BBQ Pro

Every WordPress site receives bad requests: attempts at SQL injection, executable file uploads, directory traversal and user-ID phishing. BBQ Pro works as a lightweight web application firewall that runs quietly in the background. It checks incoming URIs and blocks those containing code snippets such as base64_, eval( or .exec(, so harmful traffic is stopped before it reaches your content.

The plugin is ready to use right after setup, and users who want more control can edit the firewall patterns themselves. It runs independently of Apache or .htaccess files, so it works on Apache, Nginx and Windows servers and on SSL/HTTPS sites. That makes it a fit for site owners who want a firewall they can leave alone or tune in detail.

Features

• Lightweight firewall protection: Guards against SQL injections, executable file uploads, directory traversal attacks and user-ID phishing, running silently in the background while it filters incoming requests.
• Plug-and-play setup: Protection begins right away with no configuration required, so beginners can secure a site without working through complex settings.
• Editable firewall rules: Edit, add, disable or remove firewall patterns that target the URI, user agent, IP addresses and more, so the rules match your site.
• nG firewall rulesets: Includes proven rulesets from the 6G, 7G and 8G Firewalls, built on more than 15 years of experience with the nG Firewall approach.
• Pattern testing: Test basic, advanced and custom firewall rules before applying them to your live site, which helps you adjust protection with less risk of downtime.
• Email alerts and custom responses: Get email notifications about blocked requests, and set tailored messages, redirects and HTTP status codes for the traffic the firewall blocks.
• Firewall statistics: See hit counts for each pattern and dynamic bar graphs, then use them to judge how the firewall performs and refine your rules.
• IP whitelist and login protection: Whitelist trusted IP addresses to avoid false blocks, and add another layer of protection to the WordPress login page against brute force attempts.

Best for

• Site owners who want a firewall that works right away
• Administrators who like to fine-tune firewall rules
• Sites on Apache, Nginx or Windows servers