Redirection
The Redirection tab configures what happens after the firewall blocks a request.
JOOMLA
The plugin can redirect blocked visitors to a custom page, to the Joomla default error page, or drop the connection and display the custom HTML/code set in the Blocked IPs message field.
Options
| Option | Default | Description |
|---|---|---|
| Redirect After Attack | (disabled) | When enabled, blocked visitors are redirected instead of receiving the default Joomla 403 error page. |
| Redirect Options | Joomla Path | Where to redirect blocked visitors: Joomla Path (a relative URL within the site, configured below) or Own Page (a specific URL you define). |
| Redirect URL | (empty) | The relative or absolute URL of the page blocked visitors are sent to. Only used when Redirect Options is set to Own Page. |
| Custom HTML/Code | (empty) | A full HTML page or code block displayed to blocked visitors instead of a redirect. Only used when Redirect After Attack is disabled. |
Example: if the attacker modifies a URL to include a path traversal (
?page=../../etc/passwd), with Redirect After Attack enabled and Redirect Options set to Joomla default error page, the attacker receives a 400 error. With Redirect After Attack disabled, the firewall drops the connection and shows the Custom HTML/Code message.
If Redirect After Attack is disabled, blocked visitors see the standard Joomla 403 Forbidden error page or the custom HTML/code configured.
WORDPRESS
The plugin always cuts the connection when an attack is detected, showing the message set in the Blocked IPs message field. Redirect options are not available in WordPress.