dmk/mkphpids

Currently the PHPIDS detects all sorts of XSS, SQL Injection, header injection, directory traversal, RFE/LFI, DoS and LDAP attacks. Through special conversion algorithms the PHPIDS is even able to detect heavily obfuscated attacks.

Package info

github.com/DMKEBUSINESSGMBH/typo3-mkphpids

Homepage

Type:typo3-cms-extension

pkg:composer/dmk/mkphpids

Statistics

Installs: 8โ€‰803

Dependents: 0

Suggesters: 0

Stars: 2

Open Issues: 0

3.0.10 2018-12-17 15:38 UTC

Requires

Requires (Dev)

None

Suggests

None

Provides

None

Conflicts

None

Replaces

  • mkphpids: 3.0.10
  • typo3-ter/mkphpids: 3.0.10

GPL-2.0-or-later a2909668878659c02769c1f1dc81b7adf0f37759

  • Hannes Bochmann <hannes.bochmann.woop@dmk-ebusiness.de>

phpidsxssTYPO3 CMSSQL Injection

This package is auto-updated.

Last update: 2026-06-27 00:56:39 UTC


README

NOTE: This extension is abandoned as the development of PHPIDS was abandoned as well a long time ago. So no Support for TYPO3 9.5 and later versions will be added. If you're interested in more security in your TYPO3 environments you should check out mksanitizedparameters which prevents most attacks in the first place by sanitizing incoming request parameters making it harder for attackers.

Administration

Configuration

UsersManual

ChangeLog

What does it do?

Adding a PHP Intrusion Detection System from http://www.phpids.org to your TYPO3 Website.

This extension is a fork of px_phpids with more features and TYPO3 6.2, 7.6 and 8.7 support. So thanx for the development of px_phpids.

Features

Quote from the Author of PHPIDS:

โ€œPHPIDS (PHP-Intrusion Detection System) is a simple to use, well structured, fast and state-of-the-art security layer for your PHP based web application. The IDS neither strips, sanitizes nor filters any malicious input, it simply recognizes when an attacker tries to break your site and reacts in exactly the way you want it to. Based on a set of approved and heavily tested filter rules any attack is given a numerical impact rating which makes it easy to decide what kind of action should follow the hacking attempt. This could range from simple logging to sending out an emergency mail to the development team, displaying a warning message for the attacker or even ending the userโ€™s session.

PHPIDS enables you to see whoโ€™s attacking your site and how and all without the tedious trawling of logfiles or searching hacker forums for your domain. Last but not least itโ€™s licensed under the LGPL!โ€

On their site you can find a collection of resources related to PHPIDS. These including files, documentation, a friendly forum and a demo which shows some of the best features of PHPIDS.

Screenshots

๐Ÿ‘ Image

The backend module.