Basic Protection

Basic protection is a highly recommended security module that comes pre-configured with all settings, eliminating the need for additional setup. You can activate all protections by clicking the "Enable All" button in the top-right corner.


1. Hide Web Server Information

Concealing Web Server or version details enhances security.

Note: Apache and Nginx can only hide version numbers; the Web Server name cannot be hidden.


2. X-Forwarded-For Protection

Filters the X-Forwarded-For parameter to prevent hackers from injecting malicious code for intrusion.


3. Malicious URL Protection

Blocks access via short filenames, malformed file paths, script parsing vulnerabilities, and similar methods.


4. Web Malware Protection

Scans and blocks data submitted to the server to prevent the upload of Webshells.


5. Malicious Code Protection

Provides protection against malicious code in both inbound and outbound server traffic, such as code injection or hijacking scripts.

Note: This takes precedence over all whitelists.


6. Online Upload Protection

Safeguards online uploads with configurable options:

Disable online uploads entirely

Block uploads of executable files


12.png

<< Protected Object