Malicious User Agents
The User Agents tab allows you to block requests from known malicious HTTP clients at the web server level. Blocked user agents receive a 403 Forbidden response before PHP is invoked, reducing server load and preventing scanners and bots from reaching your application.
Default Banned List
| Option | Description |
|---|---|
| Default Banned List | Enable to apply the built-in list of known malicious user-agent strings. The list covers common vulnerability scanners, exploit frameworks, and malicious bots. |
An Edit Default User Agents button opens a modal where you can view and modify the contents of the user_agent_blacklist.inc file. This file is located in the SecurityCheck Pro component directory. Changes in the modal are saved when you click Save & Close.
Editing the default user agent list may be overwritten during SecurityCheck Pro updates. If you need permanent custom entries, use the Own Banned List field instead.
Own Banned List
A free-text area where you can add your own user-agent strings, one per line. These are merged with the default list when the option is applied to the .htaccess file. Use this field to block additional clients not covered by the default list.
Own Code
A free-text area for arbitrary .htaccess directives. Enter any valid Apache or IIS directive here and it will be appended to the .htaccess file when you save. Use this field for custom rules that do not fit the other options.
Custom .htaccess code is written directly to the file without validation. An incorrect directive can take your site offline. Test all custom rules in a development environment first.
