Changelog

1.0.7 - Now licensed under the GNU General Public License version 2 or later (GPLv2+); LICENSE.txt is included in the package. - The Options help text now names the "Password access" card. - Removed two unused language strings.

1.0.6 - The shared password is now turned on, changed and removed only from the Dashboard's Password access card. The on/off switch was removed from Options, and saving Options always keeps the stored password and its on/off state. - After an install or update, administrators stay let through. The admin bypass cookie refreshes on the next backend page, so nobody has to log in again.

1.0.5 - Fixed social link icons showing as empty circles. The Instagram icon now shows the camera outline. - Saving Options can no longer erase a password set on the Dashboard.

1.0.4 - Option-less ?task= rules are no longer supported (they're ignored). - Added the built-in safety list of components that can never be opened. - 404/500 error pages are now covered by the page for visitors who aren't let through. - Removed J2Store confirmPayment from the default rules. - A notice explains any default-rule changes after you update.

1.0.3 - Payment gateway callbacks: added component rules with parameters and the default gateway rules. - The admin-session bypass now needs the browser's own live backend session.

1.0.2 - Allow rules are matched as path prefixes or exact components and tasks; query strings are no longer searched as free text. - Image and video URLs are validated. - The visitor IP behind proxies is read from the right, using the new "Trusted proxies" count. - 404 pages and other front-end errors show the Coming Soon/Maintenance page. - Video is skipped on phones, with Save-Data and with reduced motion; YouTube and Vimeo also get a poster. - Better color contrast (new default accent #c2410c). - Added "Revoke all". - Added the Track Session Metadata notice.

1.0.1 - Bypass for any user group, plus the logged-in administrator bypass. - Named preview links, the shared password and the auto-reply email. - The admin warning bar and the stats panel.

1.0.0 - First release: two modes with three layouts each. - Backgrounds: color, image, video, YouTube and Vimeo. - 503 + Retry-After, plus the noindex/no-store headers. - Bypass by user group, IP/CIDR and the secret preview link. - Emergency link and marker file. - Scheduled switch-off. - Waiting list with CSV export. - Dashboard with live preview.

All releases are dated 2026-10-27. None of them reads or writes .htaccess.

Planned for later: - newsletter service sync - referral waiting list - geo/device rules - multilingual pages - locking only part of a site - settings import/export - recurring maintenance windows