Basic protection is a highly recommended security module that comes pre-configured with all settings, eliminating the need for additional setup. You can activate all protections by clicking the "Enable All" button in the top-right corner.
1. Hide Web Server Information
Concealing Web Server or version details enhances security.
Note: Apache and Nginx can only hide version numbers; the Web Server name cannot be hidden.
2. X-Forwarded-For Protection
Filters the X-Forwarded-For parameter to prevent hackers from injecting malicious code for intrusion.
3. Malicious URL Protection
Blocks access via short filenames, malformed file paths, script parsing vulnerabilities, and similar methods.
4. Web Malware Protection
Scans and blocks data submitted to the server to prevent the upload of Webshells.
5. Malicious Code Protection
Provides protection against malicious code in both inbound and outbound server traffic, such as code injection or hijacking scripts.
Note: This takes precedence over all whitelists.
6. Online Upload Protection
Safeguards online uploads with configurable options:
Disable online uploads entirely
Block uploads of executable files
