a:6:{s:4:"slug";s:8:"firewall";s:10:"properties";a:14:{s:4:"slug";s:8:"firewall";s:4:"name";s:8:"Firewall";s:12:"sidebar_name";s:8:"Firewall";s:21:"show_module_menu_item";b:0;s:19:"show_module_options";b:1;s:11:"storage_key";s:8:"firewall";s:7:"tagline";s:61:"Automatically block malicious URLs and data sent to your site";s:12:"show_central";b:1;s:17:"access_restricted";b:1;s:7:"premium";b:0;s:18:"run_if_whitelisted";b:0;s:19:"run_if_verified_bot";b:0;s:12:"run_if_wpcli";b:0;s:5:"order";i:30;}s:8:"sections";a:6:{i:0;a:5:{s:4:"slug";s:33:"section_firewall_blocking_options";s:7:"primary";b:1;s:5:"title";s:25:"Firewall Blocking Options";s:11:"title_short";s:17:"Firewall Blocking";s:7:"summary";a:2:{i:0;s:56:"Here you choose what kind of malicious data to scan for.";i:1;s:198:"Recommendation - Turn on as many options here as you can. If you find an incompatibility or something stops working, un-check 1 option at a time until you find the problem or review the Audit Trail.";}}i:1;a:4:{s:4:"slug";s:38:"section_choose_firewall_block_response";s:5:"title";s:30:"Choose Firewall Block Response";s:11:"title_short";s:17:"Firewall Response";s:7:"summary";a:2:{i:0;s:75:"Here you choose how the plugin will respond when it detects malicious data.";i:1;s:54:"Recommendation - Choose the option 'Die With Message'.";}}i:2;a:4:{s:4:"slug";s:17:"section_whitelist";s:5:"title";s:71:"Whitelists - IPs, Pages, Parameters, and Users that bypass the Firewall";s:11:"title_short";s:9:"Whitelist";s:7:"summary";a:2:{i:0;s:124:"In principle you should not need to whitelist anything or anyone unless you have discovered a collision with another plugin.";i:1;s:90:"Recommendation - Do not whitelist anything unless you are confident in what you are doing.";}}i:3;a:4:{s:4:"slug";s:21:"section_user_messages";s:5:"title";s:32:"Customize Messages Shown To User";s:11:"title_short";s:16:"Visitor Messages";s:7:"summary";a:3:{i:0;s:51:"Purpose - Customize the messages shown to visitors.";i:1;s:70:"Recommendation - Be sure to change the messages to suit your audience.";i:2;s:75:"Hint - To reset any message to its default, enter the text exactly: default";}}i:4;a:4:{s:4:"slug";s:48:"section_enable_plugin_feature_wordpress_firewall";s:5:"title";s:23:"Enable Module: Firewall";s:11:"title_short";s:14:"Disable Module";s:7:"summary";a:2:{i:0;s:123:"Purpose - The Firewall is designed to analyse data sent to your website and block any requests that appear to be malicious.";i:1;s:53:"Recommendation - Keep the Firewall feature turned on.";}}i:5;a:2:{s:4:"slug";s:14:"section_non_ui";s:6:"hidden";b:1;}}s:7:"options";a:15:{i:0;a:10:{s:3:"key";s:15:"enable_firewall";s:7:"section";s:48:"section_enable_plugin_feature_wordpress_firewall";s:8:"advanced";b:1;s:7:"default";s:1:"Y";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/43";s:9:"link_blog";s:23:"https://shsec.io/wpsf01";s:4:"name";s:15:"Enable Firewall";s:7:"summary";s:39:"Enable (or Disable) The Firewall module";s:11:"description";s:67:"Un-Checking this option will completely disable the Firewall module";}i:1;a:10:{s:3:"key";s:21:"include_cookie_checks";s:7:"section";s:33:"section_firewall_blocking_options";s:8:"advanced";b:1;s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:15:"Include Cookies";s:7:"summary";s:41:"Also Test Cookie Values In Firewall Tests";s:11:"description";s:95:"The firewall tests GET and POST, but with this option checked it will also check COOKIE values.";}i:2;a:9:{s:3:"key";s:19:"block_dir_traversal";s:7:"section";s:33:"section_firewall_blocking_options";s:7:"default";s:1:"Y";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:20:"Directory Traversals";s:7:"summary";s:26:"Block Directory Traversals";s:11:"description";s:71:"This will block directory traversal paths in in application parameters.";}i:3;a:9:{s:3:"key";s:17:"block_sql_queries";s:7:"section";s:33:"section_firewall_blocking_options";s:7:"default";s:1:"Y";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:11:"SQL Queries";s:7:"summary";s:17:"Block SQL Queries";s:11:"description";s:46:"This will block SQL in application parameters.";}i:4;a:9:{s:3:"key";s:21:"block_wordpress_terms";s:7:"section";s:33:"section_firewall_blocking_options";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:15:"WordPress Terms";s:7:"summary";s:30:"Block WordPress Specific Terms";s:11:"description";s:91:"This will block WordPress specific terms in application parameters (wp_, user_login, etc.).";}i:5;a:9:{s:3:"key";s:22:"block_field_truncation";s:7:"section";s:33:"section_firewall_blocking_options";s:7:"default";s:1:"Y";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:16:"Field Truncation";s:7:"summary";s:30:"Block Field Truncation Attacks";s:11:"description";s:66:"This will block field truncation attacks in application parameters";}i:6;a:9:{s:3:"key";s:14:"block_php_code";s:7:"section";s:33:"section_firewall_blocking_options";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:8:"PHP Code";s:7:"summary";s:23:"Block PHP Code Includes";s:11:"description";s:132:"This will block any data that appears to try and include PHP files. Will probably block saving within the Plugin/Theme file editors.";}i:7;a:9:{s:3:"key";s:22:"block_exe_file_uploads";s:7:"section";s:33:"section_firewall_blocking_options";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:16:"Exe File Uploads";s:7:"summary";s:29:"Block Executable File Uploads";s:11:"description";s:59:"This will block executable file uploads (.php, .exe, etc.).";}i:8;a:10:{s:3:"key";s:20:"block_leading_schema";s:7:"section";s:33:"section_firewall_blocking_options";s:8:"advanced";b:1;s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:15:"Leading Schemas";s:7:"summary";s:36:"Block Leading Schemas (HTTPS / HTTP)";s:11:"description";s:135:"This will block leading schemas http:// and https:// in application parameters (off by default; may cause problems with other plugins).";}i:9;a:10:{s:3:"key";s:16:"block_aggressive";s:7:"section";s:33:"section_firewall_blocking_options";s:8:"advanced";b:1;s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:15:"Aggressive Scan";s:7:"summary";s:23:"Aggressively Block Data";s:11:"description";s:159:"Employs a set of aggressive rules to detect and block malicious data submitted to your site. Warning - May cause an increase in false-positive firewall blocks.";}i:10;a:11:{s:3:"key";s:14:"block_response";s:7:"section";s:38:"section_choose_firewall_block_response";s:8:"advanced";b:1;s:7:"default";s:20:"redirect_die_message";s:4:"type";s:6:"select";s:13:"value_options";a:4:{i:0;a:2:{s:9:"value_key";s:20:"redirect_die_message";s:4:"text";s:16:"Die With Message";}i:1;a:2:{s:9:"value_key";s:12:"redirect_die";s:4:"text";s:3:"Die";}i:2;a:2:{s:9:"value_key";s:13:"redirect_home";s:4:"text";s:21:"Redirect To Home Page";}i:3;a:2:{s:9:"value_key";s:12:"redirect_404";s:4:"text";s:10:"Return 404";}}s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:14:"Block Response";s:7:"summary";s:50:"How the firewall responds when it blocks a request";s:11:"description";s:100:"We recommend dying with a message so you know what might have occurred when the firewall blocks you.";}i:11;a:9:{s:3:"key";s:16:"block_send_email";s:7:"section";s:38:"section_choose_firewall_block_response";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:17:"Send Email Report";s:7:"summary";s:89:"When a visitor is blocked the firewall will send an email to the configured email address";s:11:"description";s:124:"Use with caution - if you get hit by automated bots you may send out too many emails and you could get blocked by your host.";}i:12;a:10:{s:3:"key";s:21:"page_params_whitelist";s:7:"section";s:17:"section_whitelist";s:8:"advanced";b:1;s:7:"default";s:0:"";s:4:"type";s:21:"comma_separated_lists";s:9:"link_info";s:19:"https://shsec.io/2a";s:9:"link_blog";s:0:"";s:4:"name";s:20:"Whitelist Parameters";s:7:"summary";s:74:"Detail pages and parameters that are whitelisted (ignored by the firewall)";s:11:"description";s:104:"This should be used with caution and you should only provide parameter names that you must have excluded";}i:13;a:10:{s:3:"key";s:16:"whitelist_admins";s:7:"section";s:17:"section_whitelist";s:8:"advanced";b:1;s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:21:"Ignore Administrators";s:7:"summary";s:21:"Ignore Administrators";s:11:"description";s:78:"Authenticated administrator users will not be processed by the firewall rules.";}i:14;a:11:{s:3:"key";s:16:"text_firewalldie";s:7:"section";s:21:"section_user_messages";s:9:"sensitive";b:1;s:7:"premium";b:1;s:7:"default";s:7:"default";s:4:"type";s:4:"text";s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:22:"Firewall Block Message";s:7:"summary";s:63:"Message Displayed To Visitor When A Firewall Block Is Triggered";s:11:"description";s:102:"When you select the option to display a message to the visitor, this is the message that is displayed.";}}s:11:"definitions";a:3:{s:17:"default_whitelist";a:14:{s:29:"/wp-admin/options-general.php";a:0:{}s:21:"/wp-admin/options.php";a:2:{i:0;s:4:"home";i:1;s:7:"siteurl";}s:21:"/wp-admin/plugins.php";a:1:{i:0;s:6:"plugin";}s:22:"/wp-admin/post-new.php";a:0:{}s:22:"/wp-admin/page-new.php";a:0:{}s:22:"/wp-admin/link-add.php";a:0:{}s:26:"/wp-admin/media-upload.php";a:0:{}s:19:"/wp-admin/admin.php";a:1:{i:0;s:4:"page";}s:18:"/wp-admin/post.php";a:1:{i:0;s:7:"content";}s:27:"/wp-admin/plugin-editor.php";a:1:{i:0;s:10:"newcontent";}s:18:"/wp-admin/page.php";a:0:{}s:24:"/wp-admin/admin-ajax.php";a:0:{}s:21:"/wp-comments-post.php";a:2:{i:0;s:3:"url";i:1;s:7:"comment";}s:1:"*";a:25:{i:0;s:12:"affwp_action";i:1;s:7:"ajaxurl";i:2;s:20:"g-recaptcha-response";i:3;s:11:"verify_sign";i:4;s:6:"txn_id";i:5;s:15:"wp_http_referer";i:6;s:16:"_wp_http_referer";i:7;s:25:"_wp_original_http_referer";i:8;s:11:"JCS_INENREF";i:9;s:5:"pass1";i:10;s:10:"pass1-text";i:11;s:3:"pwd";i:12;s:3:"url";i:13;s:10:"referredby";i:14;s:11:"redirect_to";i:15;s:28:"jetpack_sso_original_request";i:16;s:23:"jetpack_sso_redirect_to";i:17;s:33:"/^wordpress_logged_in_[0-9a-f]+$/";i:18;s:10:"edd_action";i:19;s:12:"edd_redirect";i:20;s:10:"wpcf7-form";i:21;s:20:"yoast_wpseo_metadesc";i:22;s:26:"icwp_wpsf_new_u2f_response";i:23;s:17:"icwp_wpsf_u2f_otp";i:24;s:5:"appId";}}s:17:"firewall_patterns";a:8:{s:12:"dirtraversal";a:1:{s:6:"simple";a:8:{i:0;s:10:"etc/passwd";i:1;s:17:"proc/self/environ";i:2;s:10:"etc/passwd";i:3;s:8:"makefile";i:4;s:7:"wwwroot";i:5;s:10:"pingserver";i:6;s:3:"../";i:7;s:8:"loopback";}}s:7:"wpterms";a:2:{s:6:"simple";a:2:{i:0;s:4:"/**/";i:1;s:13:"wp-config.php";}s:5:"regex";a:3:{i:0;s:4:"^wp_";i:1;s:11:"^user_login";i:2;s:10:"^user_pass";}}s:15:"fieldtruncation";a:1:{s:5:"regex";a:2:{i:0;s:7:"\s{49,}";i:1;s:4:"\x00";}}s:10:"sqlqueries";a:1:{s:5:"regex";a:3:{i:0;s:11:"concat\s*\(";i:1;s:12:"group_concat";i:2;s:13:"union.*select";}}s:7:"exefile";a:1:{s:5:"regex";a:1:{i:0;s:86:"\.(dll|rb|py|exe|php[3-6]?|pl|perl|ph[34]|phl|phtml|phtm|sql|ini|jsp|asp|git|svn|tar)$";}}s:6:"schema";a:2:{s:6:"simple";a:1:{i:0;s:6:".shtml";}s:5:"regex";a:1:{i:0;s:23:"^(http|https|ftp|file):";}}s:7:"phpcode";a:2:{s:6:"simple";N;s:5:"regex";a:1:{i:0;s:52:"(include|include_once|require|require_once)\s*\(.*\)";}}s:10:"aggressive";a:2:{s:6:"simple";a:11:{i:0;s:5:"eval(";i:1;s:6:"(null)";i:2;s:7:"base64_";i:3;s:9:"localhost";i:4;s:10:"(function(";i:5;s:8:"{x.html(";i:6;s:7:").html(";i:7;s:3:"...";i:8;s:10:"/httpdocs/";i:9;s:5:"/tmp/";i:10;s:8:"boot.ini";}s:5:"regex";a:5:{i:0;s:16:"GLOBALS(=|\[|%%)";i:1;s:16:"REQUEST(=|\[|%%)";i:2;s:24:"(`|\<|\>|\[|\]|\{|\}|\?)";i:3;s:32:"drop\s+table\s+(`|'?)[a-z0-9]+\1";i:4;s:53:"'\s+OR\s+'([a-z0-9]+)'\s*=\s*'\1'\s+(--|\(\{|\/\*)\s+";}}}s:6:"events";a:12:{s:10:"check_skip";a:2:{s:3:"cat";i:2;s:4:"stat";b:0;}s:14:"firewall_block";a:3:{s:5:"audit";b:0;s:6:"recent";b:1;s:7:"offense";b:1;}s:23:"blockparam_dirtraversal";a:1:{s:3:"cat";i:3;}s:18:"blockparam_wpterms";a:1:{s:3:"cat";i:3;}s:26:"blockparam_fieldtruncation";a:1:{s:3:"cat";i:3;}s:21:"blockparam_sqlqueries";a:1:{s:3:"cat";i:3;}s:17:"blockparam_schema";a:1:{s:3:"cat";i:3;}s:21:"blockparam_aggressive";a:1:{s:3:"cat";i:3;}s:18:"blockparam_phpcode";a:1:{s:3:"cat";i:3;}s:13:"block_exefile";a:1:{s:3:"cat";i:3;}s:13:"fw_email_fail";a:2:{s:3:"cat";i:2;s:4:"stat";b:0;}s:16:"fw_email_success";a:1:{s:4:"stat";b:0;}}}s:10:"meta_modts";i:1611464296;}