Today, JNoGuest 1.0.4 was released. This version adds support for JomSocial registration (including JomSocial Profile Types), fixes a couple bugs, and has some minor changes to JNoGuest's operation.
One of the key bug fixes in this release is additional checks on the home page allowance parameter. Versions of JNoGuest earlier than 1.0.4 would allow guests to view unauthorized pages by appending the home page's Itemid to the url. JNoGuest now checks the requested url parameters against the configured home page's parameters to ensure this bypass cannot happen. Users that rely upon the home page being allowed are urged to upgrade JNoGuest as soon as possible.
This release also changes the behavior of the IP/User Agent filtering by separating the fields into two distinct textareas in the administrator configuration. Older versions used a single textarea for both types. Theoretically, if a user knew the allowed IP addresses, versions older than 1.0.4 would allow spoofed User Agents containing an allowed IP to access the site.
Finally, all JNoGuest parameters have been updated to allow for maximum translatability, allowing admins of non-English sites to translate JNoGuest to their native language.
The Joomla!® name is used under a limited license from Open Source Matters in the United States and other countries. Jeff Channell is not affiliated with or endorsed by Open Source Matters or the Joomla!® Project.