Advanced Intrusion Prevention System for Magento2 - Member of MageSpecialist SecuritySuite
Installs: 36 896
Open Issues: 4
- php: ^7.0|^7.1
- msp/security-suite-common: ^2.0
- phpmyadmin/sql-parser: ^4.1
- msp/security-suite: Full MageSpecialist Security Suite
MSP Shield is the most powerful and most effective protection against malicious user in the MSP Security Suite.
It is a fully featured Intrusion Detection and Intrusion Prevention System for PHP.
MSP Shield is capable of detecting a wide number of hack attempts and protect your Magento 2 from a wide number of potential code vulnerabilities.
You will have an high level of protection against 0-day vulnerabilities, code injections, exploit testing and other known attack patterns.
NOTE: Installing this module does not exempt you from keeping your system up to date.
Member of MSP Security Suite
Installing on Magento2:
1. Install using composer
From command line:
composer require msp/shield php bin/magento setup:upgrade
2. Enable and configure from your Magento backend config
NOTE: Enabling this module for backend can trigger false positives, we strongly suggest to keep it enabled only for frontend and to protect your backend with https://github.com/magespecialist/m2-MSP_AdminRestriction module .
How to test it
MSP Shield can detect a wide number of PHP attack patterns and attack attempts.
You can test it in any Magento 2 form by typing a malicious request.
For example you can try typing
; drop database magento in any form.
This will simulate a SQL injection attack. Magento is already protected against this kind of attack, but you can try it to verify the correct configuration of MSP Shield.
If you correctly installed and configured MSP Shield, an emergency stop screen will appear.
Hack Attempt detected (with stealth mode disabled)
Hack Attempt detected (with stealth mode enabled)
You can browse and search logged events for blocked or non-blocked requests in System > MSP Security Suite > Events Report.