mailfrom; FUNC_WAP2_general::Set_SQL_Params( array('email_for_notifications' => $params['email_for_notifications']) ); } if ($_SESSION['session_plgwap2_license_info']['membership'] != 'pro') { $params['show_protectedby'] = 1; FUNC_WAP2_general::Set_SQL_Params( array('show_protectedby' => 1) ); } ?>

Antivirus settings

Access Key

This key is necessary to access to SiteGuarding API features. Every website has uniq access key. Don't change it if you don't know what is it.

Notifications

> Send Notifications We will send important notifications by email.

Email for Notifications

Tool: Bruteforce protection

'Bruteforce protection for login page', 'content' => '

Activates special captcha page against bruteforce attack.

Brute-force attack is the most common attack, used against Web applications. The purpose of this attack is to gain access to user’s accounts by repeated attempts to guess the password of the user or group of users. If the Web application does not have any protective measures against this type of attack, it is quite simple to hack the system. This method of password guessing is good because in the end the password is cracked, but it may take a very, very long time.

Learn more

', ); FUNC_WAP2_general::Print_MessageBox($data); ?>

> Enable Bruteforce protection (protection for administrator login page)

reCAPTCHA Site Key

reCAPTCHA Secret key

Get reCAPTCHA keys for your site here https://www.google.com/recaptcha/intro/index.html

Step 1. Go to https://www.google.com/recaptcha/ and fill the form

Step 2. Copy and Insert the keys

Additional Firewal Rules

e.g. 200.150.160.1 or 200.150.160.* or or 200.150.*.*

e.g. 200.150.160.1 or 200.150.160.* or or 200.150.*.*

e.g. /configuration.php

e.g. /administrator/ (nobody will be able to login to /administrator/, don't forget to allow your IP)

General

type="checkbox" name="show_protectedby" type="checkbox" id="show_protectedby" class="hidden" value="1" > Show 'Protected by'

Server Time: . This time stamp we will use in our logs by default. You can change timezone in Joomla user settings

mailfrom; if ($data['protect_login_page'] == 1 && ($data['captcha_secret_key'] == '' || $data['captcha_site_key'] == '')) $data['protect_login_page'] = 0; $folder_siteguarding_logs = dirname(dirname(dirname(dirname(__FILE__)))).'/siteguarding_logs'; if (!file_exists($folder_siteguarding_logs)) mkdir($folder_siteguarding_logs); $fp = fopen($folder_siteguarding_logs.'/sgantivirus.login.keys.php', 'w'); fwrite($fp, ''); fclose($fp); // Patch administrator\index.php if ($data['protect_login_page'] == 1) { if (FUNC_WAP2_general::PatchJMIndex_file(true) === false) { $data['protect_login_page'] = 0; $_SESSION['session_plgwap2_alert_message'] = ' Protect Login page is disabled. Can\'t modify administrator\index.php'; } } if ($data['protect_login_page'] == 0) { FUNC_WAP2_general::PatchJMIndex_file(false); } // Firewall rules $folder = JPATH_ADMINISTRATOR.'/siteguarding_firewall/'; $files = array( 'rules_allowed_ip', 'rules_blocked_ip', 'rules_blocked_files', 'rules_blocked_urls' ); $full_rules_txt = ''; foreach ($files as $file) { $filename = $folder.$file.".txt"; $txt = ''; if (isset($_POST[$file])) { $txt = trim($_POST[$file]); } else $txt = ''; $fp = fopen($filename, 'w'); fwrite($fp, $txt); fclose($fp); } self::CombineFirewallRules(); FUNC_WAP2_general::Set_SQL_Params($data); $msg_data = array( 'type' => 'ok', 'size' => 'small', 'content' => 'Settings saved.', ); FUNC_WAP2_general::Print_MessageBox($msg_data); unset($_SESSION['session_plgwap2_license_info']); $file = $plugin_dir.'tmp'.DIRSEP.'antivirus_license.json'; $license_info = FUNC_WAP2_general::GetLicenseInfo(FUNC_WAP2_general::GetDomain(), $_SESSION['session_plgwap2_params']['access_key']); FUNC_WAP2_general::CreateFile($file, json_encode($license_info)); $_SESSION['session_plgwap2_license_info'] = $license_info; unset($_SESSION['session_plgwap2_params']); return true; } } public static function CombineFirewallRules() { $a = array(); $folder = JPATH_ADMINISTRATOR.'/siteguarding_firewall/'; if (!file_exists($folder)) self::InstallFirewallFolder(); $files = array( 'rules_allowed_ip.txt' => '::ALLOW_ALL_IP::', 'rules_blocked_ip.txt' => '::BLOCK_ALL_IP::', 'rules_blocked_files.txt' => '::RULES::', 'rules_blocked_urls.txt' => '::BLOCK_URLS::', 'rules_requests.txt' => '::BLOCK_REQUESTS::' ); $full_rules_txt = ''; foreach ($files as $file => $firewall_section) { if (file_exists($folder.$file)) { $filename = $folder.$file; $size = filesize($filename); $handle = fopen($filename, "r"); $txt = ($size) ? fread($handle, filesize($filename)) : ''; fclose($handle); $full_rules_txt .= $firewall_section."\n"; if ($file == 'rules_blocked_files.txt' && $txt != '') { $txt = explode("\n", $txt); if (count($txt)) { foreach ($txt as $k => $v) { $txt[$k] = 'allow|file|'.$v; } $txt = implode("\n", $txt); } } $full_rules_txt .= $txt."\n\n"; } } $filename = $folder."rules.txt"; $fp = fopen($filename, 'w'); fwrite($fp, $full_rules_txt); fclose($fp); } public static function InstallFirewallFolder() { $folder = JPATH_ADMINISTRATOR.'/siteguarding_firewall/'; if (!file_exists($folder)) mkdir($folder); $file = $folder.'.htaccess'; if (!file_exists($file)) { $fp = fopen($file, 'w'); $t = ' order deny,allow deny from all '; fwrite($fp, $t); fclose($fp); } $file = $folder.'rules_requests.txt'; if (!file_exists($file)) { $fp = fopen($file, 'w'); $t = 'cDF8Kg0KKnxiYXNlNjRfZGVjb2RlDQoqfHN0cl9yb3QxMw0KKnw8P3BocA0KKnxldmFsKA0KKnxGaWxlc01hbg0KKnxlZG9jZWRfNDZlc2FiDQoqfG1vdmVfdXBsb2FkZWRfZmlsZQ0KKnxleHRyYWN0KCRfQ09PS0lFKQ0KbG9nfHdwdXBkYXRlc3RyZWFtDQpleGVjdXRlfHdwX2luc2VydF91c2VyDQpsb2d8d3AuDQp1c2VybmFtZXxqb29tbGEu'; $t = base64_decode($t); fwrite($fp, $t); fclose($fp); } $files = array( 'rules_allowed_ip.txt', 'rules_blocked_ip.txt', 'rules_blocked_files.txt', 'rules_blocked_urls.txt' ); foreach ($files as $file) { $file = $folder.$file; if (!file_exists($file)) { $fp = fopen($file, 'w'); fwrite($fp, ''); fclose($fp); } } $folder = $folder.'/logs/'; if (!file_exists($folder)) mkdir($folder); $file = $folder.'.htaccess'; if (!file_exists($file)) { $fp = fopen($file, 'w'); $t = ' order deny,allow deny from all '; fwrite($fp, $t); fclose($fp); } } } ?>