A security extension by Texpaok: a firewall against SQL injection, XSS and LFI, IP blacklists and whitelists, an attack log, file permission checks and a scanner for vulnerable extensions.
Securitycheck by Texpaok is a baseline protection kit for personal sites, blogs and small business sites. It blocks common attacks at the request level and helps spot weak points in the site configuration from one backend screen, with little effect on performance.
Features
- A WAF (web application firewall) filtering SQL injection, XSS and LFI, plus a second detection layer for suspicious patterns.
- IPv4 and IPv6 support, IP blacklist and whitelist.
- Attack log in the backend; visitors are redirected automatically once a threat is spotted.
- Basic session protection.
- File and folder permission checker.
- .htaccess protection that puts a secret key in front of the administrator login.
- Vulnerability scanner for installed Joomla extensions.
Compatibility
JED lists Joomla 4, 5 and 6 (and Joomla 3); the description of the current release focuses on Joomla 5 and 6. Version 5.2.0, updated in JED on 18 August 2026.
