Change log for Magento Bot Blocker

Version 2.1.3 (October 2, 2026)

Fixes:

- Resolved the issue where the Bad Request Blocker did not work when the store ran behind a proxy.

Version 2.1.2 (October 1, 2026)

Features:

- Added a new "reCAPTCHA" tab to the Traffic Monitor section. It displays challenges shown, solved, and failed, the solve rate, challenges per hour, the rules that raised them, and the most challenged IPs.
- Implemented the "Insights" panel in the Raw Log section to visually show requests per IP, top networks, filter options, and top paths.
- The Raw Log section now records the duration and HTTP status of each request.
- Added new options to the Raw Log filter: Duration, ms and Filter Options.
- Added a new Raw Log mass action: Require reCAPTCHA for IP.
- Google's crawlers (AdsBot, AdSense, Storebot, InspectionTool) are now checked with reverse DNS, the same way as Googlebot.

Improvements:

- Layered navigation limits now count each selected filter option. For example, manufacturer=1-2-3 counts as 3.
- Blocked search keywords are checked before the search runs, and also apply to search autocomplete.
- Traffic Monitor chart intervals follow the selected date range.
- The "Clear All Logs" button also clears the reCAPTCHA logs.
- The IP Overview section's mass actions now support the "Select All" action.
- Temporary CSV export files are deleted after download.

Fixes:

- Resolved an issue where the traffic monitor grids cut the "All time" time range down to the last 24 hours.
- Fixed an issue where the traffic monitor grids didn't keep the selected date range when loading data.

Version 2.1.1 (September 1, 2026)

Features:

- Added a new "First-Request Parameter Limit" option to the Layered Navigation Protection section.

Improvements:

Version 2.1.0 (August 11, 2026)

Features:

- Added advanced filtering to the Raw Log grid to filter entries by path, IP address, user agent, and country, with per-field match conditions.
- Added a "Show Live Header Values" button under the Trusted Proxy IP Header option, which shows the actual $_SERVER values of the current request.
- Added an interface for defining bot page restriction rules, allowing you to specify a user agent and URL pattern for each rule.
- Added a new "Always On (For Specific Pages)" mode for reCAPTCHA to initiate the challenge only on selected pages, with the option to exclude specific URL patterns.
- Added an option to display reCAPTCHA to visitors from selected countries only.
- Added a "Clear All Logs" button in the Traffic Monitor section.

Improvements:

- Enhanced the performance of the Traffic Monitor section.
- Added support for a new Google reCAPTCHA v3 provider, alongside Google reCAPTCHA v2 and Cloudflare Turnstile.
- The Raw Log grid CSV export file now includes a "Country" column.

Fixes:

- Fixed issues with the XML/CSV export of the Blocked Bad Requests and IP Overview grids.
- Resolved a PHP 8.1+ deprecation notice on every CSV export of the Raw Log and IP Overview grids.

Version 2.0.1 (July 27, 2026)

Features:

- New "Layered Navigation Protection" option, which requires customers to pass reCAPTCHA if they perform more than N GET requests per minute.
- New "Verify Search Engine Crawlers" option to verify Googlebot/Bingbot/DuckDuckBot/Applebot via reverse DNS.

Improvements: