Support » Plugin: Wordfence Security - Firewall & Malware Scan » what changes to WAF SQL support are included in WF 7.5.5?

what changes to WAF SQL support are included in WF 7.5.5?

  • Resolved Paul Biron

    (@pbiron)


    4 weeks, 1 day ago

    One of the line items in the change log for WF 7.5.5 is:

    Improvement: Expanded WAF SQL syntax support

    Do you have details about exactly what the changes are (i.e., a link to a page on the WF site explaining the changes)?

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support wfpeter

    (@wfpeter)

    4 weeks ago

    Hi @pbiron, thanks for your message.

    I have quickly looked into our development tickets regarding the latest release and it looks like this point was non-specific because it is a Wordfence improvement, rather than improvements to something customers can make use of. The team noticed an edge-case with specific SQL syntax causing undesired results with the WAF.

    Thanks,

    Peter.

    Thread Starter Paul Biron

    (@pbiron)

    4 weeks ago

    I just wanted to make sure it wasn’t a change related to the WAF MySQLi Storage Engine.

    thanx

    Plugin Support wfpeter

    (@wfpeter)

    4 weeks ago

    Hi @pbiron,

    I nearly mentioned in my first reply that whilst the one you highlighted wasn’t related, now you mention it, there are two improvements noted that may be of interest to you:

    – Added optional constants to configure WAF database connection
    – Added MYSQLI_CLIENT_SSL support to WAF database connection

    You can see the more detailed information around this here: https://www.wordfence.com/help/advanced/constants/#waf-mysqli-storage-engine

    Thanks,

    Peter.

    • This reply was modified 4 weeks ago by wfpeter. Reason: Changed link to documentation
    Thread Starter Paul Biron

    (@pbiron)

    4 weeks ago

    > Added MYSQLI_CLIENT_SSL support to WAF database connection

    Cool!! That’s specifically why I asked my original question. I knew you were working on support encrypted connections with the MySQLi storage engine and was wondering if that’s what the changelog entry was about.

    Thanx for following up! I’ll dig in some more and see if this releases solves a problem I’ve had in that regard.

    Thread Starter Paul Biron

    (@pbiron)

    4 weeks ago

    To quote Homer Simpson, “D’Oh!!!”

    I hasn’t even noticed until now that line further down in the changelog about MYSQLI_CLIENT_SSL support. When I originally, scanned the changelog I saw WAF and SQL, opened this topic and didn’t read any further in the changelog 🙂

Viewing 5 replies - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.

Views