BBQ Pro

BBQ Pro is a lightweight web application firewall for WordPress that blocks malicious requests and exploits. It operates silently in the background, scanning all incoming traffic and blocking URI requests containing malicious code patterns such as base64 encoding functions, eval statements, and executable commands. The plugin provides advanced protection while requiring no Apache or .htaccess configuration.

Key Features

• Firewall Protection - Blocks malicious requests, SQL injection attacks, executable file uploads, and directory traversal attacks
• Plug-and-Play Installation - Functions without requiring any initial configuration
• Fully Customizable Rules - Edit, disable, or remove any pattern; add custom patterns to target URI, user agent, IP addresses, and referrer data
• Email Alerts - Sends notifications when blocked requests occur
• Request Filtering Options - Blocks excessively long requests, redirects blocked traffic, and displays custom messages
• User Exemptions - Ability to disable firewall protection for logged-in users
• Statistics and Monitoring - Displays hit counts for each pattern with bar graph visualization to measure firewall effectiveness
• Pattern Testing - One-click testing functionality for basic, advanced, and custom patterns to verify rules before deployment
• IP Whitelisting - Allows specific IP addresses to bypass firewall rules
• Advanced Logging Support - Integrates with logging systems to track blocked requests
• Reset Tools - One-click restoration of default settings, patterns, and statistics
• Comprehensive Documentation - Inline help documentation accessible from every settings page
• nG Firewall Technology - Incorporates rules from 6G, 7G, and 8G firewall rulesets with minimal false positive rates
• Multi-Parameter Scanning - Scans request URI, query strings, user agents, IP addresses, and referrer information

Best For

BBQ Pro is designed for WordPress site owners who need active protection against common web-based attacks and exploits. It serves sites of any size that require firewall security without server-level configuration, making it suitable for shared hosting environments and sites where users lack direct server access. The plugin is ideal for administrators who want detailed visibility into blocked threats and the ability to fine-tune security rules based on their specific site requirements.