HeJian Joomla Security, Admin, Customization

return the “Internal Server Error” message when the request contains the search phrase from any SecFilter variable:

SecFilterDefaultAction "deny,log,status:500"

Prevent XSS attacks
Weaker XSS protection but allows common HTML tags:

SecFilter "<( |\n)*script"

Prevent XSS atacks (HTML/Javascript injection):

SecFilter ""

Prevent SQL Injection attack
One of the typical signatures of SQL Injection attack is the appearance of an apostrophe (’) or quotation mark (”) in the GET or POST request. By rejecting all the requests containing those characters, we can make the use of SQL Injection technique very difficult:

SecFilter "'"
SecFilter "\""