What's New

Latest fixes and additions, released to both Free and Pro unless noted:

• Backup & Restore (Pro). Every AI repair and every cleanup action (bulk delete, Clean Code, Clean Menu XSS, and the rest) now automatically saves a verified snapshot first -- restore any of them with one click, per file or for a whole multi-file AI request as one unit. Snapshots are SHA-256 verified before a restore ever trusts them, and a restore refuses to silently overwrite a file that changed again since the repair. See the Backup & Restore section for the full detail.
• Admin dashboard status badges (Pro). A "Site Protected" pill in the admin header (next to the User Menu) and a matching entry in the Control Panel's Quick Icons area, both shown only while Protection Mode is actually running, not just because the plugin happens to be installed.
• Settings reorganized from 9 tabs down to 6 -- General, Site Protection, License, AI & Automation, Backup & Restore, and Setup Guide -- with collapsible sections for the settings you touch less often (IP Access List, MuRu Shield Hardening).
• Fixed "Create Baseline" (File Integrity Monitoring) redirecting to the wrong settings tab after building a baseline.
• Fixed AI provider Save/Test/Enable buttons in Settings > AI Integrations failing completely silently on a network error or an unexpected server response -- now always shows a real success or error message.
• Fixed the Smart AI Assistant being unable to create a file inside a brand-new directory (e.g. a new SP Page Builder addon folder) -- it previously only validated the file's immediate parent directory.
• Fixed a scan crash on locked-down hosts. Some hosts disable set_time_limit() entirely. The scanner's best-effort attempt to raise the execution-time limit could trigger an uncaught fatal error on those hosts instead of just proceeding -- now guarded so a scan never crashes with a generic server error because of it.
• Pre-scan server limits advisory. Before a scan starts, the scan screen now shows whether this host will let execution time and memory limits be raised, with a ready-to-paste .user.ini fix if not.
• Fewer false positives from host/antivirus scanners. Several hosting-panel and antivirus heuristics were flagging the scanner's own detection-signature code as if it were the malware it detects. Rewritten so the scanner's own files no longer reproduce those trigger patterns, with detection accuracy unchanged.
• Custom asset-only folders no longer flagged. A template's own fonts/css-only folder is now given the same no-structural-flag treatment as a known extension's own asset folder, while every file inside is still fully content-scanned.
• Native Joomla update detection, fixed for real-world hosting. Extensions > Manage > Update now reliably shows an available MuRu Guard update, including on Joomla 6.x sites and sites behind a CDN/reverse proxy.
• Fewer false positives from pre-update snapshot backups and unrecognized webroot folders (site-management tools that back up an extension or an unrelated app into its own folder no longer flood the results with thousands of duplicate findings).