPress 2.7.1
Corrected bug in dashboard statistics links
Corrected bug in strengh meter when choosing custom password
Added parameter to activate invitation codes
Added custom logo in logon/registration screen
Plugin is now compatible with WordPress 2.7
Plugin totally rewritten in object oriented PHP
Message management reviewed to support plural form
Corrected bug in automatic suppresion of the blocked registrations log. A value of zero or less days will now stop Sabre's automatic cleanup.
Added parameter to choose between black or white background for the captcha image.
Added parameter to ask the user to read and agree with the general policy rules of the blog before registration.
Sabre has been made compliant with the possibility offered by WordPress 2.6 to move the wp-content directory to a custom location.
Added parameter to let the blog admin validate the user registration.
Revised admin interface for the management of registrations to confirm.
Added tab "Registrations to confirm".
Added parameter to display Sabre statistics on the dashboard of the blog.
Added parameter to let the user choose his own password during registration.
This version requires WordPress 2.5 and can't be used with previous versions of WordPress.
Administration panel has been reworked to stick with the new WordPress admin interface.
Manual registration of an existing user done by name and no longer by user ID as WordPress 2.5 no longer shows the user ID.
Added parameter to receive a mail upon confirmation of registration by a user.
Small adjustments done to comply with WordPress 2.3.3
Added parameter to check if IP address is banned by DNSBL servers.
Change the Sabre table definition as some MySql versions doesn't allow text columns to have default value. This was preventing the creation of the table during Sabre initialization in some occasion.
Added parameter to delete WordPress account automatically when registration is canceled, either manually or because of exceeded period of time.
Added parameter to insert a reference to Sabre at the bottom of the registration form.
Added parameter to select the number of days for automatic purge of history log.
Added parameter to delete all information about Sabre when deactivating the plugin. This will clean your WordPress blog of tables and options created by Sabre, if you decide to stop using Sabre.
Performance improvement bypassing the tests if errors already detected before calling Sabre (eg. user name and/or mail missing)
Performance improvement by code optimization
Reinforced access security to the administration panels of Sabre using wp_nonce_field
Corrected bug in the storage of the number of days for registration's confirmation
Added parameter to deny/authorize newly registered users to sign in before registration is confirmed.
Added the possibility to automatically register all existing WordPress accounts.
Added several messages to give the status of operations done.
Added several new internal tests to make Sabre more efficient in spambot detection. Those tests run undetected for regular human registrars.
Those new tests are:
Control that the registration form is loaded before the answer is sent to the server.
Control that the IP adress of the requester is the same when the form is sent back.
Control that the registration is done within a maximum period of time.
Control that the registration form is possibly filled by a human, in a minimum amount of time.
Changed the way to control who can bypass the registration confirmation : Sabre now tests the "edit_users" capability and no longer the user level. This will ensure that all accounts with a high level of rights will always be able to sign in.
Code optimized and splitted in various files to reduce server loading.
Automatic cleanup enhanced.
Added a possibility to include the test randomly in the registration form. Added manual suppression of logs.
First public version
Requires: 3.0 or higher Compatible up to: 3.3.2 Last Updated: 2012-4-26 Active Installs: