Change Log

v10.903
  - Screening Statistics: Cache-hit results are now included in the Risk Accepted and Risk Declined counts on the statistics panel.
  - Custom Fields Removal: Removing the MaxMind order fields now uses a two-step confirmation - type 'remove', then confirm - to guard against accidental deletion of recorded order history.

v10.902
  - MaxMind Results on the Order: Each screened order now records two custom fields - MM Risk Score and MM Technical Response - shown in the order's Additional Order Information. The risk score can be displayed as a sortable column on the order list. The technical response is a clean, plain-text summary of the full minFraud result (transaction ID and dashboard link, risk score reasons, and IP, email, and address signals), replacing the raw JSON. Fields are created automatically on install; an admin control lets you remove or reinstall them at any time.
  - Google Storebot Verification Improvements: Reverse-DNS verification is now forward-confirmed - the resolved Google hostname is validated back to the connecting IP for a more reliable match. Added native IPv6 verification and a combined IPv4/IPv6 published-range fast path.
  - Richer MaxMind Data: Billing street, billing and shipping names, and shipping phone are now sent to minFraud when present, improving reshipper and drop-address detection. The session identifier is hashed before transmission.
  - Fraud Screening Status Indicator: The admin status card now shows the screening state unmistakably - a green "Enabled" or a red "Disabled" - so a disabled configuration is easy to spot.
  - Logging: Notification email handoffs are now logged on success (recipient and type), not only on failure, to aid deliverability troubleshooting.
  - Various bug fixes.

v10.803
  - Google Storebot Auto-Whitelist: Automatically detects and whitelists Google Shopping checkout verification tests. Verifies via published CIDR ranges, reverse DNS lookup, and Least Frequently Used (LFU) cache. Prevents Storebot traffic from consuming MaxMind queries or triggering velocity blocks.
  - Storebot Email Notifications: First-of-day alert when Storebot activity begins, next-day summary with activity breakdown (total tests, unique IPs, verification method). Anti-flooding limits to two emails per active day.
  - Screening Statistics Dashboard: Real-time three-column display (Today, Yesterday, All Time) tracking total screened, MaxMind queries consumed, queries saved by cache/whitelist/storebot/velocity, risk accepts/declines, and processing errors. Reset with double-click confirmation.
  - Statistics Preservation: Checkbox to preserve screening statistics across module uninstalls and module type switches. Enabled by default on every install and upgrade.
  - Added compatibility with OpenSSL 3.0

v10.721
  - Improved license expiration and grace period warnings and behavior.
  - Logging improvements
  - Minor bug fixes.

v10.712
  - IP Velocity Protection: Detects and blocks IP addresses that repeatedly trigger order declines. Admin UI with View/Clear IPs being blocked. Configure the maximum number of order attempts within a time window, and how long blocked IPs remain locked out.
  - Session Invalidation: Invalidates basket session when IP is velocity-blocked. Fires on every block and post-block attempt.
  - Daily Log Files: One file per day with configurable retention. Built-in admin log viewer with file browser and View/Refresh controls.
  - UTC Timestamps: All timestamps in logs, emails, and admin UI converted to UTC for consistency across servers in different time zones.
  - Empty Basket Guard: Prevents ghost/expired baskets from reaching MaxMind API.

v10.512
  - User Interface: Complete admin panel redesign with card-based layout
  - Email System: Professional HTML emails matching admin panel design
  - Logging: Structured JSON output, consistent timestamps
  - IP Whitelisting: CIDR notation support, unified IPv4/IPv6 handling
  - Enhanced IP detection: Support for CloudFlare, Akamai, nginx headers and edge cases.
  - Branding: Logo, updated company naming, legal footer links
  - MaxMind Connection Test: Added to admin panel. Displays API response in formatted result panel.
  - Various bug fixes.

v10.401
  - new feature - added minFraud query caching with merchant selectable pruning TTL. This feature minimizes the number of minFraud queries made as a customer shops around a site adding and removing products and checking shipping charges by re-using previously cached queries. As long as a customer's billing, shipping and contact information has not changed and the previous minFraud query has not timed out that query's result will be re-used.

v10.305
  - fixed bug that prevented authorization of additional credit card charges to a customer order from within the Miva admin

v10.304
  - minor bug fix

v10.302
  - revised merchant email subject line to show the minFraud risk score
  - bug fixes related to component version install

v10.301
  - added IPv6 whitelisting
  - added IPv6 analysis of customer IP
  - added compatibility with minFraud's new service levels: risk score, insights, factors
