BBQ Pro adds configurable request filtering to BBQ Firewall for WordPress. The firewall checks incoming GET, POST, PUT, DELETE, and other requests, blocking those that match patterns associated with SQL injection, executable file uploads, directory traversal, unsafe characters, long request strings, PHP remote or file execution, XSS, and XXE. It also filters requests involving bad bots, bad referrers, and bad POST content.

Set up and test firewall rules

Use the add-on options to enable or disable individual rules and add or remove patterns. You can import and export patterns, add Jeff Starr’s AI Block List, and test patterns with a one-click tool. Dedicated tools reset options and patterns, while inline documentation explains the available settings.

These controls let administrators adjust filtering for a website’s plugins, themes, traffic, and operating needs. BBQ Pro can also whitelist IP addresses when they need to pass through the firewall.

Control access and review blocked activity

Block an individual IP address or an entire IP range. BBQ Pro can send email alerts for blocked requests and display statistics about blocked activity. It also includes protection against XML-RPC exploits and user-ID phishing, plus an option for excessively long URI requests.

Administrators can disable the firewall for logged-in users. This setting lets a site account for how authenticated access is managed.

Choose what happens when a request is blocked

BBQ Pro can redirect blocked requests, show a custom blocked message, or return a response status code selected by the site administrator. The settings support different ways of handling requests that match firewall rules.

Install and activate BBQ Pro on the WordPress site where BBQ Firewall is used. Review the settings, then adjust patterns, IP controls, alerts, response behavior, and other rules as needed. Use pattern testing and the inline documentation while refining the configuration. BBQ Pro works with the protection in BBQ Firewall and is described as compatible with other security extensions.