* Security release. Update immediately. Thanks to Julio Potier.
* Code hardening including improved sanitization and an additional nonce for unlock email form. Special thanks to Ryan Satterfield for the hard work.
* Stability of auto-update improved for LiteSpeed customers. We auto-detect if you don't have E=noabort:1 in your .htaccess and give you instructions.
* Auto-update also disabled now for LiteSpeed customers who don't have E=noabort:1 and you will get an email alert with an explanation.
* Fixed a bug that may cause you to have advanced blocking patterns disabled with falcon engine enabled that should not be disabled.
* Removed a benign warning in wfCache.php.
* Added clarity to the banned URL option on the options page. All URL's must be relative.
* Added a primary key to the wp_wfStatus table which is required for certain incremental backup plugins and utilities.
* Fixed advanced country blocking which was not correctly displaying advanced options.
* Migrated to using wp_kses() for sanitization.
* Prevent IP spoofing in default Wordfence IP configuration.
* Change explanations of how Wordfence gets IP's to make it clear which to use to prevent spoofing.
* Make it clear that the option to have IP's immediately blocked when they access a URL requires relative URL's starting with a forward slash.
* Whitelist Sucuri's scanning IP addresses which were getting blocked because they triggered Wordfence blocking during a scan.
* Improved Wordfence's code that acquires the visitor IP to block certain spoofing attacks, be more platform agnostic and deal with visits from private IP's more elegantly.




git-svn-id: https://plugins.svn.wordpress.org/wordfence/trunk@993659 b8457f37-d9ea-0310-8a92-e5e31aec5664