PHPackages wdmg/yii2-guard - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. wdmg/yii2-guard ActiveYii2-extension[Security](/categories/security) wdmg/yii2-guard =============== Security System 1.3.0(2y ago)459811MITPHP Since Nov 6Pushed 2y ago1 watchersCompare [ Source](https://github.com/wdmg/yii2-guard)[ Packagist](https://packagist.org/packages/wdmg/yii2-guard)[ Docs](https://github.com/wdmg/yii2-guard)[ RSS](/packages/wdmg-yii2-guard/feed)WikiDiscussions master Synced 5d ago READMEChangelog (2)Dependencies (4)Versions (7)Used By (1) [![Yii2](https://camo.githubusercontent.com/3f29058a9886ae3e9efc09df82d551051f8ea6c8da1176d9e8ca8a64be6f9b40/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f72657175697265642d596969325f76322e302e34302d626c75652e737667)](https://packagist.org/packages/yiisoft/yii2)[![Downloads](https://camo.githubusercontent.com/1b0ce85aecfa4fa8a9c3c9eeeccdca79ab08bdfaacb7c3f6b24bb133d1f29740/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f77646d672f796969322d67756172642e737667)](https://packagist.org/packages/wdmg/yii2-guard)[![Packagist Version](https://camo.githubusercontent.com/e0078427918e68cd825983d8679bbfe86b3c79660acce0a190ec39d2f1db4982/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f77646d672f796969322d67756172642e737667)](https://packagist.org/packages/wdmg/yii2-guard)[![Progress](https://camo.githubusercontent.com/d2c102b075c16f8a841e697b04c43bc93c8d092c5795ad8b3090d7fa993c258a/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f70726f67726573732d72656164795f746f5f7573652d677265656e2e737667)](https://camo.githubusercontent.com/d2c102b075c16f8a841e697b04c43bc93c8d092c5795ad8b3090d7fa993c258a/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f70726f67726573732d72656164795f746f5f7573652d677265656e2e737667)[![GitHub license](https://camo.githubusercontent.com/e59744f3088e9c978f218c0c79924494bf89b28790f0563f1dbbd2aa4d40085d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6963656e73652f77646d672f796969322d67756172642e737667)](https://github.com/wdmg/yii2-guard/blob/master/LICENSE) [![Security system for Yii2](./docs/images/yii2-guard.png)](./docs/images/yii2-guard.png) Yii2 Guard ========== [](#yii2-guard) Security system for Yii2. The extension is able to detect and repel Overdrive attack, XSS attack, LFI / RFI / RCE attack, PHP / SQL injection attacks, and block by over rate limit. As well as block the user by IP and network (possible to add blocking client manually). This module is an integral part of the [Butterfly.СMS](https://butterflycms.com/) content management system, but can also be used as an standalone extension. Copyrights (c) 2019-2021 [W.D.M.Group, Ukraine](https://wdmg.com.ua/) Requirements ============ [](#requirements) - PHP 5.6 or higher - Yii2 v.2.0.40 and newest - [Yii2 Base](https://github.com/wdmg/yii2-base) module (required) Installation ============ [](#installation) To install the module, run the following command in the console: `$ composer require "wdmg/yii2-guard"` Configure ========= [](#configure) To add a module to the project, add the following data in your configuration file: ``` 'modules' => [ ... 'guard' => [ 'class' => 'wdmg\guard\Module', 'routePrefix' => 'admin' 'useFilters': true, // flag for use filters 'filters': [ // flag for use request filters 'xss': true, 'lfi': true, 'php': true, 'sql': true ], 'patterns': [ // security filters (regexp patterns) 'xss': '/()|(base64|data\\:|fromCharCode|expression|onmouse|onload|alert|getcookie|document\\.)/uim', 'lfi': '/((\\.|%2e){2,}(\\/|%5c|\\\\)|php:\\/\\/|file:\\/\\/|expect:\\/\\/|zip:\\/\\/|yii\\.php|init\\.php|web\\.php|params\\.php|db\\.php|console\\.php|test\\.php|test_db\\.php|phpinfo|passwd|htaccess)/uism', 'php': '/(php:\\/\\/|(eval|preg_replace|require|include|call_user|create_func|array_filter|array_reduce|array_walk|array_map|reflection)\\()/uism', 'sql': '/(UNION|SELECT|OUTFILE|ALTER|INSERT|DROP|TRUNCATE|({%tables}))\\s/uism' ], 'useRateLimit': true, // flag for use requests limitation 'rateLimit': 60, // request limit`s per minute 'rateLimitIgnoringIP': [ // ignoring by IP '::1', '127.0.0.1', ], 'rateLimitIgnoringRoutes': [ // ignoring by request route '/admin' ], 'rateLimitExceptionRoutes': [ // exception from ignoring by request route '/admin/login' '/admin/restore' ], 'rateLimitIgnoringRequests': [ // ignoring by request type 'post': false, 'get': false, 'ajax': true ], 'rateLimitErrorMessage': 'Your request limit has been exceeded! Try later.', // request limit error message 'useOverdriveLimit': true, // flag for use overdrive limitation 'overdriveLimit': [ // limit for $_POST and $_GET data overdrive 'post': 200, 'get': 100 ], 'maxAttempts': 5, // maximum number of attack attempts before blocking 'attemptsDuration': 3600, // time in seconds of storage the history of attempted attacks in the cache 'releaseTime': 3600, // time in seconds of removal restrictions (time of blocking) 'useIpRange': true, // use blocking also by a range of network IP addresses 'forbiddenLayout': "@wdmg/guard/views/layouts/default" // use forbidden error layout for frontend 'useFileSystemScan': true, // use a file system scan for modification 'fileSystemScan': [ // file system scan options 'scanInterval': 21600, 'autoClear': true, 'onlyTypes': [ '*.php', '*.js' ], 'exceptTypes': [], 'excludesPath': [ '@runtime', '@tests', '@runtime/cache', '@webroot/assets' ] ], 'scanReport': [ // options for sending scan notifications by email 'emailViewPath': [ 'html': '@wdmg/guard/mail/report-html', 'text': '@wdmg/guard/mail/report-text' ], 'reportEmail': 'admin@example.com' ] ], ... ], ``` Routing ======= [](#routing) Use the `Module::dashboardNavItems()` method of the module to generate a navigation items list for NavBar, like this: ``` ``` Status and version \[ready to use\] =================================== [](#status-and-version-ready-to-use) - v.1.3.0 - Some fixies, update copyrights - v.1.2.0 - Filesystem scan reports - v.1.1.0 - Added blocking by IP functionality ### Health Score 31 — LowBetter than 68% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity19 Limited adoption so far Community10 Small or concentrated contributor base Maturity62 Established project with proven stability Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~264 days Recently: every ~322 days Total 6 Last Release 1058d ago ### Community Maintainers ![](https://avatars.githubusercontent.com/u/1635637?v=4)[Alexsander Vyshnyvetskyy](/maintainers/alex-wdmg)[@alex-wdmg](https://github.com/alex-wdmg) --- Top Contributors [![alex-wdmg](https://avatars.githubusercontent.com/u/1635637?v=4)](https://github.com/alex-wdmg "alex-wdmg (32 commits)") --- Tags securityyii2guardwdmgyii2-guard ### Embed Badge ![Health badge](/badges/wdmg-yii2-guard/health.svg) ``` [![Health](https://phpackages.com/badges/wdmg-yii2-guard/health.svg)](https://phpackages.com/packages/wdmg-yii2-guard) ``` PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)