Embedded Files
To enable this security tool, go to plugin settings
(path: /Admin/ExtendedSecurity/Configure)
On Configure tab can store owner:
enable/disable whitelists (IP addresses, Countries, User-Agents)
enable/disable blacklists (IP addresses, Countries, User-Agents)
specify if to log request data
specify if blacklisted visitors' data is to be logged
specify if whitelisted visitors' data is to be logged
specify the time period (in days) during what are request logs preserved
add RegEx pattern for ignored request paths that will not be checked by blacklists and whitelists
Store owner can insert to the field RegEx Pattern For Ignored Request Paths regex formula, to define paths which are ignored by blacklists and whitelists.
For example:
How to use regex
With regex formula you can specify which URL paths are ignored by blacklist and whitelists. Ignored are only these paths which are defined in formula. It is useful for lowering the load for the server to not check every file/path when it's not necessary.
If, for example, .jsf files are added to exception, that means when it is requested directly, it will be loaded even if IP is blacklisted.
For example, when your IP is not whitelisted, then you can't access main pages, but when you have a direct image link, then you get the access only for the image if this image folder name is in regex rule.
Example regex includes operator "|" (OR), which means that regex includes two expressions and compared is the path matching with first or second expression. URL must meet first OR second expression. If no match was found, then URL is checked.
First expression (^/(images|js|css|icons|lib|lib_npm|themes) includes folder names in URL path (/images OR /js OR /css ... etc.) that is in URL right after initial slash.
For example: https://demo.nopcommerce.com/images/thumbs/0000055_adidas-consortium-campus-80s-running-shoes_550.jpeg
It means, that URLs that include after domain name in path part images are not checked by blacklists and whitelists.Second expression \.(png|jpg|jpeg|gif|ico|tiff|pdf|css|js|jsf|json|ttf|woff|woff2)$) includes file extensions (png OR jpg OR jpeg ... etc.) after file name in the end of the path name.
For example:
https://demo.nopcommerce.com/images/thumbs/0000055_adidas-consortium-campus-80s-running-shoes_550.jpeg
It means, that URLs where file extension is .jpeg are not checked by blacklists and whitelists.For example, while .webp file extension is not included in formula, then URL with ending .webp will be checked by blacklists and whitelists.
On Request Logs tab is displayed request log with visitors' data saved by plugin in DB
For all whitelists and blacklists, the form to add new rules is similar.
Form fields:
Rule - mandatory field to add text or regex, to specify rule
Description - mandatory field to describe rule added to list
Priority - optional field to set rule priority
Page updated
Google Sites
Report abuse