System
The System Info page provides a comprehensive overview of your site security posture. It is divided into five tabs and includes an Only Problems toggle that hides passing items to focus attention on issues.
The action bar shows the page title, the current Overall Security % as a coloured badge, and the Only Problems toggle switch.
Overall Status tab
A progress bar at the top shows the overall security score. The bar colour is green (above 70 %), yellow (51-70 %), or red (50 % and below).
Beneath the bar, status cards are arranged in a grid. Each card shows a title, a green (pass) or red (fail) indicator, the current value if applicable, and a button that links directly to the relevant configuration screen. Clicking the card title opens an information modal explaining the item and recommending how to fix a failing status.
The items checked are:
| Check | Pass condition |
|---|---|
| Akeeba Restoration Files | No kickstart.php or restore.php files found in the web root |
| Joomla Up to Date | Installed version matches the latest available version |
| Vulnerable Extensions | Zero extensions flagged as vulnerable in the SCP database |
| Unread Logs | Fewer than 10 unread firewall log entries |
| Malware Found | Zero files flagged as suspicious by the Malware Scanner |
| Files with Bad Integrity | Zero files with modified checksums reported by File Integrity |
| File Permissions | Zero files or folders with incorrect permissions reported by File Manager |
| Hide Backend | Backend URL protection is active in .htaccess Protection |
| Forbid New Admins | The "Forbid New Admins" option is enabled in Web Firewall Config > Session Protection |
| Two-Factor Enabled | At least two Joomla MFA plugins are enabled for administrator accounts |
| HTTP Headers | All six recommended HTTP security headers are active: X-Frame-Options, HSTS, X-XSS-Protection, CSP, Referrer-Policy, and X-Content-Type-Options |
Extension Status tab
A second progress bar shows the Web Firewall configuration score. Items check whether the firewall plugin is enabled and, when it is, whether each protection sub-feature is active.
The score weights were rebalanced in 5.2.0 to account for the two new checks (CMD Injection filter and Critical Files Monitoring). If your score dropped a few points after updating, enable Critical Files Monitoring and review the CMD Injection exceptions to recover them.
Firewall group
| Item | Pass condition |
|---|---|
| Firewall Enabled | The plg_system_securitycheckpro plugin is enabled |
| Dynamic Blacklist | Dynamic blacklist is enabled in Web Firewall Config > Lists |
| Log Attacks | Log Attacks is enabled in Web Firewall Config > Logs |
| Second Level | Second level detection is enabled in Web Firewall Config > Second Level |
| Exclude Exceptions if Vulnerable | Option enabled in Web Firewall Config > Exceptions |
| XSS Filter | The XSS exception list does not contain a wildcard (*) |
| SQL Filter | The SQL exception list does not contain a wildcard (*) |
| LFI Filter | The LFI exception list does not contain a wildcard (*) |
| CMD Injection Filter | The CMD Injection exception list does not contain a wildcard (*). Added in 5.2.0. |
| Session Protection | Session protection is enabled and Joomla shared sessions are disabled |
| Session Hijack Protection | Session hijack protection is enabled and shared sessions are disabled |
| Upload Scanner | Upload scanner is enabled in Web Firewall Config > Upload Scanner |
| Critical Files Monitoring | The Critical Files Monitoring option is enabled in the component Global Configuration. Added in 5.2.0. |
| Cron Enabled | A Joomla Scheduled Task is configured for SecurityCheck Pro |
| Last File Manager Check | The most recent File Manager scan ran within the last 24 hours |
| Last File Integrity Check | The most recent File Integrity scan ran within the last 24 hours |
| Spam Protection Enabled | The Spam Protection plugin is installed and enabled |
.htaccess Protection group
| Item | Pass condition |
|---|---|
| Prevent Access | Enabled in .htaccess Protection > Auto Protection |
| Prevent Unauthorized Browsing | Enabled in .htaccess Protection > Auto Protection |
| File Injection Protection | Enabled in .htaccess Protection > Auto Protection |
| Self Environ | Enabled in .htaccess Protection > Auto Protection |
| X-Frame Options | Configured in .htaccess Protection > HTTP Headers |
| Prevent MIME Attacks | Enabled in .htaccess Protection > HTTP Headers |
| Default Banned List | Enabled in .htaccess Protection > User Agents |
| Disable Server Signature | Enabled in .htaccess Protection > Fingerprinting |
| Disallow PHP Eggs | Enabled in .htaccess Protection > Fingerprinting |
| Disallow Sensible Files Access | Configured in .htaccess Protection > Fingerprinting |
Global Configuration tab
Shows basic Joomla platform information:
| Item | Value |
|---|---|
| Joomla Version | Installed Joomla version string |
| Platform | Joomla platform identifier |
MySQL Configuration tab
| Item | Value |
|---|---|
| max_allowed_packet | Current MySQL/MariaDB max packet size in megabytes |
PHP Configuration tab
| Item | Value |
|---|---|
| PHP Version | Installed PHP version string |
| memory_limit | Current PHP memory limit (e.g. 256 MB) |
