New constant: MEDIFENCE_LOCK_SETTINGS — for handed-over sites and teams where the protection is not changed casually.
- Set it in wp-config.php and everything that moves the protection scope — saving, previewing, importing, undoing from the history, and per-file exceptions — is refused, in the admin and over WP-CLI alike.
- Diagnosis, audits, the access log, share links and the pause stay available: the lock freezes the scope, not the operations. The settings tab says plainly that it is locked.
- This is the written-down form of an agreement, not a security layer — whoever can edit wp-config.php can remove the constant.
📦 Download Medifence 1.46.0 (zip)
