Skip to navigation
Enforcer frameworksPHP

Changelog

July 5, 2026

Version 4.1.1

Added

  • Support Regex configuration for sensitive route
  • Added orig_cookie_vid field across all Enforcer activities
January 29, 2026

Version 4.1.0

Added

  • Support for Cross-Tab Session (CTS) extraction from pxcts cookie
  • Support for JWT-based User Identifiers extraction from cookies or headers

Fixed

  • Decoded cookie (px_cookie) now included in risk API request for sensitive route calls
  • Decoded cookie (px_cookie) now included in block activities when a valid cookie exists
November 3, 2025

Version 4.0.0

Changed

  • Updated minimum PHP version from 5.5 to 7.2.5
  • Updated Guzzle HTTP client from 6.0 to 7.0

Fixed

  • Removed <script> tags from test fixture that caused “headers already sent” errors in unit tests
August 25, 2022

Version 3.10.0

Added

  • Support for first party
  • Support for CI V2 hashing protocol

Fixed

  • Bug in client IP extraction feature
April 11, 2022

Version 3.9.1

Fixed

  • URLs with query params did not render properly on new block page

Version 3.9.0

Added

  • Custom logo added to JSON block response

Changed

  • Updated block page to use new template
February 8, 2022

Version 3.8.0

Added

  • Support for credentials intelligence protocols v1 and multistep_sso
  • Support for login successful reporting methods header, status, and custom
  • Support for automatic sending of additional_s2s activity
  • Support for manual sending of additional_s2s activity via header or API call
  • Support for sending raw username on additional_s2s activity
  • New request_id field to all Enforcer activities

Changed

  • Login credentials extraction handles body encoding based on Content-Type request header
  • Successful login credentials extraction automatically triggers risk_api call without needing to enable sensitive routes