Joomido Antihacker V01.04.2022 for OSTOR/Openkart 2.3 (demo)
Web Programming
Free demo version (link to download the archive indicated).The component JOOMIDO ANTIHACKER is part of the JOOMIDO TOOLKIT package, and is designed to track and block hacking attacks.The idea itself was taken from JUMLOVSKY component OSE ANTIHACKER, which is no longer supported by the developer.Earlier the work of the protection component was checked on OPENCART, the truth with the use of JUMLOVSKY bibliotheken, but later engaged in the development of the system with the used standard methods of opencart, as well as the implementation of the admin with jQuery.The functional
1) protection of the domain by using a secret domain/admin link?_key=_var
When the mode is enabled, the attempts to enter by the standard link are blocked and the redirect to the main.2) block I level, when a potentially dangerous code is inserted into a link, the type of domain?chr= (signatures of such codes are stored in BD).3) block II level, when the request is transmitted by the get or post method.The latest version of the HTMLPurifier library is used to verify potential danger.
All attacks are logged in, as well as the mail message is dismissed (recommended to use SMTP, because many servers will not support the MAIL method).In the future, I plan to add a mail to Telegram.In the subsequent releases I will take into account the wishes of users, as well as adding features, the type of scanning the downloadable files with antivirus (now I am engaged in the development of the ANTIVIRUS system).I also plan to add check and blocking actions from toxic domains, as well as improve check based on the results of the IronWasp and other tools test attacks.It is only for version 2.3. In the near future, I will publish the DLC 2 and 3 versions.
1) protection of the domain by using a secret domain/admin link?_key=_var
When the mode is enabled, the attempts to enter by the standard link are blocked and the redirect to the main.2) block I level, when a potentially dangerous code is inserted into a link, the type of domain?chr= (signatures of such codes are stored in BD).3) block II level, when the request is transmitted by the get or post method.The latest version of the HTMLPurifier library is used to verify potential danger.
All attacks are logged in, as well as the mail message is dismissed (recommended to use SMTP, because many servers will not support the MAIL method).In the future, I plan to add a mail to Telegram.In the subsequent releases I will take into account the wishes of users, as well as adding features, the type of scanning the downloadable files with antivirus (now I am engaged in the development of the ANTIVIRUS system).I also plan to add check and blocking actions from toxic domains, as well as improve check based on the results of the IronWasp and other tools test attacks.It is only for version 2.3. In the near future, I will publish the DLC 2 and 3 versions.