Auto Protection
The Auto Protection tab contains fundamental .htaccess directives that prevent common server-level attacks. All four options are recommended for all Apache and IIS sites.
Options
| Option | Description |
|---|---|
| Prevent Access | Adds rules that block access to sensitive files and directories that should never be publicly accessible (configuration files, log files, backup files). |
| Prevent Unauthorized Browsing | Disables directory listing (the ability to browse folders that do not have an index file). Without this rule, an attacker can enumerate your file structure. |
| File Injection Protection | Blocks requests that attempt to include remote files via GET or POST parameters (Remote File Inclusion, or RFI). |
| Self Environ | Prevents attacks that exploit the PHP_SELF and similar server variables to inject code. |
Each option is a Yes/No dropdown. When a rule has been applied to the .htaccess file, a green check-mark icon appears next to the option label.
All four options in this tab are enabled by the Easy Config preset. They are safe to enable on all standard Joomla installations.
