MASACP v1.0
Online β€’ High Performance
Continuous Evolution & Release History

MASACP Changelog
& Release Notes

Track all new features, security hardening, performance upgrades, and architectural enhancements across every release.

Latest Release β€’ v2.5.0
v2.5.0 Enterprise Security Edition β€’ September 2026

Major milestone release delivering 20-Level Enterprise Defensive Security Auditing, Next.js / Node.js PM2 application runner, real-time phpMyAdmin Web Studio, WP Toolkit theme snippet injector, and tiered rate limiting.

πŸ›‘οΈ 20-Level Security Hardening

Complete audit covering IDOR, RBAC role tampering, PBKDF2 hashing, CSP headers, Zip-Slip, SSRF defense, SQL identifier whitelisting, and scrubbed audit logs.

⚑ Next.js & Node.js Application Suite

Run modern SSR apps (Next.js, Nuxt, Express, Python FastAPI) with automated PM2 process supervision and seamless Nginx reverse proxy routing.

πŸ—„οΈ phpMyAdmin Database Studio

Built-in visual studio with schema inspector, row CRUD editor, live SQL runner, and 1-click database export/import.

🎨 WP Toolkit Code Snippet Injector

Inject production-ready snippets (Disable XML-RPC, SVG upload, Custom login URL) directly into active theme functions.php with auto-save.

βœ“ Added Tiered Sliding-Window Rate Limiter (5 req/min on login, 3 req/min on password reset, 40 req/min on database/site operations).
βœ“ Integrated Server-Side Token Blacklist (token_blacklist) for immediate session invalidation on logout and password reset.
βœ“ Cryptographic Payment Webhook signature verification (HMAC-SHA256 / SHA512) and Anti-Replay registry for Stripe, PayPal, and Paymob.
βœ“ Automated Sensitive Data Redaction in Activity Audit Logs (scrubbing passwords, JWT tokens, and card numbers).
v2.0.0 High-Performance Engine

Introduced OpenResty LuaJIT micro-caching, Varnish Cache accelerator, real-time GoAccess web analytics engine with country flags, and Linux Cgroups v2 resource governor.

β€’ OpenResty Lua shared dict cache handling 100,000+ requests/sec with sub-millisecond response.
β€’ Multi-tenant Cgroups v2 CPU, RAM, and disk I/O limits per user account.
β€’ Real-time Web SSH pseudo-terminal (xterm.js) with zero external dependencies.
1.0
v1.0.0 Initial Foundation

The foundational release of MASACP: Modern asynchronous FastAPI Python core, Vue 3 Pinia single-page dashboard, Multi-PHP runtime (7.4 to 8.5), and automated Let SSL certificates.