Jonathan Miller
f21bcdd6bb
Shields implemented: - SQLiShield — SQL injection detection on GET/POST/COOKIE - XSSShield — cross-site scripting detection on GET/POST - MUAShield — malicious user agent blocking (configurable list) - RFIShield — remote file inclusion prevention - DFIShield — directory traversal / local file inclusion prevention - Block sensitive files (htaccess.txt, configuration.php-dist, etc.) - Block direct PHP execution in images/media/tmp/cache/logs - Block template switching (tmpl=/template= params) - IP deny list with CIDR/wildcard support - Admin secret URL parameter with session persistence All shields individually toggleable. Master users and trusted IPs bypass. Blocked requests logged to #__mokowaas_waf_log table. Authored-by: Moko Consulting Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
MokoWaaS
MokoWaaS is a Joomla 5.x / 6.x system plugin package that provides white-label branding, security hardening, tenant restrictions, health monitoring, and multi-domain management for the MokoWaaS platform.
Features
- White-Label Branding — configurable brand name, company, support URL, colors, favicon, custom CSS
- Tenant Restrictions — master user enforcement, installer/sysinfo/config/template access control
- Health Monitoring — 16 diagnostic checks via
/?mokowaas=healthwith Grafana auto-provisioning - Site Aliases — per-alias offline mode, robots directives, backend redirect, canonical URLs
- Remote API — 6 endpoints (health, install, update, cache, backup, info)
- Security Hardening — HTTPS enforcement, session timeouts, password policy, upload restrictions
- Plugin Protection — protected status, hidden from non-master users, disable/uninstall blocked
Requirements
- Joomla 5.0+ or 6.x
- PHP 8.1+ (8.3+ for Joomla 6)
Installation
Download the latest pkg_mokowaas-*.zip from Releases and install via System → Install → Upload Package File.
After installation, the package auto-enables and sets protected status.
Documentation
Full documentation is available on the MokoWaaS Wiki:
License
GPL-3.0-or-later — see LICENSE.md
Changelog
See CHANGELOG.md