PHP Classes


Recommend this page to a friend!
  Classes of Roman Shneer  >  PHP Web Application Firewall  >  >  Download  
Role: Documentation
Content type: text/markdown
Description: Documentation
Class: PHP Web Application Firewall
Block malicious requests using a white list
Author: By
Last change: Update
Date: 5 years ago
Size: 3,105 bytes


Class file image Download

Web App Firewall


WAFs goal is protect sites against hackers and virus attacks. Web App Firewall its PHP application that implement principle of reverse-proxy , control of types variables accepted by server , and comfortable management interface.<br> alt tag<br> W.A.F. supported to work under LAMP servers with .htaccess files support. Security protection based on white-list strategy: after starting "Learn" mode program collect map of requests, and user have to approve requests. After starting "Guard" mode - program accept only known requests.

Program using white-list strategy, it is more absolute protection, but its requires a lot of work on configuration. In the program using Intellectual graphical UI , its give an opportunity regularize most chaotic structure.

Contains libraries:<br>

Jquery-connections<br> jQuery-1.11.3<br> Google Charts<br>


Linux OS, Apache webserver with support htaccess and mod_rewrite,PHP5 with support CURL and MySQL<br>

How its working?

Web App Firewall organize reverse-proxy by injection to .htaccess file, and writing Rewrite Rules with security key 1.

WAF script get redirected request and parse path and parameters sent from user. Detect created rules for specified situation and block or accept request via prepared politics.

If request approved, WAF script sending request back to server via CURL with added security key 2 (.htaccess rule miss request if detect key2). If request blocked, WAF save logs and show 404 page. <img src="">

Getting Started


HTACCESS Injection

Configuration Settings

Set W.A.F Status Learn on, and Guard off. Now program start collect request-map from every request to site, leave it for one week for view more complete structure of site.

Access Map - configuration permissions

Bad Requests log

Blacklist IP

Analizing Attacks


Project Facebook<br> Write me for help<br> Please donate: <a href=""><img src=""></a>

For more information send a message to info at phpclasses dot org.