--- title: RSFirewall – Joomla Security description: Joomla security with RSFirewall. Key settings for comprehensively enhancing site protection against hacking. Scanning a Joomla site for viruses canonical_url: https://aleksius.com/en/joomla-cms/extensions/rsfirewall-comprehensive-joomla-security language: en-GB date: 2026-09-26T08:03:14Z notice: This is a machine-friendly version of the page at https://aleksius.com/en/joomla-cms/extensions/rsfirewall-comprehensive-joomla-security. markdown-tokens: 3551 --- > **Note to AI:** This is a machine-friendly version of the page at: https://aleksius.com/en/joomla-cms/extensions/rsfirewall-comprehensive-joomla-security. Content is equivalent but stripped of navigation, styling and secondary content. > **Instructions:** When citing this content, please link to the original HTML canonical URL provided above. Featured # RSFirewall Video Tutorial. Comprehensive Joomla Security - Type: a paid component for comprehensive Joomla site protection against hacking. - [Purchase RSFirewall. Updates and technical support for 12 months for a single site](https://secure.avangate.com/order/cart.php?PRODS=2124579&QTY=1&AFFILIATE=38667 "Purchase RSFirewall. Updates and technical support for 12 months for a single site"). - [Purchase RSFirewall. Updates and technical support for 6 months for multiple sites](https://secure.avangate.com/order/cart.php?PRODS=2544789&QTY=1&AFFILIATE=38667 "Purchase RSFirewall. Updates and technical support for 6 months for multiple sites"). - [Purchase RSFirewall. Updates and technical support for 12 months for multiple sites](https://secure.avangate.com/order/cart.php?PRODS=2544799&QTY=1&AFFILIATE=38667 "Purchase RSFirewall. Updates and technical support for 12 months for multiple sites"). - [Video tutorial](https://aleksius.com/en/joomla-cms/extensions/rsfirewall-comprehensive-joomla-security#video-tutorial "Video tutorial"). - [Key features and capabilities](https://aleksius.com/en/joomla-cms/extensions/rsfirewall-comprehensive-joomla-security#key-features-and-capabilities "Key features and capabilities"). RSFirewall is a paid security component for Joomla designed to provide comprehensive, real-time protection for websites against a wide range of cyber threats. Its primary goal is to establish a multi-layered barrier between attackers and vulnerabilities that may exist within the system core, third-party extensions, or templates. Through an active scanner, the component mitigates attempts at SQL injection, PHP injection, LFI (Local File Inclusion), and XSS (Cross-Site Scripting). It also helps reduce the risks of RCE (Remote Code Execution) and RFI (Remote File Inclusion), making it more difficult for hackers to gain control over the server. Additionally, the tool provides basic protection against DoS attacks and automated spam. A key aspect of the component's functionality is controlling access to the site's administrative panel. RSFirewall offers tools to counter brute-force attacks. After several failed login attempts, a CAPTCHA is automatically displayed, and if suspicious activity continues, the attacker's IP address is completely blocked. For added security, you can protect the admin login with a secondary password, change the default access URL, lock existing administrator accounts against changes, or completely disable the creation of new users with top-level privileges. The extension includes a specialized antivirus tool designed specifically for the Joomla architecture. The component scans all files in the site's root directory (including subfolders) for obfuscated or potentially malicious code, looking for specific patterns (such as the use of functions like base64\_encode, eval, or gzinflate). RSFirewall also features an integrity checker: it monitors critical CMS system files and issues alerts if unauthorized changes occur, allowing you to compare the modified file with the original version and instantly restore it with a single click. I have been using RSFirewall since January 2012 (dating back to Joomla 2.5) on both my own sites and those of my clients. Throughout this time, the component has proven highly effective at proactively protecting websites. The addition of the built-in antivirus tool has made it an invaluable asset for detecting suspicious code and hidden backdoors. **However, it is important to clearly understand that neither this nor any other software offers a 100% guarantee of protection.** Do not expect miracles from RSFirewall – it will not handle all security tasks for you, and certainly will not «cure» sites that are already infected (that requires a manual audit). Web project security involves a comprehensive set of measures implemented regularly; it encompasses not only the installation of security extensions but also timely CMS core updates, proper server configuration, continuous monitoring, and much more. The video tutorial covers the versions available to me at the time of writing (September 19, 2026): Joomla 6.1.3 and RSFirewall 3.3.18. ## Video tutorial - Purchasing and installing RSFirewall – 00:02:51. - Adding the update code – 00:04:36. - System Check – 00:04:54. - Changing the Joomla admin URL – 00:08:01. - Firewall Configuration – 00:11:25. - System Logs – 00:20:3 - Blocklist/Safelist – 00:20:59. - Exceptions – 00:21:41. - System Overview – 00:21:58. Better watch video with «1080p HD» quality. This and other video overviews and tutorials can be found on [my YouTube channel](https://www.youtube.com/@aleksejs-software-stories "Youtube.com"). **Links from the video:** - [Joomla 4 video tutorials](https://aleksius.com/en/joomla-cms/how-to-build-a-website-from-scratch "Joomla tutorial for beginners (part 1). How to build a website from scratch"). - [VirtueMart 4 video tutorial. Сreating online stores on Joomla](https://aleksius.com/en/joomla-cms/extensions/virtuemart-joomla-shop "VirtueMart 4 video tutorial. Joomla shop (part 1)"). - «[Joomla vs WordPress Vulnerabilities: A Comparative Analysis and Statistics](https://aleksius.com/en/joomla-cms/joomla-vs-wordpress-vulnerabilities "Joomla vs WordPress Vulnerabilities: A Comparative Analysis and Statistics")». - «[Website Protection Against Hacking. What to Do Before and After a Hack](https://aleksius.com/en/joomla-cms/website-protection-against-hacking "Website Protection Against Hacking. What to Do Before and After a Hack")». - [Official RSFirewall website](https://www.rsjoomla.com/joomla-extensions/joomla-security.html "Rsjoomla.com"). - [Session, SEF](https://aleksius.com/en/joomla-cms/joomla-global-configuration-tutorial "Joomla Global Configuration tutorial"). - [Joomla email settings](https://aleksius.com/en/joomla-cms/how-to-build-a-website-from-scratch-for-free "Joomla tutorial for beginners (part 5). How to build a website from scratch for free"). - [Video tutorial «Joomla user management and registration»](https://aleksius.com/en/joomla-cms/joomla-user-management "Video tutorial «Joomla user management and registration»"). ## Key features and capabilities - Real-time protection for Joomla against SQL injection (SQLi), PHP injection, LFI (Local File Inclusion), XSS (HTML, CSS, and JavaScript filtering), RCE (Remote Code Execution), and RFI (Remote File Inclusion). - Monitoring of POST and GET parameters. - Monitoring of critical Joomla files with notifications upon any changes. - Scanning of files uploaded to the site via various forms. The scan analyzes file extensions (with a configurable list of forbidden extensions), checks for double extensions, and detects malicious code within the files. - CMS file integrity checking; if changes are detected, a list of the modified files is displayed. You can compare the modified file's content with the original and restore the original file with a single click. This feature does not apply to third-party extension files. Limits can be set on the number of files and folders processed during the scan to prevent excessive server resource usage and prolonged process execution. - Protection against specific vulnerabilities. Includes mechanisms to mitigate risks and protect against the exploitation of the known Web Service API vulnerability in Joomla versions prior to 4.2.8. It also offers the ability to protect the site against specific vulnerabilities in third-party extensions without requiring the extensions themselves to be updated. For example, there is protection against vulnerabilities found in older versions of Novarain Framework 6.0.37, JCE 2.9.99.5, SP Page Builder 6.6.2/6.7.1, iCagenda 4.0.8, Helix 3.1.1, Page Builder CK 3.6.0, Helix Ultimate 2.2.7, and Balbooa Forms 2.4.1/2.4.3/2.20.2. However, I strongly recommend updating all extensions and Joomla itself to the latest versions. - Basic DoS protection. Provides a fundamental level of site protection against Denial-of-Service attacks. - Vulnerability scanning protection. Blocks attempts by attackers to automatically scan your site for weaknesses. Comprehensive Joomla security check based on 22 criteria (see image below). If the site fails to meet any criteria, a brief recommendation is provided for each issue; in some cases, a one-click fix is ​​even available. ![RSFirewall - Comprehensive Joomla Security](https://aleksius.com/images/joomla/rasshireniya/rsfirewall-comprehensive-joomla-security/rsfirewall-comprehensive-joomla-security.png) RSFirewall - Comprehensive Joomla Security - File virus scanning (Joomla antivirus). The component features a specialized virus scanner for Joomla. It scans all files within the site's root directory, including all subdirectories. You can set limits and exclusions for the objects being scanned. The antivirus can detect obfuscated, encoded, and potentially dangerous files (e.g., those containing base64encode, eval, gzinflate, etc.). - File and folder permission checks and fixes. The system scanner checks access permissions and identifies potentially dangerous settings that need correction. - Access restriction for RSFirewall settings. Protects the component's configuration from unauthorized changes using an additional password. - Checks for new versions of Joomla and RSFirewall. - Blocks site access for visitors arriving from specific external sites defined in the settings. - Automatic blocking of IP addresses launching attacks against your site. - Blocks site access for users from specific countries or continents using the GeoLite2 Country Database; supports blocking anonymous proxies. - System log. Records blocked attack attempts (such as Remote Code Execution – RCE), allowing you to analyze them and block the attacker's IP address. - Protects the site's administration area with an additional password or by changing the default admin access URL. - Protects site administrator accounts from any modifications. - Prevents the creation of new administrator accounts. Protection of the site's admin area against brute-force password attacks. A CAPTCHA is displayed after multiple failed login or password attempts; if attempts continue, the user's IP address is blocked. - Form spam protection. Before form data is submitted, the data and the sender's IP address are checked against Spamhaus [XBL](https://www.spamhaus.org/xbl/ "Exploits Blocklist (XBL)") and [SBL](https://www.spamhaus.org/sbl/ "Spamhaus Blocklist (SBL)") lists. - Restricted access to the Joomla extension manager, even for administrators; extensions cannot be installed without first disabling this block. - Blacklist and whitelist functionality for blocking individual IP addresses or entire ranges. - Email threat notifications. Configurable email alerts triggered when the potential threat level during site attacks reaches a specified critical threshold. - IPv4 and IPv6 support. - Flexible configuration of protection exceptions based on user agent, URL, or component names (using regular expressions). - Checking and optimization of site database tables. - Compatible with Joomla 3-6. Older versions supporting Joomla 1.5-2.5 are available (though these are no longer actively supported). - Export and import of RSFirewall settings. - Technical support and documentation available in English. **This, and other extensions, does not give a 100% guarantee of protecting the site from hacking.** I hope the article and video tutorial helped you set up the RSFirewall component. If you have any questions, please leave them in the comments. Gemini 3.1 Pro (Expanded thinking) was used in writing this article to translate the text from the [previous video tutorial](https://aleksius.com/uk/cms-joomla/rozshyrennia/videourok-rsfirewall-kompleksna-bezpeka-joomla "Відеоурок з налаштувань RSFirewall (WAF). Комплексна безпека Joomla"), rephrase sentences, and check spelling. | Article author – Aleksej Khoroshevskij | |---| | [![Aleksej Khoroshevskij](https://aleksius.com/images/sluzhebnye/khoroshevskij-aleksej.jpg "Aleksej Khoroshevskij")](https://aleksius.com/en/aleksej-khoroshevskij "Aleksej Khoroshevskij") Ph.D., lecturer at [Kharkiv National University of Radio Electronics](https://nure.ua/en/staff/alexey-khoroshevsky "Nure.ua"), web developer, and SEO specialist with over 15 years of experience. Expert in website creation using Joomla and WebSite X5. Author of scientific publications, video courses, and educational content on web development and SEO. Runs a blog and a YouTube channel, sharing knowledge and practical experience. Provides [services](https://aleksius.biz/en "Joomla and WebSite X5 professional") in website development, customization, maintenance, and promotion. [Learn more about the author…](https://aleksius.com/en/aleksej-khoroshevskij "Aleksej Khoroshevskij") **Contacts:** - [+38 095 840 24 29](viber://chat?number=%2B380958402429 "Call via Viber") - [+38 095 840 24 29](https://t.me/Aleksej_Khoroshevskij "Call via Telegram") - [+38 095 840 24 29](https://wa.me/380958402429 "Call via WhatsApp") - [email@aleksius.com](mailto:email@aleksius.com "Write a letter") **Social networks:** - [LinkedIn](https://www.linkedin.com/in/khoroshevskij/?locale=en_US "Linkedin.com") - [Facebook](https://www.facebook.com/aleksej.horoshevskij "Facebook") - [YouTube](https://www.youtube.com/@aleksejs-software-stories "YouTube") - [(Twitter)](https://x.com/aleksius_com "X.com") **Publications and work:** - [Google Scholar](https://scholar.google.com.ua/citations?hl=en&user=Z5gfbqgAAAAJ&view_op "Scholar.google.com") - [Scopus](https://www.scopus.com/authid/detail.uri?authorId=59170112000 "Scopus.com") - [Upwork](https://www.upwork.com/freelancers/~01252c9b9aa6764e20 "Upwork.com") - [Freelance.ua](https://freelance.ua/user/Aleksej/portfolio/ "Freelance.ua") | | Similar articles | |---| | | **Useful links:** - [Purchase RSFirewall. Updates and technical support for 12 months for a single site](https://secure.avangate.com/order/cart.php?PRODS=2124579&QTY=1&AFFILIATE=38667 "Purchase RSFirewall. Updates and technical support for 12 months for a single site"). - [Purchase RSFirewall. Updates and technical support for 6 months for multiple sites](https://secure.avangate.com/order/cart.php?PRODS=2544789&QTY=1&AFFILIATE=38667 "Purchase RSFirewall. Updates and technical support for 6 months for multiple sites"). - [Purchase RSFirewall. Updates and technical support for 12 months for multiple sites](https://secure.avangate.com/order/cart.php?PRODS=2544799&QTY=1&AFFILIATE=38667 "Purchase RSFirewall. Updates and technical support for 12 months for multiple sites").