[BMC] Administrator-Login Umgehen 1.0.1

Have released a new maintenance update with improvements and bug fixes

Improvements

• Save-time validation for all options: IP allowlist entries must be valid IP/CIDR ranges, allowed admins must exist and hold admin status, and the alert email must be valid
• Disarm now revokes live bypass sessions; the first Admin CP request after removing the config flag (or disabling development mode) logs the bypassed session out. Password-login sessions are unaffected
• "Granted from new IP" alert email when a bypass succeeds from an IP not seen in the last 30 days

Bug fixes

• Denial throttle entries no longer accumulate in the registry (one per denied IP). Now self prunes with a hard cap. Upgrade cleans up throttle keys.
• Visiting the admin cp login without a front-end login was logged as a denied bypass attempt. Now fails silently
• Usernames with non-ASCII characters could fail the allowed-admins match due to byte-wise case folding; matching is now multi-byte aware
• Logout redirect no longer assumes reply type and now shares the same arming check as the listener