Marco's SQL Injection

Introduction

This plugin adds a simple but, in most cases, fondamental protection against SQL injection and LFI (local files inclusion) attacks. It checks data sent to Joomla and intercepts a lot of common exploits, saving your site from hackers.

Filters requests in POST, GET, REQUEST and blocks SQL injection / LFI attempts.
Notifies you by e-mail when a alert is generated.
Protect also from unKnown 3rd Party extensions vulnerability.
White list for safe components (at your risk ;) )
automatic ip blocking on attack

Enable mail report and prepare yourself to be scared!

Anyway remember that security it is a 'forma mentis', not a plugin!

HISTORY

Version 1.4 Apr 28th, 2014:
* minor code fixes (not security related)
* default table type set by DB engine
* table creation by sql install file

Version 1.2 Mar 26th, 2013:
* Joomla! 3.0 compatility & coding style
* try - catch table checking
* InnoDB table support
* it works fine, nothing else to do on J2.5 ;)

Version 1.1 (Mar 10th, 2011)
* ip auto banning on attack (ip blocking)
* RegEx improvements to intercept more SQL attacks

Version 1.0 (Jan 7st, 2011)
* Joomla! v1.6 compatibility
* send mail also when error is raised
* minor code optimization

Version .98a (Jun 1st, 2010) Thanks to Jeff
* fixed backtics matching
* fixed union all matching
* fixed ....// exploit
* added more info to report mail

Version .98 (May 29th, 2010)
first release.

Please, keep in mind, I repeat: this plugin intercepts a lot of common exploits, not ALL!! this should be intended as an help, this is not "THE SOLUTION".

Write a review

Excellente plugin !

Nancy Rochon (2).
Posted on 10 January 2016

Functionality

I love the option to be advise by email from attack.
I verify the correspondance between alert and the access.log and it is true

Ease of use

We have only to activate the plugin and review the setting.
We can receive notification by email (it's work well!)

Support

No need for support because it is easy to use

Documentation

Perhaps more international documentation could be appreciate (In English)

I used this to: I had a BIG problem with JS Injected attack on all my web site since December 2015.
I did a lot a improvement without be able to stop it.
I find a manual way to rescue my web sites, but I wasn't able to avoid it, I was searching for monitoring tools when I find it.

ottimo plugin!

Manca Cesare (2).
Posted on 05 August 2015

Functionality

Ottimo plugin, lo uso da molti anni in vari siti.
Appena qualcuno tenta di ... mi avvisa per mail.
Grazie

Ease of use

Molto facile da installare e da configurare.

Support

Documentation

Very useful extension

Dmitriy (5).
Posted on 01 August 2015

Functionality

This is really great extension. It not only informs you if there is hacking attempt, but it can prevent most of them.

Ease of use

Just enable plugin and turn on email notification (if you need to be in touch)

Support

Extension very great, so i never necessary to contact support.

Documentation

All main features and preferences described very well on developer site.

I used this to: to be in touch if anyone trying hack my site.

The best so far

aliffhafiz (1).
Posted on 06 June 2015

Functionality

it's simple but it gets the job done.

Ease of use

very easy to config, block all hack attempt.

I used this to: install to all my website. it's simple but it gets the job done. worry free. been using since joomla 1.5 never get hacked. got a lot of attempts but never success . tq marco..

It is saving my sites every day.

Ladislav Antos (3).
Posted on 05 May 2015

Functionality

Just install, make quick setup and you are protected.

Ease of use

Very easy to use.

Support

No support is needed.

Documentation

Perfect & helpful!!

paramatma3589 (2).
Posted on 03 May 2015

Functionality

Works perfect

Ease of use

Just upload and done!

Support

Documentation

I use this on all my Joomla sites now

Martin Bailey (10).
Posted on 28 December 2014

Functionality

Ease of use

Just install, enable and (optionally) configure things like IP blocking, email notification.

Documentation

I used this to: I install this on all my Joomla sites now. It's great to get emails seeing that hack attacks have been stopped. Simple to install and configure - just what you want. It's a shame it's not a standard feature of Joomla.

IPv6 please

Ronald (6).
Posted on 29 October 2014

If installed on a server that uses IPv6 the server will return a 500.

So IPv6 support would be nice and make it usable again.

Features and functionality is excellent!

If you dont use IPv6, than this is the best plugin for blocking unwanted users.

Very useful extension

Miro (6).
Posted on 29 October 2014

It is very useful plugin which make it clear when and what type of attack on your site happens, so you can choose god way to protect it.

I hope that in next release subject will be customizable.

Excellent Plugin

LJ west (18).
Posted on 24 July 2014

I love the pure simplicity of this plugin. So easy to set up you might think it doesn't work! On the contrary...this plugin has saved my website time and time again from hacker attempts. Definitely a MUST HAVE for your website.

Display #

Free

Marco's Google(TM) bot access

By marco maria leoni

Site Access

This plugin allows to spiders and robots, like Google(TM), MSNBot(TM) or Yahoo(TM), to access the pages of the site reserved to the 'Registered' users. Sometimes you have to protect interesting contents to get users' registration for commercial purposes or simply to create a community. But if content are not accessible, how can users know about their existance? With this plugin the search engine...

Free

Marco's noFollow

By marco maria leoni

SEO & Metadata

This plugin allows you to add "rel" and "target" attributes to all outgoing links in articles on your Joomla!, so you can avoid to disperse the Page Rank on the web by setting the attribute rel = "nofollow" on all outbound links, and you can keep visitors on your site by setting the target = "_blank" attribute. Configuration is very easy, simply select the action to be taken for the two attribute...

Free

Marco's parallax background scroller

By marco maria leoni

Page Background

A plugin for parallax background scrolling in Joomla! This is a nice background scrolling effect with a simulation of a pseudo parallax effect. You can insert one or more image in your articles and define an horizontal stripe (view port) to see the images as they was really a landscape through a window. See this plugin in action! Features . Easy to use and configure . CSS3 and responsive . plugi...

Free

Marco's buy me a beer

By marco maria leoni

Donations

This implementation of Buy me a beer in Joomla!, is a smart & funny way to get a donation without the need to specify ethical reasons: "Do you think my job was useful? Ok, buy me a beer, I just wanna have a drink, not save the world!" Features works on multilingual site; every text in the donation form can translated using Joomla's language override feature; automatic PayPal's interface languag...

Free

Marco's PrestaShop Authentication

By marco maria leoni

Site Access

This plugin allows to customers of a PrestaShop™ e-commerce to access the Joomla! site without a new registration. This is a fast authentication bridge between the two systems. Prestashop to Joomla bridgeThis plugin allows to use an existent PrestaShop e-commerce to authenticate its users on a Joomla installation. Features plugin works on J2.5 and J3.x sites; no need of double registration;...