Methods Inspected

The Methods tab configures which HTTP request methods the firewall inspects for attack patterns.

Options

Option Default Description
Methods GET,POST,REQUEST The HTTP methods to inspect. The only available value is GET,POST,REQUEST, which covers the three most commonly exploited methods.

The firewall processes request parameters from the selected methods through all active filters (XSS, SQL injection, LFI, second level, and so on). Methods not included in this setting are passed through uninspected.

In standard Joomla installations, all attack vectors use GET or POST parameters. There is no need to change this setting unless you have a specific requirement to inspect other methods.

Web Firewall Configuration - Methods Inspected tab showing GET, POST, REQUEST selection