 |
| Website op de Domaine de Bélézy - www.belezy.com |
| |
| Website op de Domaine de Bélézy - www.belezy.com |
{
"__default": {
"session": {
"counter": 1,
"timer": {
"start": 1784427755,
"last": 1784427755,
"now": 1784427755
},
"token": "73JUZD1GCCuvpaVezT7UoY0OipunHIyV"
},
"registry": {},
"user": {
"id": 0,
"name": null,
"username": null,
"email": null,
"password": null,
"password_clear": "",
"block": null,
"sendEmail": 0,
"registerDate": null,
"lastvisitDate": null,
"activation": null,
"params": null,
"groups": [],
"guest": 1,
"lastResetTime": null,
"resetCount": null,
"requireReset": null,
"aid": 0
},
"plg_system_languagefilter": {
"language": "nl-NL"
}
}
}
SELECT `data`
FROM `bly_session`
WHERE `session_id` = X'62336f31336f71616b756d336f6d326736706c73357464733774'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_session | NULL | const | PRIMARY | PRIMARY | 194 | const | 1 | 100.00 | NULL |
| Status | Duration |
|---|---|
| starting | 0.04 ms |
| checking permissions | 0.01 ms |
| Opening tables | 0.13 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.01 ms |
| executing | 0.00 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 16 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 15 | JDatabaseDriver->loadResult() | JROOT/libraries/joomla/session/storage/database.php:45 |
| 14 | JSessionStorageDatabase->read() | Zelfde als de call in onderstaande regel. |
| 13 | session_start() | JROOT/libraries/joomla/session/handler/native.php:260 |
| 12 | JSessionHandlerNative->doSessionStart() | JROOT/libraries/joomla/session/handler/native.php:50 |
| 11 | JSessionHandlerNative->start() | JROOT/libraries/joomla/session/handler/joomla.php:88 |
| 10 | JSessionHandlerJoomla->start() | JROOT/libraries/src/Session/Session.php:661 |
| 9 | Joomla\CMS\Session\Session->_start() | JROOT/libraries/src/Session/Session.php:621 |
| 8 | Joomla\CMS\Session\Session->start() | JROOT/libraries/src/Session/Session.php:499 |
| 7 | Joomla\CMS\Session\Session->get() | JROOT/libraries/src/Session/Session.php:456 |
| 6 | Joomla\CMS\Session\Session->isNew() | JROOT/libraries/src/Application/CMSApplication.php:826 |
| 5 | Joomla\CMS\Application\CMSApplication->loadSession() | JROOT/libraries/src/Application/CMSApplication.php:136 |
| 4 | Joomla\CMS\Application\CMSApplication->__construct() | JROOT/libraries/src/Application/SiteApplication.php:66 |
| 3 | Joomla\CMS\Application\SiteApplication->__construct() | JROOT/libraries/src/Application/CMSApplication.php:386 |
| 2 | Joomla\CMS\Application\CMSApplication::getInstance() | JROOT/libraries/src/Factory.php:140 |
| 1 | Joomla\CMS\Factory::getApplication() | JROOT/index.php:46 |
SELECT `session_id`
FROM `bly_session`
WHERE `session_id` = X'62336f31336f71616b756d336f6d326736706c73357464733774'
LIMIT 1
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_session | NULL | const | PRIMARY | PRIMARY | 194 | const | 1 | 100.00 | Using index |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.01 ms |
| executing | 0.01 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 9 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 8 | JDatabaseDriver->loadResult() | JROOT/libraries/src/Session/MetadataManager.php:74 |
| 7 | Joomla\CMS\Session\MetadataManager->createRecordIfNonExisting() | JROOT/libraries/src/Application/CMSApplication.php:154 |
| 6 | Joomla\CMS\Application\CMSApplication->checkSession() | JROOT/libraries/src/Application/CMSApplication.php:828 |
| 5 | Joomla\CMS\Application\CMSApplication->loadSession() | JROOT/libraries/src/Application/CMSApplication.php:136 |
| 4 | Joomla\CMS\Application\CMSApplication->__construct() | JROOT/libraries/src/Application/SiteApplication.php:66 |
| 3 | Joomla\CMS\Application\SiteApplication->__construct() | JROOT/libraries/src/Application/CMSApplication.php:386 |
| 2 | Joomla\CMS\Application\CMSApplication::getInstance() | JROOT/libraries/src/Factory.php:140 |
| 1 | Joomla\CMS\Factory::getApplication() | JROOT/index.php:46 |
INSERT INTO `bly_session` (`session_id`,`guest`,`time`,`userid`,`username`,`client_id`)
VALUES (X'62336f31336f71616b756d336f6d326736706c73357464733774', 1, 1784427755, 0, '', 0)
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.00 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| update | 0.05 ms |
| end | 0.00 ms |
| query end | 1.20 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 8 | JDatabaseDriverMysqli->execute() | JROOT/libraries/src/Session/MetadataManager.php:116 |
| 7 | Joomla\CMS\Session\MetadataManager->createRecordIfNonExisting() | JROOT/libraries/src/Application/CMSApplication.php:154 |
| 6 | Joomla\CMS\Application\CMSApplication->checkSession() | JROOT/libraries/src/Application/CMSApplication.php:828 |
| 5 | Joomla\CMS\Application\CMSApplication->loadSession() | JROOT/libraries/src/Application/CMSApplication.php:136 |
| 4 | Joomla\CMS\Application\CMSApplication->__construct() | JROOT/libraries/src/Application/SiteApplication.php:66 |
| 3 | Joomla\CMS\Application\SiteApplication->__construct() | JROOT/libraries/src/Application/CMSApplication.php:386 |
| 2 | Joomla\CMS\Application\CMSApplication::getInstance() | JROOT/libraries/src/Factory.php:140 |
| 1 | Joomla\CMS\Factory::getApplication() | JROOT/index.php:46 |
SELECT `extension_id` AS `id`,`element` AS `option`,`params`,`enabled`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `state` = 0
AND `enabled` = 1
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | extension | extension | 82 | const | 40 | 1.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.13 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.20 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 12 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 11 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Component/ComponentHelper.php:445 |
| 10 | Joomla\CMS\Component\ComponentHelper::Joomla\CMS\Component\{closure}() | Zelfde als de call in onderstaande regel. |
| 9 | call_user_func_array() | JROOT/libraries/src/Cache/Controller/CallbackController.php:173 |
| 8 | Joomla\CMS\Cache\Controller\CallbackController->get() | JROOT/libraries/src/Component/ComponentHelper.php:453 |
| 7 | Joomla\CMS\Component\ComponentHelper::load() | JROOT/libraries/src/Component/ComponentHelper.php:519 |
| 6 | Joomla\CMS\Component\ComponentHelper::getComponents() | JROOT/libraries/src/Component/ComponentHelper.php:44 |
| 5 | Joomla\CMS\Component\ComponentHelper::getComponent() | JROOT/libraries/src/Component/ComponentHelper.php:103 |
| 4 | Joomla\CMS\Component\ComponentHelper::getParams() | JROOT/libraries/src/Application/SiteApplication.php:594 |
| 3 | Joomla\CMS\Application\SiteApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:212 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT id, rules
FROM `bly_viewlevels`
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_viewlevels | NULL | ALL | NULL | INDEX KEY ONTBREEKT | NULL | NULL | 4 | 100.00 | NULL |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.12 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.00 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1506 |
| 9 | JDatabaseDriver->loadAssocList() | JROOT/libraries/src/Access/Access.php:1063 |
| 8 | Joomla\CMS\Access\Access::getAuthorisedViewLevels() | JROOT/libraries/src/User/User.php:458 |
| 7 | Joomla\CMS\User\User->getAuthorisedViewLevels() | JROOT/libraries/src/Plugin/PluginHelper.php:318 |
| 6 | Joomla\CMS\Plugin\PluginHelper::load() | JROOT/libraries/src/Plugin/PluginHelper.php:87 |
| 5 | Joomla\CMS\Plugin\PluginHelper::getPlugin() | JROOT/libraries/src/Plugin/PluginHelper.php:129 |
| 4 | Joomla\CMS\Plugin\PluginHelper::isEnabled() | JROOT/libraries/src/Application/SiteApplication.php:604 |
| 3 | Joomla\CMS\Application\SiteApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:212 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT b.id
FROM bly_usergroups AS a
LEFT JOIN bly_usergroups AS b
ON b.lft <= a.lft
AND b.rgt >= a.rgt
WHERE a.id = 9
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | a | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | NULL |
| 1 | SIMPLE | b | NULL | range | idx_usergroup_nested_set_lookup | idx_usergroup_nested_set_lookup | 4 | NULL | 2 | 100.00 | Using where; Using index |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.11 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1550 |
| 10 | JDatabaseDriver->loadColumn() | JROOT/libraries/src/Access/Access.php:980 |
| 9 | Joomla\CMS\Access\Access::getGroupsByUser() | JROOT/libraries/src/Access/Access.php:1095 |
| 8 | Joomla\CMS\Access\Access::getAuthorisedViewLevels() | JROOT/libraries/src/User/User.php:458 |
| 7 | Joomla\CMS\User\User->getAuthorisedViewLevels() | JROOT/libraries/src/Plugin/PluginHelper.php:318 |
| 6 | Joomla\CMS\Plugin\PluginHelper::load() | JROOT/libraries/src/Plugin/PluginHelper.php:87 |
| 5 | Joomla\CMS\Plugin\PluginHelper::getPlugin() | JROOT/libraries/src/Plugin/PluginHelper.php:129 |
| 4 | Joomla\CMS\Plugin\PluginHelper::isEnabled() | JROOT/libraries/src/Application/SiteApplication.php:604 |
| 3 | Joomla\CMS\Application\SiteApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:212 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `folder` AS `type`,`element` AS `name`,`params` AS `params`,`extension_id` AS `id`
FROM bly_extensions
WHERE enabled = 1
AND type = 'plugin'
AND state IN (0,1)
AND access IN (1,1,5)
ORDER BY ordering
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | extension | extension | 82 | const | 111 | 0.60 | Using index condition; Using where; Gebruikt bestandssortering |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.02 ms |
| preparing | 0.01 ms |
| Sorting result | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.00 ms |
| Creating sort index | 0.28 ms |
| end | 0.00 ms |
| query end | 0.01 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 10 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Plugin/PluginHelper.php:351 |
| 9 | Joomla\CMS\Plugin\PluginHelper::Joomla\CMS\Plugin\{closure}() | Zelfde als de call in onderstaande regel. |
| 8 | call_user_func_array() | JROOT/libraries/src/Cache/Controller/CallbackController.php:173 |
| 7 | Joomla\CMS\Cache\Controller\CallbackController->get() | JROOT/libraries/src/Plugin/PluginHelper.php:356 |
| 6 | Joomla\CMS\Plugin\PluginHelper::load() | JROOT/libraries/src/Plugin/PluginHelper.php:87 |
| 5 | Joomla\CMS\Plugin\PluginHelper::getPlugin() | JROOT/libraries/src/Plugin/PluginHelper.php:129 |
| 4 | Joomla\CMS\Plugin\PluginHelper::isEnabled() | JROOT/libraries/src/Application/SiteApplication.php:604 |
| 3 | Joomla\CMS\Application\SiteApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:212 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT *
FROM bly_languages
WHERE published=1
ORDER BY ordering ASC
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_languages | NULL | ALL | NULL | INDEX KEY ONTBREEKT | NULL | NULL | 4 | 25.00 | Using where; Gebruikt bestandssortering |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.13 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.01 ms |
| preparing | 0.01 ms |
| Sorting result | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| Creating sort index | 0.03 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.02 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 9 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Language/LanguageHelper.php:150 |
| 8 | Joomla\CMS\Language\LanguageHelper::getLanguages() | JROOT/plugins/system/languagefilter/languagefilter.php:96 |
| 7 | PlgSystemLanguageFilter->__construct() | JROOT/libraries/src/Plugin/PluginHelper.php:280 |
| 6 | Joomla\CMS\Plugin\PluginHelper::import() | JROOT/libraries/src/Plugin/PluginHelper.php:182 |
| 5 | Joomla\CMS\Plugin\PluginHelper::importPlugin() | JROOT/libraries/src/Application/CMSApplication.php:667 |
| 4 | Joomla\CMS\Application\CMSApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:686 |
| 3 | Joomla\CMS\Application\SiteApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:212 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `element`,`name`,`client_id`,`extension_id`
FROM `bly_extensions`
WHERE `type` = 'language'
AND `state` = 0
AND `enabled` = 1
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | extension | extension | 82 | const | 8 | 1.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.02 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.03 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 9 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Language/LanguageHelper.php:209 |
| 8 | Joomla\CMS\Language\LanguageHelper::getInstalledLanguages() | JROOT/plugins/system/languagefilter/languagefilter.php:110 |
| 7 | PlgSystemLanguageFilter->__construct() | JROOT/libraries/src/Plugin/PluginHelper.php:280 |
| 6 | Joomla\CMS\Plugin\PluginHelper::import() | JROOT/libraries/src/Plugin/PluginHelper.php:182 |
| 5 | Joomla\CMS\Plugin\PluginHelper::importPlugin() | JROOT/libraries/src/Application/CMSApplication.php:667 |
| 4 | Joomla\CMS\Application\CMSApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:686 |
| 3 | Joomla\CMS\Application\SiteApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:212 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT m.id, m.menutype, m.title, m.alias, m.note, m.path AS route, m.link, m.type, m.level, m.language,`m`.`browserNav`, m.access, m.params, m.home, m.img, m.template_style_id, m.component_id, m.parent_id,e.element as component
FROM bly_menu AS m
LEFT JOIN bly_extensions AS e
ON m.component_id = e.extension_id
WHERE m.published = 1
AND m.parent_id > 0
AND m.client_id = 0
ORDER BY m.lft
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | m | NULL | range | idx_client_id_parent_id_alias_language | idx_client_id_parent_id_alias_language | 5 | NULL | 169 | 10.00 | Using index condition; Using where; Gebruikt bestandssortering |
| 1 | SIMPLE | e | NULL | eq_ref | PRIMARY | PRIMARY | 4 | DB3826637.m.component_id | 1 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.03 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.14 ms |
| init | 0.02 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| Sorting result | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| Creating sort index | 0.76 ms |
| end | 0.01 ms |
| query end | 0.01 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 23 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 22 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Menu/SiteMenu.php:93 |
| 21 | Joomla\CMS\Menu\SiteMenu->Joomla\CMS\Menu\{closure}() | Zelfde als de call in onderstaande regel. |
| 20 | call_user_func_array() | JROOT/libraries/src/Cache/Controller/CallbackController.php:173 |
| 19 | Joomla\CMS\Cache\Controller\CallbackController->get() | JROOT/libraries/src/Menu/SiteMenu.php:101 |
| 18 | Joomla\CMS\Menu\SiteMenu->load() | JROOT/libraries/src/Menu/AbstractMenu.php:78 |
| 17 | Joomla\CMS\Menu\AbstractMenu->__construct() | JROOT/libraries/src/Menu/SiteMenu.php:62 |
| 16 | Joomla\CMS\Menu\SiteMenu->__construct() | JROOT/libraries/src/Menu/AbstractMenu.php:142 |
| 15 | Joomla\CMS\Menu\AbstractMenu::getInstance() | JROOT/libraries/src/Application/CMSApplication.php:417 |
| 14 | Joomla\CMS\Application\CMSApplication->getMenu() | JROOT/libraries/src/Application/SiteApplication.php:275 |
| 13 | Joomla\CMS\Application\SiteApplication->getMenu() | JROOT/libraries/src/Router/SiteRouter.php:65 |
| 12 | Joomla\CMS\Router\SiteRouter->__construct() | JROOT/libraries/src/Router/Router.php:189 |
| 11 | Joomla\CMS\Router\Router::getInstance() | JROOT/libraries/src/Application/CMSApplication.php:533 |
| 10 | Joomla\CMS\Application\CMSApplication::getRouter() | JROOT/libraries/src/Application/SiteApplication.php:403 |
| 9 | Joomla\CMS\Application\SiteApplication::getRouter() | JROOT/plugins/system/languagefilter/languagefilter.php:145 |
| 8 | PlgSystemLanguageFilter->onAfterInitialise() | JROOT/libraries/joomla/event/event.php:70 |
| 7 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 6 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 5 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:668 |
| 4 | Joomla\CMS\Application\CMSApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:686 |
| 3 | Joomla\CMS\Application\SiteApplication->initialiseApp() | JROOT/libraries/src/Application/SiteApplication.php:212 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `extension_id` AS `id`,`element` AS `option`,`params`,`enabled`
FROM `bly_extensions`
WHERE `type` = 'library'
AND `element` = 'joomla'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | extension | 484 | const,const | 1 | 100.00 | NULL |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 15 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1662 |
| 14 | JDatabaseDriver->loadObject() | JROOT/libraries/src/Helper/LibraryHelper.php:167 |
| 13 | Joomla\CMS\Helper\LibraryHelper::Joomla\CMS\Helper\{closure}() | Zelfde als de call in onderstaande regel. |
| 12 | call_user_func_array() | JROOT/libraries/src/Cache/Controller/CallbackController.php:173 |
| 11 | Joomla\CMS\Cache\Controller\CallbackController->get() | JROOT/libraries/src/Helper/LibraryHelper.php:175 |
| 10 | Joomla\CMS\Helper\LibraryHelper::loadLibrary() | JROOT/libraries/src/Helper/LibraryHelper.php:43 |
| 9 | Joomla\CMS\Helper\LibraryHelper::getLibrary() | JROOT/libraries/src/Helper/LibraryHelper.php:90 |
| 8 | Joomla\CMS\Helper\LibraryHelper::getParams() | JROOT/libraries/src/Version.php:321 |
| 7 | Joomla\CMS\Version->getMediaVersion() | JROOT/libraries/src/Factory.php:778 |
| 6 | Joomla\CMS\Factory::createDocument() | JROOT/libraries/src/Factory.php:234 |
| 5 | Joomla\CMS\Factory::getDocument() | JROOT/libraries/src/Application/WebApplication.php:1137 |
| 4 | Joomla\CMS\Application\WebApplication->loadDocument() | JROOT/libraries/src/Application/SiteApplication.php:133 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
UPDATE `bly_extensions`
SET `params` = '{\"mediaversion\":\"63c96240fc4e31b82fde508cb45243fe\"}'
WHERE `type` = 'library'
AND `element` = 'joomla'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | UPDATE | bly_extensions | NULL | range | element_clientid,element_folder_clientid,extension | extension | 484 | const,const | 1 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.02 ms |
| updating | 0.05 ms |
| end | 0.01 ms |
| query end | 1.06 ms |
| closing tables | 0.01 ms |
| freeing items | 0.09 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/src/Helper/LibraryHelper.php:117 |
| 9 | Joomla\CMS\Helper\LibraryHelper::saveParams() | JROOT/libraries/src/Version.php:372 |
| 8 | Joomla\CMS\Version->setMediaVersion() | JROOT/libraries/src/Version.php:331 |
| 7 | Joomla\CMS\Version->getMediaVersion() | JROOT/libraries/src/Factory.php:778 |
| 6 | Joomla\CMS\Factory::createDocument() | JROOT/libraries/src/Factory.php:234 |
| 5 | Joomla\CMS\Factory::getDocument() | JROOT/libraries/src/Application/WebApplication.php:1137 |
| 4 | Joomla\CMS\Application\WebApplication->loadDocument() | JROOT/libraries/src/Application/SiteApplication.php:133 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT id, home, template, s.params
FROM bly_template_styles as s
LEFT JOIN bly_extensions as e
ON e.element=s.template
AND e.type='template'
AND e.client_id=s.client_id
WHERE s.client_id = 0
AND e.enabled = 1
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | e | NULL | ref | element_clientid,element_folder_clientid,extension | extension | 82 | const | 7 | 1.00 | Using index condition; Using where |
| 1 | SIMPLE | s | NULL | ref | idx_template,idx_client_id,idx_client_id_home | idx_template | 202 | DB3826637.e.element | 1 | 83.33 | Using index condition; Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.14 ms |
| init | 0.02 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.04 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.05 ms |
| end | 0.00 ms |
| query end | 0.01 ms |
| closing tables | 0.01 ms |
| freeing items | 0.03 ms |
| cleaning up | 0.02 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 6 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 5 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Application/SiteApplication.php:486 |
| 4 | Joomla\CMS\Application\SiteApplication->getTemplate() | JROOT/libraries/src/Application/SiteApplication.php:168 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `id`,`name`,`rules`,`parent_id`
FROM `bly_assets`
WHERE `name` IN ('root.1','com_actionlogs','com_admin','com_ajax','com_akeeba','com_associations','com_banners','com_cache','com_categories','com_checkin','com_config','com_contact','com_content','com_contenthistory','com_cpanel','com_fields','com_finder','com_htprotect','com_installer','com_jce','com_joomlaupdate','com_languages','com_login','com_mailto','com_media','com_menus','com_messages','com_modules','com_newsfeeds','com_phocagallery','com_plugins','com_postinstall','com_privacy','com_redirect','com_search','com_tags','com_templates','com_users','com_weblinks','com_wrapper')
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_assets | NULL | ALL | idx_asset_name | INDEX KEY ONTBREEKT | NULL | NULL | 184 | 21.74 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.13 ms |
| init | 0.04 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.07 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.17 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 18 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 17 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Access/Access.php:429 |
| 16 | Joomla\CMS\Access\Access::preloadComponents() | JROOT/libraries/src/Access/Access.php:213 |
| 15 | Joomla\CMS\Access\Access::preload() | JROOT/libraries/src/Access/Access.php:531 |
| 14 | Joomla\CMS\Access\Access::getAssetRules() | JROOT/libraries/src/Access/Access.php:183 |
| 13 | Joomla\CMS\Access\Access::check() | JROOT/libraries/src/User/User.php:398 |
| 12 | Joomla\CMS\User\User->authorise() | JROOT/components/com_content/models/article.php:58 |
| 11 | ContentModelArticle->populateState() | JROOT/libraries/src/MVC/Model/BaseDatabaseModel.php:457 |
| 10 | Joomla\CMS\MVC\Model\BaseDatabaseModel->getState() | JROOT/components/com_content/models/article.php:251 |
| 9 | ContentModelArticle->hit() | JROOT/components/com_content/controller.php:113 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `id`,`name`,`rules`,`parent_id`
FROM `bly_assets`
WHERE `name` LIKE 'com_content.%' OR `name` = 'com_content' OR `parent_id` = 0
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_assets | NULL | ALL | idx_asset_name,idx_parent_id | INDEX KEY ONTBREEKT | NULL | NULL | 184 | 22.16 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.01 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.10 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 18 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 17 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Access/Access.php:359 |
| 16 | Joomla\CMS\Access\Access::preloadPermissions() | JROOT/libraries/src/Access/Access.php:226 |
| 15 | Joomla\CMS\Access\Access::preload() | JROOT/libraries/src/Access/Access.php:540 |
| 14 | Joomla\CMS\Access\Access::getAssetRules() | JROOT/libraries/src/Access/Access.php:183 |
| 13 | Joomla\CMS\Access\Access::check() | JROOT/libraries/src/User/User.php:398 |
| 12 | Joomla\CMS\User\User->authorise() | JROOT/components/com_content/models/article.php:58 |
| 11 | ContentModelArticle->populateState() | JROOT/libraries/src/MVC/Model/BaseDatabaseModel.php:457 |
| 10 | Joomla\CMS\MVC\Model\BaseDatabaseModel->getState() | JROOT/components/com_content/models/article.php:251 |
| 9 | ContentModelArticle->hit() | JROOT/components/com_content/controller.php:113 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SHOW FULL COLUMNS
FROM `bly_content`
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.18 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.01 ms |
| preparing | 0.01 ms |
| executing | 0.01 ms |
| Opening tables | 0.15 ms |
| checking permissions | 0.02 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.35 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.01 ms |
| Sending data | 0.02 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| removing tmp table | 0.04 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 16 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 15 | JDatabaseDriver->loadObjectList() | JROOT/libraries/joomla/database/driver/mysqli.php:448 |
| 14 | JDatabaseDriverMysqli->getTableColumns() | JROOT/libraries/src/Table/Table.php:261 |
| 13 | Joomla\CMS\Table\Table->getFields() | JROOT/libraries/src/Table/Table.php:180 |
| 12 | Joomla\CMS\Table\Table->__construct() | JROOT/libraries/src/Table/Content.php:39 |
| 11 | Joomla\CMS\Table\Content->__construct() | JROOT/libraries/src/Table/Table.php:328 |
| 10 | Joomla\CMS\Table\Table::getInstance() | JROOT/components/com_content/models/article.php:253 |
| 9 | ContentModelArticle->hit() | JROOT/components/com_content/controller.php:113 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
UPDATE bly_content
SET `hits` = (`hits` + 1)
WHERE `id` = '51'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | UPDATE | bly_content | NULL | range | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.02 ms |
| init | 0.01 ms |
| System lock | 0.02 ms |
| updating | 0.07 ms |
| end | 0.01 ms |
| query end | 1.53 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/src/Table/Table.php:1264 |
| 10 | Joomla\CMS\Table\Table->hit() | JROOT/components/com_content/models/article.php:254 |
| 9 | ContentModelArticle->hit() | JROOT/components/com_content/controller.php:113 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT a.id, a.asset_id, a.title, a.alias, a.introtext, a.fulltext, a.state, a.catid, a.created, a.created_by, a.created_by_alias,
CASE WHEN a.modified = '0000-00-00 00:00:00' THEN a.created ELSE a.modified END as modified, a.modified_by, a.checked_out, a.checked_out_time, a.publish_up, a.publish_down, a.images, a.urls, a.attribs, a.version, a.ordering, a.metakey, a.metadesc, a.access, a.hits, a.metadata, a.featured, a.language, a.xreference,c.title AS category_title, c.alias AS category_alias, c.access AS category_access,u.name AS author,parent.title as parent_title, parent.id as parent_id, parent.path as parent_route, parent.alias as parent_alias,ROUND(v.rating_sum / v.rating_count, 0) AS rating, v.rating_count as rating_count
FROM bly_content AS a
INNER JOIN bly_categories AS c
on c.id = a.catid
LEFT JOIN bly_users AS u
on u.id = a.created_by
LEFT JOIN bly_categories as parent
ON parent.id = c.parent_id
LEFT JOIN bly_content_rating AS v
ON a.id = v.content_id
WHERE a.id = 51
AND c.published > 0
AND a.language in ('nl-NL','*')
AND (a.publish_up = '0000-00-00 00:00:00' OR a.publish_up <= '2026-07-19 02:22:35')
AND (a.publish_down = '0000-00-00 00:00:00' OR a.publish_down >= '2026-07-19 02:22:35')
AND (a.state = 1 OR a.state =2)
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | a | NULL | const | PRIMARY,idx_state,idx_catid,idx_language | PRIMARY | 4 | const | 1 | 100.00 | NULL |
| 1 | SIMPLE | c | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | NULL |
| 1 | SIMPLE | u | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | NULL |
| 1 | SIMPLE | parent | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | NULL |
| 1 | SIMPLE | v | NULL | const | PRIMARY | PRIMARY | 4 | const | 0 | 0.00 | unique row not found |
| Status | Duration |
|---|---|
| starting | 0.06 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.36 ms |
| init | 0.03 ms |
| System lock | 0.01 ms |
| optimizing | 0.02 ms |
| statistics | 0.09 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.02 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.08 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 14 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1662 |
| 13 | JDatabaseDriver->loadObject() | JROOT/components/com_content/models/article.php:151 |
| 12 | ContentModelArticle->getItem() | JROOT/libraries/src/MVC/View/HtmlView.php:425 |
| 11 | Joomla\CMS\MVC\View\HtmlView->get() | JROOT/components/com_content/views/article/view.html.php:42 |
| 10 | ContentViewArticle->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:664 |
| 9 | Joomla\CMS\MVC\Controller\BaseController->display() | JROOT/components/com_content/controller.php:118 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `m`.`tag_id`,`t`.*
FROM `bly_contentitem_tag_map` AS m
INNER JOIN `bly_tags` AS t
ON `m`.`tag_id` = `t`.`id`
WHERE `m`.`type_alias` = 'com_content.article'
AND `m`.`content_item_id` = 51
AND `t`.`published` = 1
AND t.access IN (1,1,5)
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | m | NULL | ALL | idx_tag_type | INDEX KEY ONTBREEKT | NULL | NULL | 1 | 100.00 | Using where |
| 1 | SIMPLE | t | NULL | eq_ref | PRIMARY,tag_idx,idx_access | PRIMARY | 4 | DB3826637.m.tag_id | 1 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.03 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 2.62 ms |
| init | 0.02 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| end | 0.51 ms |
| query end | 0.00 ms |
| closing tables | 0.02 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.00 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 13 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 12 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Helper/TagsHelper.php:454 |
| 11 | Joomla\CMS\Helper\TagsHelper->getItemTags() | JROOT/components/com_content/views/article/view.html.php:184 |
| 10 | ContentViewArticle->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:664 |
| 9 | Joomla\CMS\MVC\Controller\BaseController->display() | JROOT/components/com_content/controller.php:118 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time, c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level, c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id, c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version,
CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug
FROM `bly_categories` AS `s`
INNER JOIN `bly_categories` AS `c`
ON (s.lft < c.lft
AND c.lft < s.rgt
AND c.language IN ('nl-NL','*')) OR (c.lft <= s.lft
AND s.rgt <= c.rgt)
WHERE (c.extension='com_content' OR c.extension='system')
AND c.access IN (1,1,5)
AND c.published = 1
AND s.id = 39
ORDER BY c.lft
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | s | NULL | const | PRIMARY,idx_left_right | PRIMARY | 4 | const | 1 | 100.00 | Gebruikt bestandssortering |
| 1 | SIMPLE | c | NULL | ALL | cat_idx,idx_access,idx_left_right,idx_language | INDEX KEY ONTBREEKT | NULL | NULL | 45 | 29.04 | Using where |
| Status | Duration |
|---|---|
| starting | 0.04 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.03 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.06 ms |
| preparing | 0.01 ms |
| Sorting result | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| Creating sort index | 0.11 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 21 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 20 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Categories/Categories.php:324 |
| 19 | Joomla\CMS\Categories\Categories->_load() | JROOT/libraries/src/Categories/Categories.php:184 |
| 18 | Joomla\CMS\Categories\Categories->get() | JROOT/administrator/components/com_fields/models/fields.php:203 |
| 17 | FieldsModelFields->getListQuery() | JROOT/libraries/src/MVC/Model/ListModel.php:140 |
| 16 | Joomla\CMS\MVC\Model\ListModel->_getListQuery() | JROOT/libraries/src/MVC/Model/ListModel.php:194 |
| 15 | Joomla\CMS\MVC\Model\ListModel->getItems() | JROOT/administrator/components/com_fields/helpers/fields.php:136 |
| 14 | FieldsHelper::getFields() | JROOT/plugins/system/fields/fields.php:495 |
| 13 | PlgSystemFields->onContentPrepare() | JROOT/libraries/joomla/event/event.php:70 |
| 12 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 11 | JEventDispatcher->trigger() | JROOT/components/com_content/views/article/view.html.php:193 |
| 10 | ContentViewArticle->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:664 |
| 9 | Joomla\CMS\MVC\Controller\BaseController->display() | JROOT/components/com_content/controller.php:118 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT DISTINCT a.id, a.title, a.name, a.checked_out, a.checked_out_time, a.note, a.state, a.access, a.created_time, a.created_user_id, a.ordering, a.language, a.fieldparams, a.params, a.type, a.default_value, a.context, a.group_id, a.label, a.description, a.required,l.title AS language_title, l.image AS language_image,uc.name AS editor,ag.title AS access_level,ua.name AS author_name,g.title AS group_title, g.access as group_access, g.state AS group_state, g.note as group_note
FROM bly_fields AS a
LEFT JOIN `bly_languages` AS l
ON l.lang_code = a.language
LEFT JOIN bly_users AS uc
ON uc.id=a.checked_out
LEFT JOIN bly_viewlevels AS ag
ON ag.id = a.access
LEFT JOIN bly_users AS ua
ON ua.id = a.created_user_id
LEFT JOIN bly_fields_groups AS g
ON g.id = a.group_id
LEFT JOIN `bly_fields_categories` AS fc
ON fc.field_id = a.id
WHERE a.context = 'com_content.article'
AND (fc.category_id IS NULL OR fc.category_id IN (39,0,33,32))
AND a.access IN (1,1,5)
AND (a.group_id = 0 OR g.access IN (1,1,5))
AND a.state = 1
AND (a.group_id = 0 OR g.state = 1)
AND a.language in ('*','nl-NL')
ORDER BY a.ordering ASC
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | a | NULL | ref | idx_state,idx_access,idx_language,idx_context | idx_state | 1 | const | 1 | 100.00 | Using index condition; Using where; Using temporary; Gebruikt bestandssortering |
| 1 | SIMPLE | l | NULL | eq_ref | idx_langcode | idx_langcode | 28 | DB3826637.a.language | 1 | 100.00 | Using where |
| 1 | SIMPLE | uc | NULL | eq_ref | PRIMARY | PRIMARY | 4 | DB3826637.a.checked_out | 1 | 100.00 | NULL |
| 1 | SIMPLE | ag | NULL | eq_ref | PRIMARY | PRIMARY | 4 | DB3826637.a.access | 1 | 100.00 | Using where |
| 1 | SIMPLE | ua | NULL | eq_ref | PRIMARY | PRIMARY | 4 | DB3826637.a.created_user_id | 1 | 100.00 | Using where |
| 1 | SIMPLE | g | NULL | eq_ref | PRIMARY | PRIMARY | 4 | DB3826637.a.group_id | 1 | 100.00 | Using where |
| 1 | SIMPLE | fc | NULL | ref | PRIMARY | PRIMARY | 4 | DB3826637.a.id | 1 | 100.00 | Using where; Using index; Distinct |
| Status | Duration |
|---|---|
| starting | 0.05 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.70 ms |
| init | 0.04 ms |
| System lock | 0.01 ms |
| optimizing | 0.01 ms |
| statistics | 0.07 ms |
| preparing | 0.02 ms |
| Creating tmp table | 0.05 ms |
| Sorting result | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.23 ms |
| Creating sort index | 0.02 ms |
| end | 0.00 ms |
| query end | 0.01 ms |
| removing tmp table | 0.05 ms |
| query end | 0.00 ms |
| closing tables | 0.02 ms |
| freeing items | 0.04 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 19 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 18 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/MVC/Model/BaseDatabaseModel.php:322 |
| 17 | Joomla\CMS\MVC\Model\BaseDatabaseModel->_getList() | JROOT/administrator/components/com_fields/models/fields.php:333 |
| 16 | FieldsModelFields->_getList() | JROOT/libraries/src/MVC/Model/ListModel.php:194 |
| 15 | Joomla\CMS\MVC\Model\ListModel->getItems() | JROOT/administrator/components/com_fields/helpers/fields.php:136 |
| 14 | FieldsHelper::getFields() | JROOT/plugins/system/fields/fields.php:495 |
| 13 | PlgSystemFields->onContentPrepare() | JROOT/libraries/joomla/event/event.php:70 |
| 12 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 11 | JEventDispatcher->trigger() | JROOT/components/com_content/views/article/view.html.php:193 |
| 10 | ContentViewArticle->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:664 |
| 9 | Joomla\CMS\MVC\Controller\BaseController->display() | JROOT/components/com_content/controller.php:118 |
| 8 | ContentController->display() | JROOT/libraries/src/MVC/Controller/BaseController.php:702 |
| 7 | Joomla\CMS\MVC\Controller\BaseController->execute() | JROOT/components/com_content/content.php:43 |
| 6 | require_once JROOT/components/com_content/content.php | JROOT/libraries/src/Component/ComponentHelper.php:402 |
| 5 | Joomla\CMS\Component\ComponentHelper::executeComponent() | JROOT/libraries/src/Component/ComponentHelper.php:377 |
| 4 | Joomla\CMS\Component\ComponentHelper::renderComponent() | JROOT/libraries/src/Application/SiteApplication.php:194 |
| 3 | Joomla\CMS\Application\SiteApplication->dispatch() | JROOT/libraries/src/Application/SiteApplication.php:233 |
| 2 | Joomla\CMS\Application\SiteApplication->doExecute() | JROOT/libraries/src/Application/CMSApplication.php:225 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT m.id, m.title, m.module, m.position, m.content, m.showtitle, m.params, mm.menuid
FROM bly_modules AS m
LEFT JOIN bly_modules_menu AS mm
ON mm.moduleid = m.id
LEFT JOIN bly_extensions AS e
ON e.element = m.module
AND e.client_id = m.client_id
WHERE m.published = 1
AND e.enabled = 1
AND (m.publish_up = '0000-00-00 00:00:00' OR m.publish_up <= '2026-07-19 02:22:35')
AND (m.publish_down = '0000-00-00 00:00:00' OR m.publish_down >= '2026-07-19 02:22:35')
AND m.access IN (1,1,5)
AND m.client_id = 0
AND (mm.menuid = 227 OR mm.menuid <= 0)
AND m.language IN ('nl-NL','*')
ORDER BY m.position, m.ordering
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | m | NULL | range | PRIMARY,published,newsfeeds,idx_language | published | 5 | NULL | 16 | 2.70 | Using index condition; Using where; Gebruikt bestandssortering |
| 1 | SIMPLE | e | NULL | ref | element_clientid,element_folder_clientid | element_clientid | 403 | DB3826637.m.module,const | 1 | 10.00 | Using index condition; Using where |
| 1 | SIMPLE | mm | NULL | ref | PRIMARY | PRIMARY | 4 | DB3826637.m.id | 8 | 40.00 | Using where; Using index |
| Status | Duration |
|---|---|
| starting | 0.03 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.01 ms |
| Opening tables | 0.20 ms |
| init | 0.02 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.06 ms |
| preparing | 0.19 ms |
| Sorting result | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| Creating sort index | 0.11 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 16 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 15 | JDatabaseDriver->loadObjectList() | Zelfde als de call in onderstaande regel. |
| 14 | call_user_func_array() | JROOT/libraries/src/Cache/Controller/CallbackController.php:173 |
| 13 | Joomla\CMS\Cache\Controller\CallbackController->get() | JROOT/libraries/src/Helper/ModuleHelper.php:441 |
| 12 | Joomla\CMS\Helper\ModuleHelper::getModuleList() | JROOT/libraries/src/Helper/ModuleHelper.php:371 |
| 11 | Joomla\CMS\Helper\ModuleHelper::load() | JROOT/libraries/src/Helper/ModuleHelper.php:87 |
| 10 | Joomla\CMS\Helper\ModuleHelper::getModules() | JROOT/libraries/src/Document/HtmlDocument.php:601 |
| 9 | Joomla\CMS\Document\HtmlDocument->countModules() | JROOT/templates/Belezy42/library/Artx/Page.php:46 |
| 8 | ArtxPage->containsModules() | JROOT/templates/Belezy42/index.php:96 |
| 7 | require JROOT/templates/Belezy42/index.php | JROOT/libraries/src/Document/HtmlDocument.php:678 |
| 6 | Joomla\CMS\Document\HtmlDocument->_loadTemplate() | JROOT/libraries/src/Document/HtmlDocument.php:740 |
| 5 | Joomla\CMS\Document\HtmlDocument->_fetchTemplate() | JROOT/libraries/src/Document/HtmlDocument.php:555 |
| 4 | Joomla\CMS\Document\HtmlDocument->parse() | JROOT/libraries/src/Application/CMSApplication.php:1098 |
| 3 | Joomla\CMS\Application\CMSApplication->render() | JROOT/libraries/src/Application/SiteApplication.php:778 |
| 2 | Joomla\CMS\Application\SiteApplication->render() | JROOT/libraries/src/Application/CMSApplication.php:231 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `c2`.`language`,`c2`.`id`
FROM `bly_menu` AS `c`
INNER JOIN `bly_associations` AS `a`
ON a.id = c.`id`
AND a.context='com_menus.item'
INNER JOIN `bly_associations` AS `a2`
ON `a`.`key` = `a2`.`key`
INNER JOIN `bly_menu` AS `c2`
ON a2.id = c2.`id`
WHERE c.id = 227
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | c | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | Using index |
| 1 | SIMPLE | a | NULL | const | PRIMARY,idx_key | PRIMARY | 206 | const,const | 1 | 100.00 | NULL |
| 1 | SIMPLE | a2 | NULL | ref | idx_key | idx_key | 128 | const | 3 | 100.00 | Using index |
| 1 | SIMPLE | c2 | NULL | eq_ref | PRIMARY | PRIMARY | 4 | DB3826637.a2.id | 1 | 100.00 | NULL |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.15 ms |
| init | 0.02 ms |
| System lock | 0.01 ms |
| optimizing | 0.01 ms |
| statistics | 0.06 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.03 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 15 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 14 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Language/Associations.php:115 |
| 13 | Joomla\CMS\Language\Associations::getAssociations() | JROOT/administrator/components/com_menus/helpers/menus.php:321 |
| 12 | MenusHelper::getAssociations() | JROOT/modules/mod_languages/helper.php:58 |
| 11 | ModLanguagesHelper::getList() | JROOT/modules/mod_languages/mod_languages.php:17 |
| 10 | include JROOT/modules/mod_languages/mod_languages.php | JROOT/libraries/src/Helper/ModuleHelper.php:200 |
| 9 | Joomla\CMS\Helper\ModuleHelper::renderModule() | JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98 |
| 8 | Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render() | JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47 |
| 7 | Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render() | JROOT/libraries/src/Document/HtmlDocument.php:511 |
| 6 | Joomla\CMS\Document\HtmlDocument->getBuffer() | JROOT/libraries/src/Document/HtmlDocument.php:803 |
| 5 | Joomla\CMS\Document\HtmlDocument->_renderTemplate() | JROOT/libraries/src/Document/HtmlDocument.php:577 |
| 4 | Joomla\CMS\Document\HtmlDocument->render() | JROOT/libraries/src/Application/CMSApplication.php:1112 |
| 3 | Joomla\CMS\Application\CMSApplication->render() | JROOT/libraries/src/Application/SiteApplication.php:778 |
| 2 | Joomla\CMS\Application\SiteApplication->render() | JROOT/libraries/src/Application/CMSApplication.php:231 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `c2`.`language`,CONCAT_WS(':', `c2`.`id`, `c2`.`alias`) AS `id`,CONCAT_WS(':', ca.id, ca.alias) AS `catid`
FROM `bly_content` AS `c`
INNER JOIN `bly_associations` AS `a`
ON a.id = c.`id`
AND a.context='com_content.item'
INNER JOIN `bly_associations` AS `a2`
ON `a`.`key` = `a2`.`key`
INNER JOIN `bly_content` AS `c2`
ON a2.id = c2.`id`
INNER JOIN `bly_categories` AS `ca`
ON `c2`.`catid` = ca.id
AND ca.extension = 'com_content'
WHERE c.id = 51
AND c2.access IN (1,1,5)
AND c2.language != 'nl-NL'
AND (c2.publish_up = '0000-00-00 00:00:00' OR c2.publish_up <= '2026-07-19 02:22:35')
AND (c2.publish_down = '0000-00-00 00:00:00' OR c2.publish_down >= '2026-07-19 02:22:35')
AND c2.state = 1
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | c | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | Using index |
| 1 | SIMPLE | a | NULL | const | PRIMARY,idx_key | PRIMARY | 206 | const,const | 1 | 100.00 | NULL |
| 1 | SIMPLE | a2 | NULL | ref | idx_key | idx_key | 128 | const | 3 | 100.00 | Using index |
| 1 | SIMPLE | c2 | NULL | eq_ref | PRIMARY,idx_access,idx_state,idx_catid,idx_language | PRIMARY | 4 | DB3826637.a2.id | 1 | 12.65 | Using where |
| 1 | SIMPLE | ca | NULL | eq_ref | PRIMARY,cat_idx | PRIMARY | 4 | DB3826637.c2.catid | 1 | 86.67 | Using where |
| Status | Duration |
|---|---|
| starting | 0.04 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.05 ms |
| init | 0.02 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.10 ms |
| preparing | 0.02 ms |
| executing | 0.00 ms |
| Sending data | 0.03 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 15 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 14 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Language/Associations.php:115 |
| 13 | Joomla\CMS\Language\Associations::getAssociations() | JROOT/components/com_content/helpers/association.php:76 |
| 12 | ContentHelperAssociation::getAssociations() | JROOT/modules/mod_languages/helper.php:68 |
| 11 | ModLanguagesHelper::getList() | JROOT/modules/mod_languages/mod_languages.php:17 |
| 10 | include JROOT/modules/mod_languages/mod_languages.php | JROOT/libraries/src/Helper/ModuleHelper.php:200 |
| 9 | Joomla\CMS\Helper\ModuleHelper::renderModule() | JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98 |
| 8 | Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render() | JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47 |
| 7 | Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render() | JROOT/libraries/src/Document/HtmlDocument.php:511 |
| 6 | Joomla\CMS\Document\HtmlDocument->getBuffer() | JROOT/libraries/src/Document/HtmlDocument.php:803 |
| 5 | Joomla\CMS\Document\HtmlDocument->_renderTemplate() | JROOT/libraries/src/Document/HtmlDocument.php:577 |
| 4 | Joomla\CMS\Document\HtmlDocument->render() | JROOT/libraries/src/Application/CMSApplication.php:1112 |
| 3 | Joomla\CMS\Application\CMSApplication->render() | JROOT/libraries/src/Application/SiteApplication.php:778 |
| 2 | Joomla\CMS\Application\SiteApplication->render() | JROOT/libraries/src/Application/CMSApplication.php:231 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time, c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level, c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id, c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version,
CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug
FROM `bly_categories` AS `s`
INNER JOIN `bly_categories` AS `c`
ON (s.lft < c.lft
AND c.lft < s.rgt
AND c.language IN ('nl-NL','*')) OR (c.lft <= s.lft
AND s.rgt <= c.rgt)
WHERE (c.extension='com_content' OR c.extension='system')
AND c.access IN (1,1,5)
AND c.published = 1
AND s.id = 16
ORDER BY c.lft
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | s | NULL | const | PRIMARY,idx_left_right | PRIMARY | 4 | const | 1 | 100.00 | Gebruikt bestandssortering |
| 1 | SIMPLE | c | NULL | ALL | cat_idx,idx_access,idx_left_right,idx_language | INDEX KEY ONTBREEKT | NULL | NULL | 45 | 14.52 | Using where |
| Status | Duration |
|---|---|
| starting | 0.05 ms |
| checking permissions | 0.00 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.03 ms |
| System lock | 0.01 ms |
| optimizing | 0.02 ms |
| statistics | 0.06 ms |
| preparing | 0.03 ms |
| Sorting result | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| Creating sort index | 0.07 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.03 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 25 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 24 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Categories/Categories.php:324 |
| 23 | Joomla\CMS\Categories\Categories->_load() | JROOT/libraries/src/Categories/Categories.php:184 |
| 22 | Joomla\CMS\Categories\Categories->get() | JROOT/components/com_content/router.php:72 |
| 21 | ContentRouter->getCategorySegment() | Zelfde als de call in onderstaande regel. |
| 20 | call_user_func_array() | JROOT/libraries/src/Component/Router/RouterView.php:120 |
| 19 | Joomla\CMS\Component\Router\RouterView->getPath() | JROOT/libraries/src/Component/Router/Rules/MenuRules.php:111 |
| 18 | Joomla\CMS\Component\Router\Rules\MenuRules->preprocess() | JROOT/libraries/src/Component/Router/RouterView.php:222 |
| 17 | Joomla\CMS\Component\Router\RouterView->preprocess() | JROOT/libraries/src/Router/SiteRouter.php:676 |
| 16 | Joomla\CMS\Router\SiteRouter->processBuildRules() | JROOT/libraries/src/Router/Router.php:266 |
| 15 | Joomla\CMS\Router\Router->build() | JROOT/libraries/src/Router/SiteRouter.php:155 |
| 14 | Joomla\CMS\Router\SiteRouter->build() | JROOT/libraries/src/Router/Route.php:144 |
| 13 | Joomla\CMS\Router\Route::link() | JROOT/libraries/src/Router/Route.php:93 |
| 12 | Joomla\CMS\Router\Route::_() | JROOT/modules/mod_languages/helper.php:115 |
| 11 | ModLanguagesHelper::getList() | JROOT/modules/mod_languages/mod_languages.php:17 |
| 10 | include JROOT/modules/mod_languages/mod_languages.php | JROOT/libraries/src/Helper/ModuleHelper.php:200 |
| 9 | Joomla\CMS\Helper\ModuleHelper::renderModule() | JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98 |
| 8 | Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render() | JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47 |
| 7 | Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render() | JROOT/libraries/src/Document/HtmlDocument.php:511 |
| 6 | Joomla\CMS\Document\HtmlDocument->getBuffer() | JROOT/libraries/src/Document/HtmlDocument.php:803 |
| 5 | Joomla\CMS\Document\HtmlDocument->_renderTemplate() | JROOT/libraries/src/Document/HtmlDocument.php:577 |
| 4 | Joomla\CMS\Document\HtmlDocument->render() | JROOT/libraries/src/Application/CMSApplication.php:1112 |
| 3 | Joomla\CMS\Application\CMSApplication->render() | JROOT/libraries/src/Application/SiteApplication.php:778 |
| 2 | Joomla\CMS\Application\SiteApplication->render() | JROOT/libraries/src/Application/CMSApplication.php:231 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time, c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level, c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id, c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version,
CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug
FROM `bly_categories` AS `s`
INNER JOIN `bly_categories` AS `c`
ON (s.lft < c.lft
AND c.lft < s.rgt
AND c.language IN ('nl-NL','*')) OR (c.lft <= s.lft
AND s.rgt <= c.rgt)
WHERE (c.extension='com_content' OR c.extension='system')
AND c.access IN (1,1,5)
AND c.published = 1
AND s.id = 29
ORDER BY c.lft
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | s | NULL | const | PRIMARY,idx_left_right | PRIMARY | 4 | const | 1 | 100.00 | Gebruikt bestandssortering |
| 1 | SIMPLE | c | NULL | ALL | cat_idx,idx_access,idx_left_right,idx_language | INDEX KEY ONTBREEKT | NULL | NULL | 45 | 6.91 | Using where |
| Status | Duration |
|---|---|
| starting | 0.18 ms |
| checking permissions | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.03 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.06 ms |
| preparing | 0.01 ms |
| Sorting result | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.01 ms |
| Creating sort index | 0.06 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.02 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 25 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1701 |
| 24 | JDatabaseDriver->loadObjectList() | JROOT/libraries/src/Categories/Categories.php:324 |
| 23 | Joomla\CMS\Categories\Categories->_load() | JROOT/libraries/src/Categories/Categories.php:184 |
| 22 | Joomla\CMS\Categories\Categories->get() | JROOT/components/com_content/router.php:72 |
| 21 | ContentRouter->getCategorySegment() | Zelfde als de call in onderstaande regel. |
| 20 | call_user_func_array() | JROOT/libraries/src/Component/Router/RouterView.php:120 |
| 19 | Joomla\CMS\Component\Router\RouterView->getPath() | JROOT/libraries/src/Component/Router/Rules/MenuRules.php:111 |
| 18 | Joomla\CMS\Component\Router\Rules\MenuRules->preprocess() | JROOT/libraries/src/Component/Router/RouterView.php:222 |
| 17 | Joomla\CMS\Component\Router\RouterView->preprocess() | JROOT/libraries/src/Router/SiteRouter.php:676 |
| 16 | Joomla\CMS\Router\SiteRouter->processBuildRules() | JROOT/libraries/src/Router/Router.php:266 |
| 15 | Joomla\CMS\Router\Router->build() | JROOT/libraries/src/Router/SiteRouter.php:155 |
| 14 | Joomla\CMS\Router\SiteRouter->build() | JROOT/libraries/src/Router/Route.php:144 |
| 13 | Joomla\CMS\Router\Route::link() | JROOT/libraries/src/Router/Route.php:93 |
| 12 | Joomla\CMS\Router\Route::_() | JROOT/modules/mod_languages/helper.php:115 |
| 11 | ModLanguagesHelper::getList() | JROOT/modules/mod_languages/mod_languages.php:17 |
| 10 | include JROOT/modules/mod_languages/mod_languages.php | JROOT/libraries/src/Helper/ModuleHelper.php:200 |
| 9 | Joomla\CMS\Helper\ModuleHelper::renderModule() | JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98 |
| 8 | Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render() | JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47 |
| 7 | Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render() | JROOT/libraries/src/Document/HtmlDocument.php:511 |
| 6 | Joomla\CMS\Document\HtmlDocument->getBuffer() | JROOT/libraries/src/Document/HtmlDocument.php:803 |
| 5 | Joomla\CMS\Document\HtmlDocument->_renderTemplate() | JROOT/libraries/src/Document/HtmlDocument.php:577 |
| 4 | Joomla\CMS\Document\HtmlDocument->render() | JROOT/libraries/src/Application/CMSApplication.php:1112 |
| 3 | Joomla\CMS\Application\CMSApplication->render() | JROOT/libraries/src/Application/SiteApplication.php:778 |
| 2 | Joomla\CMS\Application\SiteApplication->render() | JROOT/libraries/src/Application/CMSApplication.php:231 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `params`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 10.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.09 ms |
| end | 0.00 ms |
| query end | 0.01 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 9 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 8 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/config.php:310 |
| 7 | HtpConfig::load() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2342 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
UPDATE `bly_session`
SET `data` = 'joomla|s:840:\"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\";' , `time` = 1784427755
WHERE `session_id` = X'62336f31336f71616b756d336f6d326736706c73357464733774'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | UPDATE | bly_session | NULL | range | PRIMARY | PRIMARY | 194 | const | 1 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.03 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.02 ms |
| updating | 0.06 ms |
| end | 0.01 ms |
| query end | 1.35 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 12 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/session/storage/database.php:84 |
| 11 | JSessionStorageDatabase->write() | Zelfde als de call in onderstaande regel. |
| 10 | session_write_close() | JROOT/libraries/joomla/session/handler/native.php:194 |
| 9 | JSessionHandlerNative->save() | JROOT/libraries/src/Session/Session.php:824 |
| 8 | Joomla\CMS\Session\Session->close() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2575 |
| 7 | PlgSystemHtprotectwatch->backgroundDetach() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2350 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `params`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 10.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.01 ms |
| optimizing | 0.01 ms |
| statistics | 0.02 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.05 ms |
| end | 0.00 ms |
| query end | 0.01 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 10 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/config.php:310 |
| 9 | HtpConfig::load() | JROOT/administrator/components/com_htprotect/core/compat_guard.php:1176 |
| 8 | HtpCompat::enabledByConfig() | JROOT/administrator/components/com_htprotect/core/compat_guard.php:184 |
| 7 | HtpCompat::observeState() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2364 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT COUNT(*)
FROM `bly_extensions`
WHERE `type` = 'plugin'
AND `folder` = 'behaviour'
AND `element` IN ('compat', 'compat6')
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | range | element_clientid,element_folder_clientid,extension | extension | 886 | NULL | 2 | 100.00 | Using where; Using index |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.00 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.01 ms |
| Sending data | 0.01 ms |
| end | 0.00 ms |
| query end | 0.01 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 10 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/compat_guard.php:1221 |
| 9 | HtpCompat::scalar() | JROOT/administrator/components/com_htprotect/core/compat_guard.php:1226 |
| 8 | HtpCompat::bcExists() | JROOT/administrator/components/com_htprotect/core/compat_guard.php:200 |
| 7 | HtpCompat::observeState() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2364 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `rules`
FROM `bly_assets`
WHERE `id` = 1
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_assets | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | NULL |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.02 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.00 ms |
| end | 0.00 ms |
| query end | 0.01 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 10 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/accounts.php:449 |
| 9 | HtpAccounts::privilegedGroupIds() | JROOT/administrator/components/com_htprotect/core/accounts.php:359 |
| 8 | HtpAccounts::snapshot() | JROOT/administrator/components/com_htprotect/core/accounts.php:35 |
| 7 | HtpAccounts::evaluate() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2372 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT DISTINCT `user_id`
FROM `bly_user_usergroup_map`
WHERE `group_id` IN (8)
LIMIT 500
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_user_usergroup_map | NULL | index | PRIMARY | PRIMARY | 8 | NULL | 7672 | 10.00 | Using where; Using index; Using temporary |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.15 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.01 ms |
| preparing | 0.01 ms |
| Creating tmp table | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 15.57 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| removing tmp table | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1550 |
| 9 | JDatabaseDriver->loadColumn() | JROOT/administrator/components/com_htprotect/core/accounts.php:371 |
| 8 | HtpAccounts::snapshot() | JROOT/administrator/components/com_htprotect/core/accounts.php:35 |
| 7 | HtpAccounts::evaluate() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2372 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `id`,`username`,`email`,`password`,`block`,`lastvisitDate`
FROM `bly_users`
WHERE `id` IN (374,461,162201)
LIMIT 500
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_users | NULL | range | PRIMARY | PRIMARY | 4 | NULL | 3 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.06 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.01 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.05 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1506 |
| 9 | JDatabaseDriver->loadAssocList() | JROOT/administrator/components/com_htprotect/core/accounts.php:390 |
| 8 | HtpAccounts::snapshot() | JROOT/administrator/components/com_htprotect/core/accounts.php:35 |
| 7 | HtpAccounts::evaluate() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2372 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `params`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 10.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.04 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.10 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 10 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/defs.php:3206 |
| 9 | HtpDefs::loadCached() | JROOT/administrator/components/com_htprotect/core/defs.php:600 |
| 8 | HtpDefs::effectiveVuln() | JROOT/administrator/components/com_htprotect/core/defs.php:2690 |
| 7 | HtpDefs::checkExtensions() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2393 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `element`,`type`,`folder`,`client_id`,`manifest_cache`,`enabled`
FROM `bly_extensions`
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ALL | NULL | INDEX KEY ONTBREEKT | NULL | NULL | 218 | 100.00 | NULL |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.00 ms |
| init | 0.00 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.00 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.30 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 9 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1506 |
| 8 | JDatabaseDriver->loadAssocList() | JROOT/administrator/components/com_htprotect/core/defs.php:2701 |
| 7 | HtpDefs::checkExtensions() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2393 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `params`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 10.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.01 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.02 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.04 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 9 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/defs.php:1807 |
| 8 | HtpDefs::loadMalwareCached() | JROOT/administrator/components/com_htprotect/core/defs.php:871 |
| 7 | HtpDefs::refreshMalwareSigs() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2411 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `rules`
FROM `bly_assets`
WHERE `id` = 1
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_assets | NULL | const | PRIMARY | PRIMARY | 4 | const | 1 | 100.00 | NULL |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.02 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.00 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 9 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/accounts.php:449 |
| 8 | HtpAccounts::privilegedGroupIds() | JROOT/administrator/components/com_htprotect/core/accounts.php:563 |
| 7 | HtpAccounts::suspiciousAdmins() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2462 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT DISTINCT `user_id`
FROM `bly_user_usergroup_map`
WHERE `group_id` IN (8)
LIMIT 500
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_user_usergroup_map | NULL | index | PRIMARY | PRIMARY | 8 | NULL | 7672 | 10.00 | Using where; Using index; Using temporary |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.01 ms |
| preparing | 0.01 ms |
| Creating tmp table | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 13.00 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| removing tmp table | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 9 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1550 |
| 8 | JDatabaseDriver->loadColumn() | JROOT/administrator/components/com_htprotect/core/accounts.php:575 |
| 7 | HtpAccounts::suspiciousAdmins() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2462 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `id`,`username`,`name`,`email`,`registerDate`,`lastvisitDate`,`block`
FROM `bly_users`
WHERE `id` IN (374,461,162201)
LIMIT 500
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_users | NULL | range | PRIMARY | PRIMARY | 4 | NULL | 3 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.01 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.02 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 9 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1506 |
| 8 | JDatabaseDriver->loadAssocList() | JROOT/administrator/components/com_htprotect/core/accounts.php:594 |
| 7 | HtpAccounts::suspiciousAdmins() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2462 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `id`,`name`,`types`,`area`,`plugins`,`params`
FROM `bly_wf_profiles`
WHERE `published` = 1
LIMIT 200
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_wf_profiles | NULL | ALL | NULL | INDEX KEY ONTBREEKT | NULL | NULL | 4 | 25.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.15 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.01 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.02 ms |
| end | 0.00 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 9 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1506 |
| 8 | JDatabaseDriver->loadAssocList() | JROOT/administrator/components/com_htprotect/core/defs.php:2824 |
| 7 | HtpDefs::checkJceProfiles() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2484 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `params`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 10.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.02 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.01 ms |
| statistics | 0.03 ms |
| preparing | 0.01 ms |
| executing | 0.00 ms |
| Sending data | 0.05 ms |
| end | 0.01 ms |
| query end | 0.01 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 10 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/watch.php:956 |
| 9 | HtpWatch::loadNotified() | JROOT/administrator/components/com_htprotect/core/watch.php:334 |
| 8 | HtpWatch::dueForNotification() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2633 |
| 7 | PlgSystemHtprotectwatch->notify() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `params`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 10.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.02 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.04 ms |
| end | 0.01 ms |
| query end | 0.00 ms |
| closing tables | 0.01 ms |
| freeing items | 0.02 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 10 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/watch.php:956 |
| 9 | HtpWatch::loadNotified() | JROOT/administrator/components/com_htprotect/core/watch.php:348 |
| 8 | HtpWatch::recordNotification() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2670 |
| 7 | PlgSystemHtprotectwatch->notify() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
SELECT `params`
FROM `bly_extensions`
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | SIMPLE | bly_extensions | NULL | ref | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 10.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.01 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.00 ms |
| init | 0.01 ms |
| System lock | 0.00 ms |
| optimizing | 0.00 ms |
| statistics | 0.02 ms |
| preparing | 0.00 ms |
| executing | 0.00 ms |
| Sending data | 0.03 ms |
| end | 0.01 ms |
| query end | 0.01 ms |
| closing tables | 0.00 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 11 | JDatabaseDriverMysqli->execute() | JROOT/libraries/joomla/database/driver.php:1740 |
| 10 | JDatabaseDriver->loadResult() | JROOT/administrator/components/com_htprotect/core/watch.php:994 |
| 9 | HtpWatch::saveNotified() | JROOT/administrator/components/com_htprotect/core/watch.php:348 |
| 8 | HtpWatch::recordNotification() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2670 |
| 7 | PlgSystemHtprotectwatch->notify() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
UPDATE `bly_extensions`
SET `params` = '{\"htp_shield\":{\"site_path\":\"\",\"sef_rules\":1,\"api_router\":1,\"api_mode\":\"route\",\"fastcgi_auth\":1,\"apache_options\":1,\"follow_symlink\":0,\"force_https\":1,\"www_mode\":0,\"canonical_host\":\"\",\"h_frame\":1,\"h_nosniff\":1,\"h_referrer\":\"strict-origin-when-cross-origin\",\"h_poweredby\":1,\"h_hsts\":0,\"h_hsts_sub\":0,\"h_coop\":0,\"h_permissions\":0,\"f_query\":1,\"f_rfi\":1,\"f_methods\":1,\"f_wpnoise\":1,\"htaccess_external\":0,\"guard_dismissed\":0,\"x_shield\":1,\"x_sigs_off\":[],\"defs_version\":\"2026-07-15.9ac386\",\"mal_whitelist\":[],\"u_harden\":1,\"u_dirs\":[\"images\",\"media\"],\"emergency_lock\":0,\"notify_email\":\"mail@website-bereinigung.de\",\"notify_reminder_days\":14,\"unsub_secret\":\"a3ovOtDuiJ2JWUICnSikGA7204m_W0KkrPOvl88kIDU\",\"unsub_base\":\"https:\\/\\/belezy.eu\\/\",\"site_fp\":\"9d003c1a41c42c108fbc877300d68eac557ccaac\",\"swarm_contrib_id\":\"\",\"swarm_acked\":[],\"watch_manifest\":{\".htaccess\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"images\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\",\"media\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\"},\"core_manifest\":{\"index.php\":\"b1c33443a827fd25d6e033d14bdba8e6f9df6ad1\",\"administrator\\/index.php\":\"7078c5d7b2181900c509c93302f324e2dae228bf\"},\"core_jversion\":\"3.10.11\",\"accounts_watch\":1,\"account_baseline\":{\"374\":{\"id\":374,\"username\":\"hberdel\",\"email\":\"info@belezy.eu\",\"phash\":\"4e4fa5fb0131a9781fca0d873c22f53c2ad8a248\",\"block\":0,\"lastvisit\":\"2026-06-24 12:03:38\",\"pneeds\":0},\"461\":{\"id\":461,\"username\":\"Loose\",\"email\":\"info@wm-loose.de\",\"phash\":\"efabda101d354010a79343bd47474e6e3fc8676d\",\"block\":0,\"lastvisit\":\"2023-02-28 14:32:15\",\"pneeds\":0},\"162201\":{\"id\":162201,\"username\":\"pascall\",\"email\":\"mail@website-bereinigung.de\",\"phash\":\"a77d1a74e85312c45348eeec7605887016661d17\",\"block\":0,\"lastvisit\":\"2026-06-24 15:56:20\",\"pneeds\":0}},\"admin_whitelist\":[],\"seo_watch\":1,\"compat_guard\":1,\"seo_cloaking_auto\":0,\"seo_whitelist\":[],\"seo_topic_ack\":[],\"seo_baseline\":{\"title\":\"ProvenceFerien - Startseite\",\"out_domains\":{\"xdebug.org\":1},\"shingles\":{\"2773276488\":1,\"694934048\":1,\"2276828720\":1,\"1014845744\":1,\"2164272920\":1,\"654648592\":1,\"3252768728\":1,\"2703306816\":1,\"4206898064\":1,\"3965176784\":1,\"324970472\":1,\"3140698272\":1,\"2596003040\":1,\"2737171944\":1,\"95016752\":1,\"1222032616\":1,\"3967628640\":1,\"2144334616\":1,\"1571366176\":1,\"2296853872\":1,\"2149620600\":1,\"1121698424\":1,\"1523411896\":1,\"2049945696\":1,\"2144915136\":1,\"2204935488\":1,\"723865528\":1,\"3725506112\":1,\"1945954912\":1,\"4263363480\":1,\"1309988440\":1,\"1421026616\":1,\"3426863704\":1,\"1030014896\":1,\"912520336\":1,\"2088853496\":1,\"3979502160\":1,\"4116536448\":1,\"2863093792\":1,\"3037412432\":1,\"3620898072\":1,\"2314148544\":1,\"37976\":1,\"2414448336\":1,\"3977858536\":1,\"11385216\":1,\"1409844200\":1,\"1751197192\":1,\"1518609656\":1,\"1130239024\":1,\"716131384\":1,\"1236659328\":1,\"3001742640\":1,\"3903950424\":1,\"2657582952\":1,\"1545708136\":1,\"3170111184\":1,\"4275824384\":1,\"1476852648\":1,\"3518915328\":1,\"2973823744\":1,\"332369504\":1,\"581432120\":1,\"1827905688\":1,\"2062886848\":1,\"2311799488\":1,\"4179887752\":1,\"183707264\":1,\"821579528\":1,\"1552434376\":1,\"3369362064\":1,\"3578063520\":1,\"3682544776\":1,\"365264784\":1,\"2968954048\":1,\"1708211424\":1,\"1961675312\":1,\"2599037872\":1,\"4081499304\":1,\"187337984\":1,\"362962264\":1,\"2094558736\":1,\"2787016200\":1,\"658564976\":1,\"3683135656\":1,\"3893519200\":1,\"3208575176\":1,\"4132949216\":1,\"1552018832\":1,\"344452216\":1,\"2539551096\":1,\"1431046296\":1,\"2110760856\":1,\"1993946344\":1,\"199762592\":1,\"4072270968\":1,\"458114664\":1,\"1558974800\":1,\"883158256\":1,\"2329977968\":1,\"1213187168\":1,\"3879781728\":1,\"3735037840\":1,\"829495128\":1,\"1020533640\":1,\"856310912\":1,\"1365789064\":1,\"4285050888\":1,\"938255488\":1,\"3648057168\":1,\"28501736\":1,\"2051798112\":1,\"4075032544\":1,\"3189454464\":1,\"646887464\":1,\"3534466768\":1,\"1246339560\":1,\"1354898128\":1,\"2981285080\":1,\"815862896\":1,\"249961104\":1,\"3008275536\":1,\"1743788824\":1,\"4265276576\":1,\"3557110600\":1,\"4041208904\":1,\"1327249520\":1,\"1607673584\":1,\"4007425464\":1,\"1175775032\":1,\"2276517544\":1,\"1205991320\":1,\"1113485296\":1,\"2641078032\":1,\"760694544\":1,\"1980425792\":1,\"2693581640\":1,\"3968187688\":1,\"2974680912\":1,\"3462925544\":1,\"2964742568\":1,\"1189974320\":1,\"460967008\":1,\"3741834088\":1,\"3711292792\":1,\"973742744\":1,\"351015224\":1,\"3738520704\":1,\"3335574944\":1,\"3741881144\":1,\"4101744904\":1,\"433360288\":1,\"2791891896\":1,\"3626748360\":1,\"3196827536\":1,\"1108585200\":1,\"1559046784\":1,\"7730296\":1,\"1458451704\":1,\"2911589176\":1,\"454621680\":1,\"3381116688\":1,\"1982037912\":1,\"916874840\":1,\"3846924096\":1,\"4123225216\":1,\"670221008\":1,\"2571777288\":1,\"3627078176\":1,\"293222816\":1,\"281163600\":1,\"2508087208\":1,\"3107900104\":1,\"2034508136\":1,\"1977429088\":1,\"2703274016\":1,\"4139311008\":1,\"4261163824\":1,\"1856123928\":1,\"376102376\":1,\"2521452248\":1,\"3357431832\":1,\"971320240\":1,\"1808893192\":1,\"1925217168\":1,\"2709313920\":1,\"444641888\":1,\"3154993240\":1,\"2071995072\":1,\"1818046032\":1,\"4043405808\":1,\"2965571680\":1,\"1618392856\":1,\"933003528\":1,\"2230427152\":1,\"1208455864\":1,\"2025534160\":1,\"1408784776\":1,\"2685059296\":1,\"3489792648\":1,\"1615724560\":1,\"638679152\":1,\"80777296\":1,\"466411848\":1,\"2846665840\":1,\"1911606592\":1,\"3316724536\":1,\"2915452368\":1,\"2804037960\":1,\"4138023008\":1,\"1630734352\":1,\"1587613576\":1,\"1950652592\":1,\"2777296976\":1,\"2255302400\":1,\"2621186584\":1,\"36106456\":1,\"2243664024\":1,\"3186220248\":1,\"3286361792\":1,\"335870296\":1,\"947878136\":1,\"885775072\":1,\"2836090264\":1,\"3195444184\":1,\"1373515616\":1,\"2703441304\":1,\"2999798000\":1,\"4124423392\":1,\"1153004272\":1,\"796890520\":1,\"1247028480\":1,\"958748368\":1,\"1744512424\":1,\"647816080\":1,\"637608088\":1,\"1300060200\":1,\"1148044208\":1,\"3431685056\":1,\"3679148440\":1,\"1466140040\":1,\"1735424048\":1,\"1298914320\":1,\"3451668792\":1,\"3485632672\":1,\"3040222736\":1,\"3818565424\":1,\"428036792\":1,\"2710735120\":1,\"1002378832\":1,\"347500504\":1,\"2570151984\":1,\"2776089360\":1,\"2607914576\":1,\"3758066944\":1,\"4023650336\":1,\"928231432\":1,\"736082384\":1,\"237439056\":1,\"3134172856\":1,\"2464987728\":1,\"48098040\":1,\"2694091560\":1,\"2144818552\":1,\"3130333816\":1,\"3591606896\":1,\"1894249248\":1,\"4188555200\":1,\"245520800\":1,\"1682089672\":1,\"9149544\":1,\"1372800744\":1,\"2964205104\":1,\"2728041256\":1,\"143834200\":1,\"2736916224\":1,\"2448768504\":1,\"2365893624\":1,\"2284709784\":1,\"802473640\":1,\"3772932312\":1,\"361847392\":1,\"1137970600\":1,\"1232831160\":1,\"144058216\":1,\"1646278032\":1,\"992984272\":1,\"3634194248\":1,\"3773773072\":1,\"4070217592\":1,\"2691280184\":1,\"3903737168\":1,\"431558624\":1,\"2195069352\":1,\"669332312\":1,\"3004089080\":1,\"3885706904\":1,\"2109380128\":1,\"3757583592\":1,\"2545468000\":1,\"3698566936\":1,\"183215536\":1,\"801931600\":1,\"1734328536\":1,\"2074309544\":1,\"2801752600\":1,\"548482512\":1,\"3129297296\":1,\"3367049600\":1,\"1792562160\":1,\"3633067472\":1,\"963883040\":1,\"1263046008\":1,\"539208032\":1,\"3362402488\":1,\"3069180952\":1,\"1120040384\":1,\"2840905640\":1,\"2078889728\":1,\"2274655504\":1,\"111197728\":1,\"2673020880\":1,\"125198544\":1,\"591729768\":1,\"4239283240\":1,\"2427366776\":1,\"3593402112\":1,\"147956928\":1,\"1693971840\":1,\"3868138536\":1,\"320203224\":1,\"224045520\":1,\"39887024\":1,\"21699200\":1,\"1739726536\":1,\"142599880\":1,\"3747452816\":1,\"597727768\":1,\"4150626032\":1,\"2011179320\":1,\"1296426808\":1,\"1864695888\":1,\"1253472664\":1,\"1273095288\":1,\"1083862632\":1,\"13803176\":1,\"3529821320\":1,\"1822362464\":1,\"1602423200\":1,\"3045750632\":1,\"3205967912\":1,\"472550200\":1,\"3722023320\":1,\"2292319968\":1,\"4163832904\":1,\"2617823040\":1,\"1372429176\":1,\"4109595712\":1,\"400511176\":1,\"548872256\":1,\"911090304\":1,\"3430473600\":1,\"4207759072\":1,\"1789941360\":1,\"4083465160\":1,\"777022376\":1,\"4197280096\":1,\"2424302952\":1,\"3615809224\":1,\"3578502824\":1,\"3707729224\":1,\"1558907592\":1,\"2213017096\":1,\"2360544800\":1,\"3955810424\":1,\"272558192\":1,\"1226552648\":1,\"1731302080\":1,\"1881370576\":1,\"2468291352\":1,\"1337371936\":1,\"2193969840\":1,\"2782861592\":1,\"603145208\":1,\"552122232\":1,\"3303788176\":1,\"1655746256\":1,\"1805588320\":1,\"1404709120\":1,\"2489808104\":1,\"3633200272\":1,\"1764116024\":1,\"612888888\":1,\"65828896\":1,\"3760394392\":1,\"2609229016\":1,\"3563655328\":1,\"3530396248\":1,\"1503893184\":1,\"4086958072\":1,\"1190305512\":1,\"806165960\":1,\"2330645552\":1,\"2565860128\":1,\"4245224744\":1,\"4290332968\":1,\"3816809680\":1,\"1731756096\":1,\"1958936056\":1,\"3260819152\":1,\"580197864\":1,\"987543272\":1,\"855783312\":1,\"2977809568\":1,\"2304156000\":1,\"4292843744\":1,\"102433336\":1,\"3382348056\":1,\"1583874176\":1,\"4030843888\":1,\"2806962832\":1,\"1027675616\":1,\"703426624\":1,\"1368990104\":1,\"2968221928\":1,\"4108864432\":1,\"573687992\":1,\"1206681264\":1,\"915365216\":1,\"2398957320\":1,\"905451816\":1,\"3645704632\":1,\"2402616856\":1,\"3895858936\":1,\"2778828512\":1,\"2244131928\":1,\"3656171680\":1,\"2332508616\":1,\"2983233488\":1,\"4071616712\":1,\"277607960\":1,\"1922399728\":1,\"1274958032\":1,\"2610280200\":1,\"2416624344\":1,\"628806296\":1,\"348750888\":1,\"1093229552\":1,\"1032561952\":1,\"2424530240\":1,\"1220979848\":1,\"2142571840\":1,\"18039456\":1,\"51483176\":1,\"3246251144\":1,\"2282816104\":1,\"538583928\":1,\"528013376\":1,\"2308206136\":1,\"2991483680\":1,\"3905412016\":1,\"189579960\":1,\"451549632\":1,\"672548352\":1,\"1333121952\":1,\"144147328\":1,\"2561248448\":1,\"2358573544\":1,\"2107445648\":1,\"1689309576\":1,\"19222088\":1,\"4011024600\":1,\"2984760960\":1,\"3229899560\":1},\"redirect_to\":\"\",\"ts\":1784419805},\"seo_overview_ts\":1784419804,\"seo_overview_finding\":[],\"core_overview_ts\":1784129158,\"core_overview_finding\":[],\"plugin_initialized\":1,\"quickicon_initialized\":1,\"autosecure\":0,\"autosecure_last\":0,\"tmp_autoclean\":0,\"tmp_keep\":[],\"autoupdate_notify\":0,\"autoupdate_ext\":0,\"autoupdate_all\":0,\"autoupdate_manual\":0,\"autoupdate_mail_success\":0,\"autoupdate_include\":[],\"autoupdate_keep\":2,\"autoupdate_interval\":86400,\"autoupdate_schedule\":\"weekly\",\"autoupdate_hour\":21,\"autoupdate_weekday\":5,\"autoupdate_grace\":0,\"autoupdate_malscan\":1,\"s_php\":1,\"s_types\":1,\"s_ext\":\"7z,avif,bmp,br,css,csv,doc,docx,eot,gif,gz,htm,html,ico,ics,jp2,jpe,jpeg,jpg,js,json,m4a,m4v,map,mjs,mov,mp3,mp4,mpeg,mpg,odp,ods,odt,oga,ogg,ogv,opus,otf,pdf,png,ppt,pptx,rar,rtf,svg,svgz,tif,tiff,ttf,txt,vtt,wasm,wav,webm,webmanifest,webp,woff,woff2,xls,xlsx,xml,xsl,zip\",\"s_files\":[\"administrator\\/components\\/com_akeeba\\/restore.php\",\"administrator\\/components\\/com_akeebabackup\\/restore.php\",\"joomla-connector.php\"],\"s_dirs_php\":[\"plugins\\/system\\/bfnetwork\"],\"s_dirs_static\":[],\"allow_paths\":[],\"s_dotfiles\":1,\"s_wellknown\":1,\"s_sensitive\":1,\"s_manifests\":0,\"s_sysdirs\":1,\"s_sysdirs_list\":[\"administrator\\/cache\",\"administrator\\/logs\",\"cache\",\"cli\",\"log\",\"logs\",\"tmp\"],\"p_compress\":1,\"p_precomp\":1,\"p_expires\":1,\"p_etag\":0,\"custom_top\":\"\",\"custom_bottom\":\"\",\"file_sha1\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"last_written\":\"2026-07-15 17:25:57\",\"last_test\":{\"checks\":[{\"label\":\"Startseite erreichbar\",\"url\":\"https:\\/\\/belezy.eu\\/\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"Backend erreichbar (401 = Passwortschutz aktiv)\",\"url\":\"https:\\/\\/belezy.eu\\/administrator\\/index.php\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"PHP-Schild aktiv (Test-Aufruf wird mit 403 abgewiesen)\",\"url\":\"https:\\/\\/belezy.eu\\/htpx-canary-567e3eb1.php\\/htp\",\"status\":403,\"ok\":true,\"note\":\"\"},{\"label\":\"configuration.php gesperrt\",\"url\":\"https:\\/\\/belezy.eu\\/configuration.php\",\"status\":403,\"ok\":true,\"note\":\"\"}],\"regression\":false,\"reason\":\"\",\"time\":\"2026-07-15 17:25:57\"},\"guard_dir\":\"\",\"htaccess_cap\":[]},\"htp_defs\":{\"schema\":1,\"version\":\"2026-07-18.2bbe9c\",\"signatures\":[{\"id\":\"jce-profiles-import\",\"label\":\"JCE Profil-Import (CVE-2026-48907)\",\"label_en\":\"JCE profile import (CVE-2026-48907)\",\"desc\":\"Unauthentifizierter Profil-Import im JCE-Editor - Beginn der aktuellen RCE-Kette (schaltet PHP-Uploads frei). Kein legitimer Frontend-Aufruf.\",\"desc_en\":\"Unauthenticated profile import in the JCE editor - start of the current RCE chain (enables PHP uploads). No legitimate frontend call.\",\"default\":1,\"qs\":\"option=com_jce.*task=profiles\\\\.import\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-rpc-upload\",\"label\":\"JCE Webshell-Upload via plugin.rpc (CVE-2026-48907)\",\"label_en\":\"JCE webshell upload via plugin.rpc (CVE-2026-48907)\",\"desc\":\"Datei-Upload \\u00fcber den JCE-Dateibrowser (plugin.rpc, method=upload). Greift nur im Frontend; eingeloggte Autoren (legitimer Editor-Upload) bleiben unber\\u00fchrt.\",\"desc_en\":\"File upload via the JCE file browser (plugin.rpc, method=upload). Applies only
on the frontend; logged-in authors (legitimate editor upload) are unaffected.\",\"default\":1,\"qs\":\"option=com_jce.*task=plugin\\\\.rpc.*method=upload\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-imgmanager\",\"label\":\"JCE Image Manager (Alt-Exploit)\",\"label_en\":\"JCE Image Manager (legacy exploit)\",\"desc\":\"Klassischer unauthentifizierter Datei-Upload \\u00fcber den JCE-Bildmanager (sehr alte JCE-Versionen).\",\"desc_en\":\"Classic unauthenticated file upload via the JCE image manager (very old JCE versions).\",\"default\":1,\"qs\":\"option=com_jce.*plugin=imgmanager.*method=form\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"novarain-nrframework\",\"label\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"label_en\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"desc\":\"CVE-2026-21627: unauthentifizierte PHP-Datei-Einbindung \\u00fcber plg_system_nrframework via com_ajax (task=include).\",\"desc_en\":\"CVE-2026-21627: unauthenticated PHP file inclusion via plg_system_nrframework through com_ajax (task=include).\",\"default\":1,\"qs\":\"option=com_ajax.*nrframework.*task=include\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"astroid-ajax\",\"label\":\"Astroid Framework (AJAX-Endpunkt)\",\"label_en\":\"Astroid Framework (AJAX endpoint)\",\"desc\":\"CVE-2026-21628: ungepr\\u00fcfter Astroid-AJAX-Endpunkt (Upload\\/Installation). Coarse-Match auf com_ajax + astroid.\",\"desc_en\":\"CVE-2026-21628: unchecked Astroid AJAX endpoint (upload\\/installation). Coarse match
on com_ajax + astroid.\",\"default\":1,\"qs\":\"option=com_ajax.*(plugin|template|view)=astroid\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"helix3-ajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Handler (Datei schreiben\\/l\\u00f6schen)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax handler (file write\\/delete)\",\"desc\":\"Helix3 < 3.1.1: der Ajax-Handler onAjaxHelix3 pr\\u00fcfte weder Login noch Rechte. Trifft gezielt die gef\\u00e4hrlichen Unauth-Aktionen im POST-Body: save (Layout-JSON ins aktive Template schreiben), remove (Datei l\\u00f6schen via Path-Traversal), import (Template-Style-Settings \\u00fcberschreiben) sowie upload_image\\/remove_image\\/updateFonts. Legitime Gast-Aktionen (voting, load) und eingeloggte Template-Nutzung \",\"desc_en\":\"Helix3 < 3.1.1: the onAjaxHelix3 ajax handler checked neither login nor permission. Targets the dangerous unauth POST-body actions: save (write layout JSON into the active template), remove (delete a file via path traversal), import (overwrite template style settings) plus upload_image\\/remove_image\\/updateFonts. Legitimate guest actions (voting, load)
and logged-in template use are unaffected. Fix:\",\"default\":1,\"qs\":\"data(?:\\\\[|%5b)action(?:\\\\]|%5d)=(?:save|remove|import|updatefonts)|action=(?:upload_image|remove_image)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helix3-comajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Dispatcher (Datei-Write\\/Delete, Style-Injektion)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax dispatcher (file write\\/delete, style injection)\",\"desc\":\"Helix3 < 3.1.1: der Front-Dispatcher (option=com_ajax mit plugin=helix3) rief onAjaxHelix3 VOR jeder Token-\\/Rechtepr\\u00fcfung auf - unauthentifiziert save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (Datei-Schreiben, Path-Traversal-L\\u00f6schen, Template-Style-Injektion, Stored XSS). Blockt jeden GAST-Aufruf dieses Dispatchers im Frontend (Defense-in-Depth, f\\u00e4ngt auch laufende Scans) - erg\\u00e4nzt d\",\"desc_en\":\"Helix3 < 3.1.1: the front-end dispatcher (option=com_ajax with plugin=helix3) invoked onAjaxHelix3 BEFORE any token\\/permission check - unauthenticated save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (file write, path-traversal delete, template style injection, stored XSS). Blocks every GUEST call of this dispatcher
on the front end (defense in depth, also catches ongoing scans) - complemen\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helix3\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helixultimate-comajax\",\"label\":\"Helix Ultimate (JoomShaper): unauth. com_ajax-Dispatcher (Men\\u00fc-Write\\/Datei\\/Export)\",\"label_en\":\"Helix Ultimate (JoomShaper): unauth com_ajax dispatcher (menu write\\/file\\/export)\",\"desc\":\"Helix Ultimate < 2.2.7: der com_ajax-Handler onAjaxHelixultimate (option=com_ajax mit plugin=helixultimate, Action im task-Param) lief VOR jeder Login-\\/Rechtepr\\u00fcfung - ein anonymer Angreifer konnte in die Men\\u00fc-Einstellungen schreiben (Stored XSS bis in die Admin-Sitzung), Dateien per Path-Traversal beliebig l\\u00f6schen, einen Open Redirect ausl\\u00f6sen und das Template ungesch\\u00fctzt exportieren. Blockt\",\"desc_en\":\"Helix Ultimate < 2.2.7: the com_ajax handler onAjaxHelixultimate (option=com_ajax with plugin=helixultimate, action in the task param) ran BEFORE any login\\/permission check - an anonymous attacker could write into the menu settings (stored XSS reaching the admin session), delete files anywhere via path traversal, trigger an open redirect
and export the template unprotected. Blocks every GUEST call\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helixultimate\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"comajax-include\",\"label\":\"com_ajax: Datei-Einbindung (generisch)\",\"label_en\":\"com_ajax: file inclusion (generic)\",\"desc\":\"F\\u00e4ngt unbekannte LFI-L\\u00fccken derselben Klasse ab: com_ajax mit task=include\\/require. Frontend.\",\"desc_en\":\"Catches unknown LFI holes of the same class: com_ajax with task=include\\/require. Frontend.\",\"default\":1,\"qs\":\"option=com_ajax.*task=(include|require)(_once)?\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"sppagebuilder-uploadicon\",\"label\":\"SP Page Builder: unauthentifizierter Icon-Upload (RCE)\",\"label_en\":\"SP Page Builder: unauthenticated icon upload (RCE)\",\"desc\":\"Zero-Day in SP Page Builder bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keinerlei Zugriffs-\\/Login-Pr\\u00fcfung - unauthentifizierter Datei-Upload nach \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Nur Mini-WAF (G\\u00e4ste), da eingeloggte Builder den Endpunkt legitim nutzen.\",\"desc_en\":\"Zero-day in SP Page Builder up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login check - unauthenticated file upload to \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Mini-WAF only (guests), since logged-in builders use the endpoint legitimately.\",\"default\":1,\"qs\":\"option=com_sppagebuilder.*task=asset\\\\.uploadCustomIcon\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":null},{\"id\":\"dpcalendar-createdby-sqli\",\"label\":\"DPCalendar: unauth. SQL-Injection (Autor-Filter)\",\"label_en\":\"DPCalendar: unauth SQL injection (author filter)\",\"desc\":\"DPCalendar Blind-SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): der Frontend-Autor-Filter filter_created_by (option=com_dpcalendar, view=events) floss in skalarer Form ungecastet in a.created_by IN (...) - anonymes Auslesen beliebiger DB-Tabellen (nur lesend). Blockt Gast-Anfragen, deren filter_created_by kein reiner Integer ist (legitim = Autor-IDs\\/Ziffern) -> FP-frei. Fix 10.11.2 \\/ 8.19.4.\",\"desc_en\":\"DPCalendar blind SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): the front-end author filter filter_created_by (option=com_dpcalendar, view=events) flowed uncast into a.created_by IN (...) in its scalar form - anonymous read of arbitrary DB tables (read-only). Blocks guest requests whose filter_created_by is not a pure integer (legit = author IDs\\/digits) -> FP-free. Fix 10.11.2 \\/ 8.19.4.\",\"default\":1,\"qs\":\"(?=.*option=com_dpcalendar)(?=.*filter_created_by=[0-9,]*[^0-9,&])\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_dpcalendar\"},{\"id\":\"acym-entityselect-sqli\",\"label\":\"AcyMailing: unauth. SQL-Injection (Entity-Select Spaltenliste)\",\"label_en\":\"AcyMailing: unauth SQL injection (entity-select column list)\",\"desc\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): der Frontend-Endpunkt EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) nahm die Request-Parameter columns\\/join_table ungeprueft in die SELECT-Spaltenliste von UserClass::getMatchingElements auf - ein anonymer Besucher konnte per Subquery beliebige DB-Tabellen (inkl. Passwort-Hashes) auslesen. Blockt GAST-Aufrufe dieses Tasks\",\"desc_en\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): the front-end endpoint EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) placed the request parameters columns\\/join_table unchecked into the SELECT column list of UserClass::getMatchingElements - an anonymous visitor could read arbitrary DB tables (incl. password hashes) via a subquery. Blocks GUEST calls of this task whose c\",\"default\":1,\"qs\":\"(?=.*option=com_acym)(?=.*task=loadEntityFront)(?=.*(?:columns|join_table|join)=[^&]*(?:\\\\(|%28|%2528|\\\\s|%20|\\\\+))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_acym\"},{\"id\":\"quix-article-sqli\",\"label\":\"Quix Page Builder: unauth. SQL-Injection (Einzel-Artikel-AJAX)\",\"label_en\":\"Quix Page Builder: unauth SQL injection (single-article AJAX)\",\"desc\":\"Quix (ThemeXpert, Free UND Pro) bis 6.2.0, inkl. der 5.x-Reihe: der oeffentliche AJAX-Endpunkt (option=com_quix, task=ajax, element=joomla-article) ruft QuixJoomlaArticleElement::getAjax() ohne Login-\\/Token-\\/Lizenz-Pruefung; die Artikel-ID kommt base64-kodiert im data-Parameter und wird in articleExist() UNGECASTET in die DB-Query konkateniert -> unauthentifizierte, fehler-basierte SQL-Injection (\",\"desc_en\":\"Quix (ThemeXpert, Free
AND Pro) up to 6.2.0, incl. the 5.x line: the public AJAX endpoint (option=com_quix, task=ajax, element=joomla-article) calls QuixJoomlaArticleElement::getAjax() with no login\\/token\\/license check; the article id arrives base64-encoded in the data parameter
and is concatenated UNCAST into the DB query in articleExist() -> unauthenticated error-based SQL injection (CVSS 8.7). \",\"default\":1,\"qs\":\"(?=.*option=com_quix)(?=.*task=ajax\\\\b)(?=.*element=joomla-article\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_quix\"},{\"id\":\"joomcck-tags-sqli\",\"label\":\"JoomCCK: unauth. SQL-Injection (Tag-Verwaltung)\",\"label_en\":\"JoomCCK: unauth SQL injection (tag management)\",\"desc\":\"CVE-2026-49048 (JoomCCK 6.x vor 6.4.1): der Front-End-Task tags.save\\/tags.delete (option=com_joomcck) lief OHNE Token-\\/Login-\\/Rechte-Pruefung und schob den Request-Parameter tag (getString) roh - mit Double-Quote-Ausbruch - in ZWEI aufeinanderfolgende SQL-Statements (Existenz-SELECT + UPDATE). Ein anonymer Besucher konnte die Datenbank auslesen und veraendern (stacked\\/error-based SQLi). Blockt jed\",\"desc_en\":\"CVE-2026-49048 (JoomCCK 6.x before 6.4.1): the front-end task tags.save\\/tags.delete (option=com_joomcck) ran with NO token\\/login\\/permission check
and concatenated the request parameter tag (getString) raw - with a double-quote breakout - into TWO consecutive SQL statements (existence SELECT + UPDATE). An anonymous visitor could read
and modify the database (stacked\\/error-based SQLi). Blocks every \",\"default\":1,\"qs\":\"(?=.*option=com_joomcck)(?=.*task=tags\\\\.(?:save|delete))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_joomcck\"},{\"id\":\"traversal-encoded\",\"label\":\"Pfad-Klettern (kodierte Varianten)\",\"label_en\":\"Path traversal (encoded variants)\",\"desc\":\"Erg\\u00e4nzt den Standard-Filter um Umgehungstricks: ....\\/\\/ , doppelte Kodierung (%252e), %c0%ae, %2e%2e%5c.\",\"desc_en\":\"Extends the standard filter with bypass tricks: ....\\/\\/ , double encoding (%252e), %c0%ae, %2e%2e%5c.\",\"default\":1,\"qs\":\"(\\\\.{3,}\\/|%252e|%c0%a[ef]|%2e%2e%5c|\\\\.\\\\.%5c)\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-wrapper-uri\",\"label\":\"PHP-Stream-Wrapper im Pfad\",\"label_en\":\"PHP stream wrapper in the path\",\"desc\":\"Blockiert php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ u. a. direkt im angefragten Pfad.\",\"desc_en\":\"Blocks php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ etc. directly in the requested path.\",\"default\":1,\"qs\":null,\"uri\":\"(?:php|phar|data|expect|glob|zlib|zip):\\/\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"api-config-leak\",\"label\":\"Joomla-API Konfigurations-Leak\",\"label_en\":\"Joomla API configuration leak\",\"desc\":\"CVE-2023-23752: sch\\u00fctzt den Endpunkt \\/api\\/...\\/v1\\/config\\/application auch ohne komplette API-Sperre.\",\"desc_en\":\"CVE-2023-23752: protects the \\/api\\/...\\/v1\\/config\\/application endpoint even without a complete API block.\",\"default\":1,\"qs\":null,\"uri\":\"^api\\/index\\\\.php\\/v[0-9]+\\/config\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-object-injection\",\"label\":\"PHP Object Injection (serialisierte Payload)\",\"label_en\":\"PHP object injection (serialised payload)\",\"desc\":\"Serialisiertes PHP-Objekt in einem Parameter (O:\\/C:<L\\u00e4nge>:) - typischer Einstieg f\\u00fcr Object-Injection\\/POP-Ketten. Kommt in normalen Anfragen nicht vor.\",\"desc_en\":\"Serialised PHP object in a parameter (O:\\/C:<length>:) - typical entry point for object injection\\/POP chains. Does not occur in normal requests.\",\"default\":1,\"qs\":\"(?<![a-z0-9])[oc]:[0-9]{1,4}:\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"stream-wrapper-param\",\"label\":\"PHP-Stream-Wrapper in Parameter\",\"label_en\":\"PHP stream wrapper in a parameter\",\"desc\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ u. a. als Parameterwert - LFI\\/RCE-Vektor. Erg\\u00e4nzt die Pfad-Variante (php-wrapper-uri).\",\"desc_en\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ etc. as a parameter value - LFI\\/RCE vector. Complements the path variant (php-wrapper-uri).\",\"default\":1,\"qs\":\"(php|phar|data|expect|glob|zlib|zip):\\/{2}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"param-traversal\",\"label\":\"Pfad-Klettern im Parameter\",\"label_en\":\"Path traversal in a parameter\",\"desc\":\"Mehrfaches ..\\/ als Parameterwert - generisches Directory-Traversal\\/LFI in beliebigen Komponenten.\",\"desc_en\":\"Repeated ..\\/ as a parameter value - generic directory traversal\\/LFI in any component.\",\"default\":1,\"qs\":\"=(\\\\.\\\\.\\/){2,}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null}],\"vuln_extensions\":[{\"element\":\"nrframework\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Novarain \\/ Tassos Framework\",\"below\":\"6.0.38\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21627: unauthentifizierte PHP-Einbindung via com_ajax. Auf 6.0.38 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21627: unauthenticated PHP inclusion via com_ajax. Update to 6.0.38 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\"},{\"element\":\"astroid\",\"type\":\"library\",\"folder\":\"\",\"name\":\"Astroid Framework\",\"below\":\"3.3.11\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21628: unauthentifizierter Datei-Upload via AJAX-Endpunkt (Dropper in \\/images\\/). Auf 3.3.13 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21628: unauthenticated file upload via AJAX endpoint (dropper in \\/images\\/). Update to 3.3.13 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\"},{\"element\":\"helix3\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix3 (JoomShaper)\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Unauthentifizierter com_ajax-Handler (onAjaxHelix3) ohne Login-\\/Rechtepr\\u00fcfung: Angreifer k\\u00f6nnen Dateien ins aktive Template schreiben oder per Path-Traversal l\\u00f6schen (save\\/remove\\/import). Auf Helix3 3.1.1 oder neuer aktualisieren.\",\"note_en\":\"Unauthenticated com_ajax handler (onAjaxHelix3) with no login or permission check: attackers can write files into the active template or delete files via path traversal (save\\/remove\\/import). Update to Helix3 3.1.1 or newer.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix3\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix3\"},{\"element\":\"helixultimate\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix Ultimate (JoomShaper)\",\"below\":\"2.2.7\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische unauth. L\\u00fccke in ALLEN Versionen < 2.2.7: der com_ajax-Handler onAjaxHelixultimate lief VOR jeder Rechtepr\\u00fcfung - anonym in die Men\\u00fcs schreiben (Stored XSS in den Admin), Path-Traversal-L\\u00f6schen, Open Redirect, Template-Export. Auf 2.2.7 updaten (Plugin UND Template). HTProtects Mini-WAF blockt den Aufruf bereits. NICHT mit Helix3 verwechseln.\",\"note_en\":\"Critical unauth flaw in ALL versions below 2.2.7: the com_ajax handler onAjaxHelixultimate ran before any permission check - anonymous menu writes (stored XSS reaching the admin), path-traversal delete, open redirect, template export. Update to 2.2.7 (plugin
AND template). HTProtect mini-WAF already blocks the call. Not to be confused with Helix3.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix-ultimate\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix-ultimate\"},{\"element\":\"com_baforms\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Balbooa Forms\",\"below\":\"2.4.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver Zero-Day (RCE), ALLE Versionen bis 2.4.0: der Upload-Endpoint form.uploadAttachmentFile pr\\u00fcft weder Login\\/Token noch Dateityp - ein anonymer Angreifer kann eine PHP-Datei hochladen und ausf\\u00fchren. NOCH KEIN Patch. Sofortma\\u00dfnahme: Upload-Formulare depublizieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active zero-day (RCE), ALL versions up to 2.4.0: the upload endpoint form.uploadAttachmentFile checks neither login\\/token nor file type - an anonymous attacker can upload
and run a PHP file. NO patch yet. Interim: unpublish forms with upload fields. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/htprotect.org\\/balbooa-forms\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/balbooa-forms\"},{\"element\":\"com_jce\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JCE Editor\",\"below\":\"2.9.99.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-48907: unauthentifizierter Webshell-Upload (profiles.import + plugin.rpc). Dringend auf JCE 2.9.99.6 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-48907: unauthenticated webshell upload (profiles.import + plugin.rpc). Urgently update to JCE 2.9.99.6 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/jce-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/jce-sicherheitsluecke-joomla\"},{\"element\":\"com_rsfiles\",\"type\":\"component\",\"folder\":\"\",\"name\":\"RSFiles!\",\"below\":\"1.17.12\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver unauthentifizierter Datei-Upload -> RCE, ALLE Versionen bis 1.17.11: der Frontend-Upload (task=rsfiles.upload) pr\\u00fcft weder Login\\/Token noch Dateiendung - ein anonymer Angreifer l\\u00e4dt eine .php nach \\/downloads bzw. \\/briefcase und f\\u00fchrt sie aus. Dringend auf 1.17.12 aktualisieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active unauthenticated file upload -> RCE, ALL versions up to 1.17.11: the front-end upload (task=rsfiles.upload) checks neither login\\/token nor file extension - an anonymous attacker uploads a .php into \\/downloads or \\/briefcase
and executes it. Update to 1.17.12 urgently. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\",\"advisory_en\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\"},{\"element\":\"com_edocman\",\"type\":\"component\",\"folder\":\"\",\"name\":\"EDocman\",\"below\":\"3.9\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (alle Versionen bis 3.8): ein anonymer Besucher schleust ueber einen Filter-Parameter eines oeffentlichen Frontend-Endpunkts SQL in eine ungequotete DB-Abfrage ein und kann die Datenbank auslesen (bis hin zu Zugangsdaten). Der genaue Vektor ist bewusst nicht veroeffentlicht. Dringend auf EDocman 3.9.0 aktualisieren.\",\"note_en\":\"Unauthenticated SQL injection (all versions up to 3.8): an anonymous visitor injects SQL through a filter parameter of a public front-end endpoint into an unquoted DB query
and can read the database (up to credentials). The exact vector is deliberately undisclosed. Update to EDocman 3.9.0 urgently.\",\"advisory\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\",\"advisory_en\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\"},{\"element\":\"com_foranalytics\",\"type\":\"component\",\"folder\":\"\",\"name\":\"4Analytics\",\"below\":\"5.0.2\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Zwei unauthentifizierte Sicherheitsluecken (CVE-2026-57833 + CVE-2026-58077) in ALLEN Versionen vor 5.0.2 - ein anonymer Angreifer braucht keinen Login. Hersteller Weeblr stuft beide als kritisch ein; technische Details sind 7 Tage embargoed. Dringend auf 4Analytics 5.0.2 aktualisieren (laeuft auf Joomla 3-6).\",\"note_en\":\"Two unauthenticated security flaws (CVE-2026-57833 + CVE-2026-58077) in ALL versions before 5.0.2 - an anonymous attacker needs no login. Vendor Weeblr rates both critical; technical details are under a 7-day embargo. Update to 4Analytics 5.0.2 urgently (runs
on Joomla 3-6).\",\"advisory\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\",\"advisory_en\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\"},{\"element\":\"com_quix\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Quix\",\"below\":\"6.2.1\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (Free UND Pro, alle Versionen vor 6.2.1 \\u2013 auch die 5.x-Reihe): ein anonymer Besucher kann die gesamte Datenbank auslesen (CVSS 8.7). HTProtects Mini-WAF blockt den Angriff bereits aktiv. Auf Quix 6.2.1 aktualisieren (Free erh\\u00e4lt 6.2.1 ebenfalls \\u00fcber die Update-Funktion).\",\"note_en\":\"Unauthenticated SQL injection (Free
AND Pro, all versions below 6.2.1 \\u2013 including the 5.x line): an anonymous visitor can read the entire database (CVSS 8.7). HTProtect\'s mini-WAF already actively blocks the attack. Update to Quix 6.2.1 (Free receives 6.2.1 too via the update function).\",\"advisory\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\",\"advisory_en\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\"},{\"element\":\"com_joomcck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JoomCCK\",\"below\":\"6.4.1\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Unauthentifizierte SQL-Injection (CVE-2026-49048, JoomCCK 6.x vor 6.4.1): der Front-End-Task \\u201eTag speichern\\/l\\u00f6schen\\\" pr\\u00fcfte weder Login noch Token und \\u00fcbernahm den Parameter \\u201etag\\\" ungefiltert in zwei SQL-Abfragen - ein anonymer Besucher konnte die Datenbank auslesen und ver\\u00e4ndern. HTProtects Mini-WAF blockt den unautorisierten Gast-Aufruf bereits aktiv. Dringend auf JoomCCK 6.4.1 aktualisi\",\"note_en\":\"Unauthenticated SQL injection (CVE-2026-49048, JoomCCK 6.x before 6.4.1): the front-end \\\"save\\/delete tag\\\" task checked neither login nor token
and took the \\\"tag\\\" parameter unfiltered into two SQL queries - an anonymous visitor could read
and modify the database. HTProtect\'s mini-WAF already actively blocks the unauthorized guest call. Update to JoomCCK 6.4.1 urgently.\",\"advisory\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\",\"advisory_en\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\"},{\"element\":\"com_chronoforms8\",\"type\":\"component\",\"folder\":\"\",\"name\":\"ChronoForms\",\"below\":\"8.0.53\",\"above\":\"8.0.0\",\"severity\":\"high\",\"note\":\"Unauthentifizierte gespeicherte XSS (CVE-2026-58148, ChronoForms 8.x vor 8.0.53): ein anonymer Besucher schleust \\u00fcber ein Formular-Feld JavaScript ein, das ungefiltert gespeichert und sp\\u00e4ter - z. B. beim Ansehen der Einsendungen im Backend - ausgef\\u00fchrt wird, bis hin zur \\u00dcbernahme der Admin-Sitzung (CVSS 8.7). Auf ChronoForms 8.0.53 aktualisieren.\",\"note_en\":\"Unauthenticated stored XSS (CVE-2026-58148, ChronoForms 8.x before 8.0.53): an anonymous visitor injects JavaScript via a form field that is stored unfiltered
and later executed - e.g. when viewing the submissions in the backend - up to takeover of the admin session (CVSS 8.7). Update to ChronoForms 8.0.53.\",\"advisory\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\",\"advisory_en\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\"},{\"element\":\"com_jdownloads\",\"type\":\"component\",\"folder\":\"\",\"name\":\"jDownloads\",\"below\":\"4.1.6\",\"above\":\"4.1.0\",\"severity\":\"high\",\"note\":\"Unauthentifizierte Datei-Upload-L\\u00fccke (jDownloads 4.1.0-4.1.5): eine verwaiste Uploader-Datei (upload-handler.php) pr\\u00fcft weder Login noch Token und l\\u00e4sst einen anonymen Besucher beliebige Dateien - u. a. exe\\/msi\\/Archive - in einen Ordner der Site schreiben; auf manchen Servern bis zur Codeausf\\u00fchrung, sonst Malware-Hosting\\/Speicher-Flutung. HTProtects .htaccess-Schutzschild blockt den direkten \",\"note_en\":\"Unauthenticated file upload flaw (jDownloads 4.1.0-4.1.5): a leftover uploader file (upload-handler.php) checks neither login nor token
and lets an anonymous visitor write arbitrary files - incl. exe\\/msi\\/archives - into a folder
on the site; up to remote code execution
on some servers, otherwise malware hosting \\/ disk flooding. HTProtect\'s .htaccess shield already blocks direct access to the file \",\"advisory\":\"https:\\/\\/www.jdownloads.com\\/index.php\\/news\\/jdownloads-4-1-6-secure-update-released.html\",\"advisory_en\":\"https:\\/\\/www.jdownloads.com\\/index.php\\/news\\/jdownloads-4-1-6-secure-update-released.html\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"10.11.2\",\"above\":\"9.0.0\",\"severity\":\"high\",\"note\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthentifizierte Blind-SQL-Injection - der Autor-Filter filter_created_by (Frontend view=events) floss in skalarer Form ohne Integer-Cast in die Query (a.created_by IN ...); ein anonymer Besucher kann beliebige DB-Tabellen AUSLESEN (nichts \\u00e4ndern). Dringend auf 10.11.2 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthenticated blind SQL injection - the author filter filter_created_by (front-end view=events) flowed uncast (scalar form) into the query (a.created_by IN ...); an anonymous visitor can READ arbitrary DB tables (no writes). Update to 10.11.2 urgently. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"8.19.4\",\"above\":\"8.18.0\",\"severity\":\"high\",\"note\":\"DPCalendar Joomla-3-Linie (8.x), 8.18.0-8.19.3: dieselbe unauth Blind-SQL-Injection \\u00fcber den Autor-Filter filter_created_by (skalar, ohne Integer-Cast, nur lesend). In 8.19.4 (Joomla-3-Fix) behoben. Auf 8.19.4 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar Joomla 3 line (8.x), 8.18.0-8.19.3: same unauth blind SQL injection via the author filter filter_created_by (scalar, no integer cast, read-only). Fixed in 8.19.4 (Joomla 3 fix). Update to 8.19.4. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_phocadownload\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Phoca Download\",\"below\":\"6.1.3\",\"above\":\"6.0.0\",\"severity\":\"high\",\"note\":\"Authentifizierter Datei-Upload -> RCE (Versionen 6.0 bis 6.1.2): ein eingeloggter Nutzer mit Zugriff auf die Upload-Funktion kann eine ausf\\u00fchrbare Datei (z. B. .php) hochladen und ausf\\u00fchren. In 6.1.3 (Security-Release) behoben - auf 6.1.3 oder neuer aktualisieren. HTProtects PHP-Schild verhindert die Ausf\\u00fchrung einer hochgeladenen PHP-Datei in den Upload-Ordnern bereits.\",\"note_en\":\"Authenticated file upload -> RCE (versions 6.0 to 6.1.2): a logged-in user with access to the upload feature can upload
and run an executable file (e.g. .php). Fixed in 6.1.3 (security release) - update to 6.1.3 or newer. The HTProtect PHP shield already prevents execution of an uploaded PHP file in the upload folders.\",\"advisory\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\",\"advisory_en\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\"},{\"element\":\"com_acym\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing 6+\",\"below\":\"10.11.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Neuauflage (6+): CVE-2026-56292 unauthentifizierte SQL-Injection (6.0.0-10.11.0) - ein anonymer Angreifer liest beliebige DB-Tabellen inkl. Passwort-Hashes (CVSS 8.7). \\u00c4ltere L\\u00fccken: CVE-2023-28731 unauth Upload\\/RCE unter 8.3.0, CVE-2026-3614 Rechteausweitung 9.11.0-10.8.1. Dringend auf 10.11.1 aktualisieren.\",\"note_en\":\"AcyMailing new line (6+): CVE-2026-56292 unauthenticated SQL injection (6.0.0-10.11.0) - an anonymous attacker reads arbitrary DB tables incl. password hashes (CVSS 8.7). Older holes: CVE-2023-28731 unauth upload\\/RCE below 8.3.0, CVE-2026-3614 privilege escalation 9.11.0-10.8.1. Update to 10.11.1 urgently.\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_acymailing\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing Classic\",\"below\":\"4.9.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Classic (End-of-Life): \\u00e4ltere Versionen mit kritischen L\\u00fccken - unauthentifizierter Datei-Upload der 3.x-\\u00c4ra (RCE, z. B. 3.9.0) sowie Backend-SQL-Injection CVE-2015-7338 (in 4.9.5 behoben). Auf eine unterst\\u00fctzte AcyMailing-Version migrieren. (Die 5.x-Linie hat keine bekannte sehr kritische L\\u00fccke; CSV-Injection CVE-2018-9107 in 5.9.1-5.9.5 ist niedrig\\/client-seitig.)\",\"note_en\":\"AcyMailing Classic (end-of-life): older versions with critical holes - unauthenticated file upload of the 3.x era (RCE, e.g. 3.9.0)
and backend SQL injection CVE-2015-7338 (fixed in 4.9.5). Migrate to a supported AcyMailing version. (The 5.x line has no known very critical hole; CSV injection CVE-2018-9107 in 5.9.1-5.9.5 is low\\/client-side.)\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_igallery\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Ignite Gallery\",\"below\":\"5.4.1\",\"above\":\"5.0.0\",\"severity\":\"high\",\"note\":\"Ignite Gallery 5.0.0 bis 5.4.0: Stored XSS (hoch) durch fehlendes Output-Escaping beim Hochladen\\/Bearbeiten von Bildern, dazu SSRF (ungefilterte Video-URL) und eine Rechteausweitung beim Download geschuetzter\\/unveroeffentlichter Bilder. Ausnutzbar von Nutzern MIT Upload-\\/Bearbeitungsrecht (Frontend oder Backend). Auf 5.4.1 oder neuer aktualisieren.\",\"note_en\":\"Ignite Gallery 5.0.0 to 5.4.0: stored XSS (high) via missing output escaping when uploading\\/editing images, plus SSRF (unfiltered video URL)
and a privilege escalation when downloading restricted\\/unpublished images. Exploitable by users WITH upload\\/edit permission (frontend or backend). Update to 5.4.1 or newer.\",\"advisory\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\",\"advisory_en\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"4.0.8\",\"above\":\"4.0.0\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939 (4.x-Linie 4.0.0-4.0.7): das Event-Formular (task=submit.submit) pr\\u00fcft nur das CSRF-Token, keine Zugriffsrechte - anonymer Datei-Upload. Voller RCE nur auf Joomla 6 (Core blockt .php nicht mehr); auf Joomla <=5 mildert der Core-Filter, die Zugriffsl\\u00fccke bleibt. Dringend auf 4.0.8 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits.\",\"note_en\":\"CVE-2026-48939 (4.x line 4.0.0-4.0.7): the event form (task=submit.submit) checks only the CSRF token, no access rights - anonymous file upload. Full RCE only
on Joomla 6 (core no longer blocks .php);
on Joomla <=5 the core filter mitigates but the access flaw remains. Update to 4.0.8 urgently. The HTProtect file shield already prevents execution.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"3.9.15\",\"above\":\"3.2.1\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939, 3.x-Linie 3.2.1-3.9.14: dieselbe Zugriffsl\\u00fccke im Event-Formular (task=submit.submit, keine Rechtepr\\u00fcfung, anonymer Datei-Upload). In 3.9.15 (Security-Backport f\\u00fcr Joomla 3) behoben. Dringend auf 3.9.15 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits. (Voller RCE v. a. auf Joomla 6.)\",\"note_en\":\"CVE-2026-48939, 3.x line 3.2.1-3.9.14: same access-control flaw in the event form (task=submit.submit, no permission check, anonymous file upload). Fixed in 3.9.15 (security backport for Joomla 3). Update to 3.9.15 urgently. The HTProtect file shield already prevents execution. (Full RCE mainly
on Joomla 6.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_sppagebuilder\",\"type\":\"component\",\"folder\":\"\",\"name\":\"SP Page Builder\",\"below\":\"6.6.2\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Zero-Day (RCE) bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keine Zugriffs-\\/Login-\\/Token-Pr\\u00fcfung - jeder konnte ohne Login eine beliebige Datei hochladen und ausf\\u00fchren (Remote Code Execution). Wurde aktiv ausgenutzt. Dringend auf 6.6.2 aktualisieren. (HTProtects Mini-WAF blockt den unauthentifizierten Aufruf, das Dateischild verhindert zus\\u00e4tzlich die Ausf\\u00fchrung einer hoc\",\"note_en\":\"Zero-day (RCE) up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login\\/token check - anyone could upload
and execute an arbitrary file without logging in (remote code execution). Actively exploited. Update to 6.6.2 urgently. (HTProtect mini-WAF blocks the unauthenticated call,
and the file shield additionally prevents an uploaded PHP shell
from executing.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.6\",\"above\":\"3.5.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) bis 3.5.10: ein Front-End-Upload-Endpunkt (zum Hinzuf\\u00fcgen von Bildern) pr\\u00fcfte nur das CSRF-Token, aber keine Zugriffsrechte und keinen Dateityp - ein nicht eingeloggter Angreifer konnte eine beliebige Datei (z. B. PHP-Shell) in einen frei w\\u00e4hlbaren Ordner hochladen und ausf\\u00fchren (Remote Code Execution). Dringend auf 3.6.0 aktualisieren. (HTProtects generischer Upload-Sch\",\"note_en\":\"Critical flaw (RCE) up to 3.5.10: a front-end upload endpoint (for adding images) only verified the CSRF token but no access rights
and no file type - an unauthenticated attacker could upload an arbitrary file (e.g. a PHP shell) into a freely chosen folder
and execute it (remote code execution). Update to 3.6.0 urgently. (The HTProtect generic upload protection already blocks the unauthenticated u\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.4.10\",\"above\":\"3.2.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-4-Linie unter 3.4.10: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.4.10 (Backport) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Dateischild verh\",\"note_en\":\"Critical flaw (RCE) in the Joomla 4 line below 3.4.10: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder
and executable. Fixed in 3.4.10 (backport). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents execution.)\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-3-Linie unter 3.1.1: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.1.1 (Backport f\\u00fcr Joomla 3) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Date\",\"note_en\":\"Critical flaw (RCE) in the Joomla 3 line below 3.1.1: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder
and executable. Fixed in 3.1.1 (backport for Joomla 3). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents ex\",\"advisory\":\"\",\"advisory_en\":\"\"}],\"php_min\":\"8.1\",\"fetched\":\"2026-07-18 23:08:16\",\"fetched_ts\":1784408896,\"joomla_latest\":{\"3\":\"3.10.12\",\"4\":\"4.4.14\",\"5\":\"5.4.7\",\"6\":\"6.1.2\"},\"joomla_latest_ts\":1784402624,\"joomla_latest_try\":1784402624},\"htp_malware\":{\"schema\":1,\"version\":\"2026-07-18.184f12\",\"sigs\":[{\"id\":\"backdoor-prepend-sshkey\",\"all\":[\"auto_prepend_file\",\"authorized_keys\"]},{\"id\":\"cred-stealer-ctfaudit\",\"any\":[\"x-ctf-audit\",\"jlib_audit_gid\"]},{\"id\":\"upload-shell-form\",\"all\":[\"move_uploaded_file\",\"check directory permissions\"]},{\"id\":\"sppb-iconfont-shell\",\"any\":[\"sppbwhoami\"]},{\"id\":\"remote-eval-loader\",\"all\":[\"eval(\\\"?>\\\"\"],\"any\":[\"fetchcontentfromurl\",\"file_get_contents(\\\"http\",\"file_get_contents(\'http\"]},{\"id\":\"seo-doorway-slot\",\"any\":[\"slot gacor\",\"situs slot gacor\"]},{\"id\":\"filemanager-backdoor-data\",\"all\":[\"<?php exit;?>{\",\"\\\"groupinfo\\\"\",\"\\\"sizemax\\\"\"]},{\"id\":\"encrypted-eval-openssl\",\"all\":[\"openssl_raw_data\",\"aes-256-cbc\"],\"not\":[\"openssl_decrypt\",\"openssl_encrypt\"]},{\"id\":\"0xnix-split-encrypted\",\"all\":[\"0xnix encrypted code\"]},{\"id\":\"upload-shell-devco1\",\"all\":[\"move_uploaded_file\",\"devco1\"]},{\"id\":\"upload-shell-uname-form\",\"all\":[\"move_uploaded_file\",\"php_uname\",\"multipart\\/form-data\"]},{\"id\":\"hacktool-adminer\",\"all\":[\"adminer_errors\",\"idf_unescape\"]},{\"id\":\"webshell-range-obfuscator\",\"all\":[\"\\\"r\\\".\\\"a\\\".\\\"n\\\".\\\"g\\\".\\\"e\\\"\",\"eval\"]},{\"id\":\"webshell-md5quad-gate\",\"all\":[\"md5(md5(md5(md5(\",\"eval\"]},{\"id\":\"remote-loader-stream-include\",\"any\":[\"include stream_get_meta_data\",\"require stream_get_meta_data\",\"include(stream_get_meta_data\",\"require(stream_get_meta_data\"]},{\"id\":\"webshell-dual-uploader\",\"all\":[\"remote_url\",\"name=\\\"_upl\\\"\",\"name=\\\"_remote\\\"\"]},{\"id\":\"webshell-comment-obfuscator\",\"all\":[\"-*\\/\\/\\/\",\"\\\"~\\\"\"]},{\"id\":\"eval-openssl-shell\",\"label\":\"eval(openssl_decrypt) webshell\",\"all\":[\"eval(openssl_decrypt(\"]},{\"id\":\"dropper-drivergenius-c2\",\"label\":\"Remote-fetch dropper (drivergenius C2)\",\"all\":[\"drivergenius.it.com\"]},{\"id\":\"dropper-backdate-disguise\",\"label\":\"Remote-fetch dropper (mtime-forge + disguise)\",\"all\":[\"getreferencefiletime\",\"generatefilename\"]},{\"id\":\"js-inject-fake-cleaned\",\"label\":\"JS injection w\\/ fake \\\"cleaned\\/safe\\\" comment\",\"all\":[\"artifacts of previous malicious infection\",\"dangerous code has been removed\"]},{\"id\":\"linkforge-seo-injector\",\"label\":\"LinkForge SEO backlink injector\",\"all\":[\"linkforge.cc\"]},{\"id\":\"seo-doorway-cloak\",\"label\":\"SEO cloaking doorway (Thai gambling, fake sitemap)\",\"all\":[\"output_sitemap_page\",\"is_from_google\",\"send_404_and_exit\"]},{\"id\":\"helix-ultimate-xss\",\"label\":\"Helix Ultimate mega-menu XSS campaign\",\"any\":[\"xss.report\",\"_hu_inject\",\"_huinject\",\"sessionstorage._hxd\"]},{\"id\":\"gsocket-c2\",\"label\":\"gsocket reverse-shell C2 marker\",\"any\":[\"gs_args\"]},{\"id\":\"cloak-engine-thiscitze\",\"label\":\"thiscitze SEO cloaking engine\",\"all\":[\"thiscitze\"]}],\"scan_ext\":[],\"ack\":[\"6608daed700e0afc330788b2a272ca8d\",\"67b5f9a00c7aabf34261c715aeeaadba\",\"9812b693256a0c306cc53368559c7a4b\",\"ec96a3bed6681af996fd37f0818cba6b\",\"abfe3b7513994ae6ac2f33129b5f6e7b\",\"fb2e76c5ebafc2b8ea82e0d35d45fa02\",\"2ec54ce00420cd41dfae5abedc9edcb7\",\"02c1a767857c55d31cae7277bc43bac2\",\"573a5e7374be2925911b552d485a28f3\",\"cdf24443c39d943f8750d4a4420e6581\",\"99af93b919c5b6bc14a82382c39010ec\",\"55e704bb88a8f9ab0d756976c527516b\",\"981b4f5e07bf9cd1249d60d659e4ef93\",\"87d978102ed075a8e58074a0d3595c30\",\"85648deb8324a11400ecaebcfd04ae16\",\"323707d28051b4cbf161420f5f1bb499\",\"19104a261abbdffe7cd1713949b286cf\",\"a72013015988ad7d978ce9841a9668dd\",\"a8af9b93d27c774601e1d8a902145bd7\",\"82c8de717e67a620ca503a1a01a7d909\",\"a8192a3cf6279862054cb3092dad82bf\",\"eae8beb708347cfe54bf87506b572f41\",\"5db6f4cdd20dfee86e05110a2276d748\",\"872e97edc1d4247d2ed86d35f468ff88\",\"da9c67c9b7be2d5a7eb9113d76119abc\",\"d0c5a881e845f93a72e1450259de0d33\",\"ea531694f501221b61a324d3754da603\",\"b8333a512d949684c91c9dd907f9cb0c\",\"2c57aea21d161fe5761ffab0abff8228\",\"93117860cd06939707a4ff1797bebb40\",\"7f58961ebcc0db81b16c2d16072fb084\",\"760423f79cedc17e78df95505e93f0c7\",\"d8b0c0f2faf44495f7954fe826720bad\"],\"community\":0,\"fp\":[{\"all\":[\"easycalccheckplus\"],\"only\":[\"rce\"],\"id\":\"ecc-plus-doc-rce\"},{\"all\":[\"phpoffice\\\\phpspreadsheet\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpspreadsheet-lib\"},{\"any\":[\"cp_errordocument\",\"status-reason\"],\"not\":[\"<!--#exec\",\"<?\"],\"only\":[\"shtml\"],\"id\":\"plesk-error-shtml\"},{\"all\":[\"gumlet\",\"data:\\/\\/application\\/octet-stream\"],\"only\":[\"wrapper\"],\"id\":\"gumlet-imageresize-datawrapper\"},{\"all\":[\"data:\\/\\/image\",\"exif_read_data\"],\"only\":[\"wrapper\"],\"id\":\"exif-data-wrapper\"},{\"all\":[\"phpoffice\\\\phpword\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpword-lib\"},{\"all\":[\"box\\\\spout\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"box-spout-lib\"},{\"all\":[\"sarciszewski\\\\phpfuture\"],\"only\":[\"wrapper\"],\"id\":\"php-future-lib\"},{\"all\":[\"baformsmodelform\"],\"only\":[\"feed:upload-shell-uname-form\"],\"id\":\"fp-baforms-model\"},{\"all\":[\"quixnxt\"],\"only\":[\"goto\"],\"id\":\"fp-quix-goto\"},{\"all\":[\"varexporter\"],\"only\":[\"goto\"],\"id\":\"fp-symfony-varexporter-goto\"},{\"all\":[\"valorapps.com\"],\"only\":[\"idxbuild\"],\"id\":\"fp-easyfolderlisting-changelog\"},{\"all\":[\"matomo.org\"],\"only\":[\"rce\"],\"id\":\"fp-matomo-rce\"},{\"all\":[\"namespace tracy\"],\"only\":[\"phtml\"],\"id\":\"fp-tracy-phtml\"},{\"all\":[\"guzzlehttp\",\"requestfsm\"],\"only\":[\"goto\"],\"id\":\"fp-guzzle-requestfsm\"},{\"all\":[\"siteguarding.com\",\"siteguarding_server_ip1\"],\"only\":[\"feed:upload-shell-uname-form\"],\"id\":\"fp-siteguarding-agent\"}],\"seo\":{\"weights\":[],\"keywords\":[],\"sigs\":[]},\"recall\":[],\"fetched\":\"2026-07-19 03:25:40\",\"fetched_ts\":1784424340},\"htp_incidents\":{\".htaccess|changed\":1784287304,\"images\\/.htaccess|changed\":1784287304,\"media\\/.htaccess|changed\":1784288226}}'
WHERE `type` = 'component'
AND `element` = 'com_htprotect'
| id | select_type | table | partitions | type | possible_keys | key | key_len | ref | rows | filtered | Extra |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | UPDATE | bly_extensions | NULL | range | element_clientid,element_folder_clientid,extension | element_clientid | 402 | const | 1 | 100.00 | Using where |
| Status | Duration |
|---|---|
| starting | 0.38 ms |
| checking permissions | 0.00 ms |
| Opening tables | 0.01 ms |
| init | 0.01 ms |
| System lock | 0.03 ms |
| updating | 0.10 ms |
| end | 0.01 ms |
| query end | 0.01 ms |
| closing tables | 0.01 ms |
| freeing items | 0.01 ms |
| cleaning up | 0.01 ms |
| # | Caller | Bestand en regelnummer |
|---|---|---|
| 10 | JDatabaseDriverMysqli->execute() | JROOT/administrator/components/com_htprotect/core/watch.php:1021 |
| 9 | HtpWatch::saveNotified() | JROOT/administrator/components/com_htprotect/core/watch.php:348 |
| 8 | HtpWatch::recordNotification() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2670 |
| 7 | PlgSystemHtprotectwatch->notify() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491 |
| 6 | PlgSystemHtprotectwatch->htpRun() | JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242 |
| 5 | PlgSystemHtprotectwatch->onAfterRespond() | JROOT/libraries/joomla/event/event.php:70 |
| 4 | JEvent->update() | JROOT/libraries/joomla/event/dispatcher.php:160 |
| 3 | JEventDispatcher->trigger() | JROOT/libraries/src/Application/BaseApplication.php:108 |
| 2 | Joomla\CMS\Application\BaseApplication->triggerEvent() | JROOT/libraries/src/Application/CMSApplication.php:247 |
| 1 | Joomla\CMS\Application\CMSApplication->execute() | JROOT/index.php:49 |
7 × SELECT `params`
FROM `bly_extensions`
3 × SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time, c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level, c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id, c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version,
CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug
FROM `bly_categories` AS `s`
INNER JOIN `bly_categories` AS `c`
ON (s.lft < c.lft
AND c.lft < s.rgt
AND c.language IN ('nl-NL','*')) OR (c.lft <= s.lft
AND s.rgt <= c.rgt)
2 × SELECT `extension_id` AS `id`,`element` AS `option`,`params`,`enabled`
FROM `bly_extensions`
2 × SELECT `id`,`name`,`rules`,`parent_id`
FROM `bly_assets`
2 × SELECT `rules`
FROM `bly_assets`
2 × SELECT DISTINCT `user_id`
FROM `bly_user_usergroup_map`
1 × SELECT `data`
FROM `bly_session`
1 × SELECT `session_id`
FROM `bly_session`
1 × SELECT id, rules
FROM `bly_viewlevels
1 × SELECT b.id
FROM bly_usergroups AS a
LEFT JOIN bly_usergroups AS b
ON b.lft <= a.lft
AND b.rgt >= a.rgt
1 × SELECT `folder` AS `type`,`element` AS `name`,`params` AS `params`,`extension_id` AS `id`
FROM bly_extensions
1 × SELECT *
FROM bly_languages
1 × SELECT `element`,`name`,`client_id`,`extension_id`
FROM `bly_extensions`
1 × SELECT m.id, m.menutype, m.title, m.alias, m.note, m.path AS route, m.link, m.type, m.level, m.language,`m`.`browserNav`, m.access, m.params, m.home, m.img, m.template_style_id, m.component_id, m.parent_id,e.element as component
FROM bly_menu AS m
LEFT JOIN bly_extensions AS e
ON m.component_id = e.extension_id
1 × SELECT id, home, template, s.params
FROM bly_template_styles as s
LEFT JOIN bly_extensions as e
ON e.element=s.template
AND e.type='template'
AND e.client_id=s.client_id
1 × SELECT a.id, a.asset_id, a.title, a.alias, a.introtext, a.fulltext, a.state, a.catid, a.created, a.created_by, a.created_by_alias,
CASE WHEN a.modified = '0000-00-00 00:00:00' THEN a.created ELSE a.modified END as modified, a.modified_by, a.checked_out, a.checked_out_time, a.publish_up, a.publish_down, a.images, a.urls, a.attribs, a.version, a.ordering, a.metakey, a.metadesc, a.access, a.hits, a.metadata, a.featured, a.language, a.xreference,c.title AS category_title, c.alias AS category_alias, c.access AS category_access,u.name AS author,parent.title as parent_title, parent.id as parent_id, parent.path as parent_route, parent.alias as parent_alias,ROUND(v.rating_sum / v.rating_count, 0) AS rating, v.rating_count as rating_count
FROM bly_content AS a
INNER JOIN bly_categories AS c
on c.id = a.catid
LEFT JOIN bly_users AS u
on u.id = a.created_by
LEFT JOIN bly_categories as parent
ON parent.id = c.parent_id
LEFT JOIN bly_content_rating AS v
ON a.id = v.content_id
1 × SELECT `m`.`tag_id`,`t`.*
FROM `bly_contentitem_tag_map` AS m
INNER JOIN `bly_tags` AS t
ON `m`.`tag_id` = `t`.`id`
1 × SELECT DISTINCT a.id, a.title, a.name, a.checked_out, a.checked_out_time, a.note, a.state, a.access, a.created_time, a.created_user_id, a.ordering, a.language, a.fieldparams, a.params, a.type, a.default_value, a.context, a.group_id, a.label, a.description, a.required,l.title AS language_title, l.image AS language_image,uc.name AS editor,ag.title AS access_level,ua.name AS author_name,g.title AS group_title, g.access as group_access, g.state AS group_state, g.note as group_note
FROM bly_fields AS a
LEFT JOIN `bly_languages` AS l
ON l.lang_code = a.language
LEFT JOIN bly_users AS uc
ON uc.id=a.checked_out
LEFT JOIN bly_viewlevels AS ag
ON ag.id = a.access
LEFT JOIN bly_users AS ua
ON ua.id = a.created_user_id
LEFT JOIN bly_fields_groups AS g
ON g.id = a.group_id
LEFT JOIN `bly_fields_categories` AS fc
ON fc.field_id = a.id
1 × SELECT m.id, m.title, m.module, m.position, m.content, m.showtitle, m.params, mm.menuid
FROM bly_modules AS m
LEFT JOIN bly_modules_menu AS mm
ON mm.moduleid = m.id
LEFT JOIN bly_extensions AS e
ON e.element = m.module
AND e.client_id = m.client_id
1 × SELECT `c2`.`language`,`c2`.`id`
FROM `bly_menu` AS `c`
INNER JOIN `bly_associations` AS `a`
ON a.id = c.`id`
AND a.context='com_menus.item'
INNER JOIN `bly_associations` AS `a2`
ON `a`.`key` = `a2`.`key`
INNER JOIN `bly_menu` AS `c2`
ON a2.id = c2.`id`
1 × SELECT `c2`.`language`,CONCAT_WS(':', `c2`.`id`, `c2`.`alias`) AS `id`,CONCAT_WS(':', ca.id, ca.alias) AS `catid`
FROM `bly_content` AS `c`
INNER JOIN `bly_associations` AS `a`
ON a.id = c.`id`
AND a.context='com_content.item'
INNER JOIN `bly_associations` AS `a2`
ON `a`.`key` = `a2`.`key`
INNER JOIN `bly_content` AS `c2`
ON a2.id = c2.`id`
INNER JOIN `bly_categories` AS `ca`
ON `c2`.`catid` = ca.id
AND ca.extension = 'com_content'
1 × SELECT COUNT(*)
FROM `bly_extensions`
1 × SELECT `id`,`username`,`email`,`password`,`block`,`lastvisitDate`
FROM `bly_users`
1 × SELECT `element`,`type`,`folder`,`client_id`,`manifest_cache`,`enabled`
FROM `bly_extensions
1 × SELECT `id`,`username`,`name`,`email`,`registerDate`,`lastvisitDate`,`block`
FROM `bly_users`
1 × SELECT `id`,`name`,`types`,`area`,`plugins`,`params`
FROM `bly_wf_profiles`
1 × INSERT INTO `bly_session` (`session_id`,`guest`,`time`,`userid`,`username`,`client_id`)
VALUES (X'62336f31336f71616b756d336f6d326736706c73357464733774', 1, 1784427755, 0, '', 0
1 × UPDATE `bly_extensions`
SET `params` = '{\"mediaversion\":\"63c96240fc4e31b82fde508cb45243fe\"}'
1 × SHOW FULL COLUMNS
FROM `bly_content
1 × UPDATE bly_content
SET `hits` = (`hits` + 1)
1 × UPDATE `bly_session`
SET `data` = 'joomla|s:840:\"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\";' , `time` = 1784427755
1 × UPDATE `bly_extensions`
SET `params` = '{\"htp_shield\":{\"site_path\":\"\",\"sef_rules\":1,\"api_router\":1,\"api_mode\":\"route\",\"fastcgi_auth\":1,\"apache_options\":1,\"follow_symlink\":0,\"force_https\":1,\"www_mode\":0,\"canonical_host\":\"\",\"h_frame\":1,\"h_nosniff\":1,\"h_referrer\":\"strict-origin-when-cross-origin\",\"h_poweredby\":1,\"h_hsts\":0,\"h_hsts_sub\":0,\"h_coop\":0,\"h_permissions\":0,\"f_query\":1,\"f_rfi\":1,\"f_methods\":1,\"f_wpnoise\":1,\"htaccess_external\":0,\"guard_dismissed\":0,\"x_shield\":1,\"x_sigs_off\":[],\"defs_version\":\"2026-07-15.9ac386\",\"mal_whitelist\":[],\"u_harden\":1,\"u_dirs\":[\"images\",\"media\"],\"emergency_lock\":0,\"notify_email\":\"mail@website-bereinigung.de\",\"notify_reminder_days\":14,\"unsub_secret\":\"a3ovOtDuiJ2JWUICnSikGA7204m_W0KkrPOvl88kIDU\",\"unsub_base\":\"https:\\/\\/belezy.eu\\/\",\"site_fp\":\"9d003c1a41c42c108fbc877300d68eac557ccaac\",\"swarm_contrib_id\":\"\",\"swarm_acked\":[],\"watch_manifest\":{\".htaccess\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"images\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\",\"media\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\"},\"core_manifest\":{\"index.php\":\"b1c33443a827fd25d6e033d14bdba8e6f9df6ad1\",\"administrator\\/index.php\":\"7078c5d7b2181900c509c93302f324e2dae228bf\"},\"core_jversion\":\"3.10.11\",\"accounts_watch\":1,\"account_baseline\":{\"374\":{\"id\":374,\"username\":\"hberdel\",\"email\":\"info@belezy.eu\",\"phash\":\"4e4fa5fb0131a9781fca0d873c22f53c2ad8a248\",\"block\":0,\"lastvisit\":\"2026-06-24 12:03:38\",\"pneeds\":0},\"461\":{\"id\":461,\"username\":\"Loose\",\"email\":\"info@wm-loose.de\",\"phash\":\"efabda101d354010a79343bd47474e6e3fc8676d\",\"block\":0,\"lastvisit\":\"2023-02-28 14:32:15\",\"pneeds\":0},\"162201\":{\"id\":162201,\"username\":\"pascall\",\"email\":\"mail@website-bereinigung.de\",\"phash\":\"a77d1a74e85312c45348eeec7605887016661d17\",\"block\":0,\"lastvisit\":\"2026-06-24 15:56:20\",\"pneeds\":0}},\"admin_whitelist\":[],\"seo_watch\":1,\"compat_guard\":1,\"seo_cloaking_auto\":0,\"seo_whitelist\":[],\"seo_topic_ack\":[],\"seo_baseline\":{\"title\":\"ProvenceFerien - Startseite\",\"out_domains\":{\"xdebug.org\":1},\"shingles\":{\"2773276488\":1,\"694934048\":1,\"2276828720\":1,\"1014845744\":1,\"2164272920\":1,\"654648592\":1,\"3252768728\":1,\"2703306816\":1,\"4206898064\":1,\"3965176784\":1,\"324970472\":1,\"3140698272\":1,\"2596003040\":1,\"2737171944\":1,\"95016752\":1,\"1222032616\":1,\"3967628640\":1,\"2144334616\":1,\"1571366176\":1,\"2296853872\":1,\"2149620600\":1,\"1121698424\":1,\"1523411896\":1,\"2049945696\":1,\"2144915136\":1,\"2204935488\":1,\"723865528\":1,\"3725506112\":1,\"1945954912\":1,\"4263363480\":1,\"1309988440\":1,\"1421026616\":1,\"3426863704\":1,\"1030014896\":1,\"912520336\":1,\"2088853496\":1,\"3979502160\":1,\"4116536448\":1,\"2863093792\":1,\"3037412432\":1,\"3620898072\":1,\"2314148544\":1,\"37976\":1,\"2414448336\":1,\"3977858536\":1,\"11385216\":1,\"1409844200\":1,\"1751197192\":1,\"1518609656\":1,\"1130239024\":1,\"716131384\":1,\"1236659328\":1,\"3001742640\":1,\"3903950424\":1,\"2657582952\":1,\"1545708136\":1,\"3170111184\":1,\"4275824384\":1,\"1476852648\":1,\"3518915328\":1,\"2973823744\":1,\"332369504\":1,\"581432120\":1,\"1827905688\":1,\"2062886848\":1,\"2311799488\":1,\"4179887752\":1,\"183707264\":1,\"821579528\":1,\"1552434376\":1,\"3369362064\":1,\"3578063520\":1,\"3682544776\":1,\"365264784\":1,\"2968954048\":1,\"1708211424\":1,\"1961675312\":1,\"2599037872\":1,\"4081499304\":1,\"187337984\":1,\"362962264\":1,\"2094558736\":1,\"2787016200\":1,\"658564976\":1,\"3683135656\":1,\"3893519200\":1,\"3208575176\":1,\"4132949216\":1,\"1552018832\":1,\"344452216\":1,\"2539551096\":1,\"1431046296\":1,\"2110760856\":1,\"1993946344\":1,\"199762592\":1,\"4072270968\":1,\"458114664\":1,\"1558974800\":1,\"883158256\":1,\"2329977968\":1,\"1213187168\":1,\"3879781728\":1,\"3735037840\":1,\"829495128\":1,\"1020533640\":1,\"856310912\":1,\"1365789064\":1,\"4285050888\":1,\"938255488\":1,\"3648057168\":1,\"28501736\":1,\"2051798112\":1,\"4075032544\":1,\"3189454464\":1,\"646887464\":1,\"3534466768\":1,\"1246339560\":1,\"1354898128\":1,\"2981285080\":1,\"815862896\":1,\"249961104\":1,\"3008275536\":1,\"1743788824\":1,\"4265276576\":1,\"3557110600\":1,\"4041208904\":1,\"1327249520\":1,\"1607673584\":1,\"4007425464\":1,\"1175775032\":1,\"2276517544\":1,\"1205991320\":1,\"1113485296\":1,\"2641078032\":1,\"760694544\":1,\"1980425792\":1,\"2693581640\":1,\"3968187688\":1,\"2974680912\":1,\"3462925544\":1,\"2964742568\":1,\"1189974320\":1,\"460967008\":1,\"3741834088\":1,\"3711292792\":1,\"973742744\":1,\"351015224\":1,\"3738520704\":1,\"3335574944\":1,\"3741881144\":1,\"4101744904\":1,\"433360288\":1,\"2791891896\":1,\"3626748360\":1,\"3196827536\":1,\"1108585200\":1,\"1559046784\":1,\"7730296\":1,\"1458451704\":1,\"2911589176\":1,\"454621680\":1,\"3381116688\":1,\"1982037912\":1,\"916874840\":1,\"3846924096\":1,\"4123225216\":1,\"670221008\":1,\"2571777288\":1,\"3627078176\":1,\"293222816\":1,\"281163600\":1,\"2508087208\":1,\"3107900104\":1,\"2034508136\":1,\"1977429088\":1,\"2703274016\":1,\"4139311008\":1,\"4261163824\":1,\"1856123928\":1,\"376102376\":1,\"2521452248\":1,\"3357431832\":1,\"971320240\":1,\"1808893192\":1,\"1925217168\":1,\"2709313920\":1,\"444641888\":1,\"3154993240\":1,\"2071995072\":1,\"1818046032\":1,\"4043405808\":1,\"2965571680\":1,\"1618392856\":1,\"933003528\":1,\"2230427152\":1,\"1208455864\":1,\"2025534160\":1,\"1408784776\":1,\"2685059296\":1,\"3489792648\":1,\"1615724560\":1,\"638679152\":1,\"80777296\":1,\"466411848\":1,\"2846665840\":1,\"1911606592\":1,\"3316724536\":1,\"2915452368\":1,\"2804037960\":1,\"4138023008\":1,\"1630734352\":1,\"1587613576\":1,\"1950652592\":1,\"2777296976\":1,\"2255302400\":1,\"2621186584\":1,\"36106456\":1,\"2243664024\":1,\"3186220248\":1,\"3286361792\":1,\"335870296\":1,\"947878136\":1,\"885775072\":1,\"2836090264\":1,\"3195444184\":1,\"1373515616\":1,\"2703441304\":1,\"2999798000\":1,\"4124423392\":1,\"1153004272\":1,\"796890520\":1,\"1247028480\":1,\"958748368\":1,\"1744512424\":1,\"647816080\":1,\"637608088\":1,\"1300060200\":1,\"1148044208\":1,\"3431685056\":1,\"3679148440\":1,\"1466140040\":1,\"1735424048\":1,\"1298914320\":1,\"3451668792\":1,\"3485632672\":1,\"3040222736\":1,\"3818565424\":1,\"428036792\":1,\"2710735120\":1,\"1002378832\":1,\"347500504\":1,\"2570151984\":1,\"2776089360\":1,\"2607914576\":1,\"3758066944\":1,\"4023650336\":1,\"928231432\":1,\"736082384\":1,\"237439056\":1,\"3134172856\":1,\"2464987728\":1,\"48098040\":1,\"2694091560\":1,\"2144818552\":1,\"3130333816\":1,\"3591606896\":1,\"1894249248\":1,\"4188555200\":1,\"245520800\":1,\"1682089672\":1,\"9149544\":1,\"1372800744\":1,\"2964205104\":1,\"2728041256\":1,\"143834200\":1,\"2736916224\":1,\"2448768504\":1,\"2365893624\":1,\"2284709784\":1,\"802473640\":1,\"3772932312\":1,\"361847392\":1,\"1137970600\":1,\"1232831160\":1,\"144058216\":1,\"1646278032\":1,\"992984272\":1,\"3634194248\":1,\"3773773072\":1,\"4070217592\":1,\"2691280184\":1,\"3903737168\":1,\"431558624\":1,\"2195069352\":1,\"669332312\":1,\"3004089080\":1,\"3885706904\":1,\"2109380128\":1,\"3757583592\":1,\"2545468000\":1,\"3698566936\":1,\"183215536\":1,\"801931600\":1,\"1734328536\":1,\"2074309544\":1,\"2801752600\":1,\"548482512\":1,\"3129297296\":1,\"3367049600\":1,\"1792562160\":1,\"3633067472\":1,\"963883040\":1,\"1263046008\":1,\"539208032\":1,\"3362402488\":1,\"3069180952\":1,\"1120040384\":1,\"2840905640\":1,\"2078889728\":1,\"2274655504\":1,\"111197728\":1,\"2673020880\":1,\"125198544\":1,\"591729768\":1,\"4239283240\":1,\"2427366776\":1,\"3593402112\":1,\"147956928\":1,\"1693971840\":1,\"3868138536\":1,\"320203224\":1,\"224045520\":1,\"39887024\":1,\"21699200\":1,\"1739726536\":1,\"142599880\":1,\"3747452816\":1,\"597727768\":1,\"4150626032\":1,\"2011179320\":1,\"1296426808\":1,\"1864695888\":1,\"1253472664\":1,\"1273095288\":1,\"1083862632\":1,\"13803176\":1,\"3529821320\":1,\"1822362464\":1,\"1602423200\":1,\"3045750632\":1,\"3205967912\":1,\"472550200\":1,\"3722023320\":1,\"2292319968\":1,\"4163832904\":1,\"2617823040\":1,\"1372429176\":1,\"4109595712\":1,\"400511176\":1,\"548872256\":1,\"911090304\":1,\"3430473600\":1,\"4207759072\":1,\"1789941360\":1,\"4083465160\":1,\"777022376\":1,\"4197280096\":1,\"2424302952\":1,\"3615809224\":1,\"3578502824\":1,\"3707729224\":1,\"1558907592\":1,\"2213017096\":1,\"2360544800\":1,\"3955810424\":1,\"272558192\":1,\"1226552648\":1,\"1731302080\":1,\"1881370576\":1,\"2468291352\":1,\"1337371936\":1,\"2193969840\":1,\"2782861592\":1,\"603145208\":1,\"552122232\":1,\"3303788176\":1,\"1655746256\":1,\"1805588320\":1,\"1404709120\":1,\"2489808104\":1,\"3633200272\":1,\"1764116024\":1,\"612888888\":1,\"65828896\":1,\"3760394392\":1,\"2609229016\":1,\"3563655328\":1,\"3530396248\":1,\"1503893184\":1,\"4086958072\":1,\"1190305512\":1,\"806165960\":1,\"2330645552\":1,\"2565860128\":1,\"4245224744\":1,\"4290332968\":1,\"3816809680\":1,\"1731756096\":1,\"1958936056\":1,\"3260819152\":1,\"580197864\":1,\"987543272\":1,\"855783312\":1,\"2977809568\":1,\"2304156000\":1,\"4292843744\":1,\"102433336\":1,\"3382348056\":1,\"1583874176\":1,\"4030843888\":1,\"2806962832\":1,\"1027675616\":1,\"703426624\":1,\"1368990104\":1,\"2968221928\":1,\"4108864432\":1,\"573687992\":1,\"1206681264\":1,\"915365216\":1,\"2398957320\":1,\"905451816\":1,\"3645704632\":1,\"2402616856\":1,\"3895858936\":1,\"2778828512\":1,\"2244131928\":1,\"3656171680\":1,\"2332508616\":1,\"2983233488\":1,\"4071616712\":1,\"277607960\":1,\"1922399728\":1,\"1274958032\":1,\"2610280200\":1,\"2416624344\":1,\"628806296\":1,\"348750888\":1,\"1093229552\":1,\"1032561952\":1,\"2424530240\":1,\"1220979848\":1,\"2142571840\":1,\"18039456\":1,\"51483176\":1,\"3246251144\":1,\"2282816104\":1,\"538583928\":1,\"528013376\":1,\"2308206136\":1,\"2991483680\":1,\"3905412016\":1,\"189579960\":1,\"451549632\":1,\"672548352\":1,\"1333121952\":1,\"144147328\":1,\"2561248448\":1,\"2358573544\":1,\"2107445648\":1,\"1689309576\":1,\"19222088\":1,\"4011024600\":1,\"2984760960\":1,\"3229899560\":1},\"redirect_to\":\"\",\"ts\":1784419805},\"seo_overview_ts\":1784419804,\"seo_overview_finding\":[],\"core_overview_ts\":1784129158,\"core_overview_finding\":[],\"plugin_initialized\":1,\"quickicon_initialized\":1,\"autosecure\":0,\"autosecure_last\":0,\"tmp_autoclean\":0,\"tmp_keep\":[],\"autoupdate_notify\":0,\"autoupdate_ext\":0,\"autoupdate_all\":0,\"autoupdate_manual\":0,\"autoupdate_mail_success\":0,\"autoupdate_include\":[],\"autoupdate_keep\":2,\"autoupdate_interval\":86400,\"autoupdate_schedule\":\"weekly\",\"autoupdate_hour\":21,\"autoupdate_weekday\":5,\"autoupdate_grace\":0,\"autoupdate_malscan\":1,\"s_php\":1,\"s_types\":1,\"s_ext\":\"7z,avif,bmp,br,css,csv,doc,docx,eot,gif,gz,htm,html,ico,ics,jp2,jpe,jpeg,jpg,js,json,m4a,m4v,map,mjs,mov,mp3,mp4,mpeg,mpg,odp,ods,odt,oga,ogg,ogv,opus,otf,pdf,png,ppt,pptx,rar,rtf,svg,svgz,tif,tiff,ttf,txt,vtt,wasm,wav,webm,webmanifest,webp,woff,woff2,xls,xlsx,xml,xsl,zip\",\"s_files\":[\"administrator\\/components\\/com_akeeba\\/restore.php\",\"administrator\\/components\\/com_akeebabackup\\/restore.php\",\"joomla-connector.php\"],\"s_dirs_php\":[\"plugins\\/system\\/bfnetwork\"],\"s_dirs_static\":[],\"allow_paths\":[],\"s_dotfiles\":1,\"s_wellknown\":1,\"s_sensitive\":1,\"s_manifests\":0,\"s_sysdirs\":1,\"s_sysdirs_list\":[\"administrator\\/cache\",\"administrator\\/logs\",\"cache\",\"cli\",\"log\",\"logs\",\"tmp\"],\"p_compress\":1,\"p_precomp\":1,\"p_expires\":1,\"p_etag\":0,\"custom_top\":\"\",\"custom_bottom\":\"\",\"file_sha1\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"last_written\":\"2026-07-15 17:25:57\",\"last_test\":{\"checks\":[{\"label\":\"Startseite erreichbar\",\"url\":\"https:\\/\\/belezy.eu\\/\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"Backend erreichbar (401 = Passwortschutz aktiv)\",\"url\":\"https:\\/\\/belezy.eu\\/administrator\\/index.php\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"PHP-Schild aktiv (Test-Aufruf wird mit 403 abgewiesen)\",\"url\":\"https:\\/\\/belezy.eu\\/htpx-canary-567e3eb1.php\\/htp\",\"status\":403,\"ok\":true,\"note\":\"\"},{\"label\":\"configuration.php gesperrt\",\"url\":\"https:\\/\\/belezy.eu\\/configuration.php\",\"status\":403,\"ok\":true,\"note\":\"\"}],\"regression\":false,\"reason\":\"\",\"time\":\"2026-07-15 17:25:57\"},\"guard_dir\":\"\",\"htaccess_cap\":[]},\"htp_defs\":{\"schema\":1,\"version\":\"2026-07-18.2bbe9c\",\"signatures\":[{\"id\":\"jce-profiles-import\",\"label\":\"JCE Profil-Import (CVE-2026-48907)\",\"label_en\":\"JCE profile import (CVE-2026-48907)\",\"desc\":\"Unauthentifizierter Profil-Import im JCE-Editor - Beginn der aktuellen RCE-Kette (schaltet PHP-Uploads frei). Kein legitimer Frontend-Aufruf.\",\"desc_en\":\"Unauthenticated profile import in the JCE editor - start of the current RCE chain (enables PHP uploads). No legitimate frontend call.\",\"default\":1,\"qs\":\"option=com_jce.*task=profiles\\\\.import\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-rpc-upload\",\"label\":\"JCE Webshell-Upload via plugin.rpc (CVE-2026-48907)\",\"label_en\":\"JCE webshell upload via plugin.rpc (CVE-2026-48907)\",\"desc\":\"Datei-Upload \\u00fcber den JCE-Dateibrowser (plugin.rpc, method=upload). Greift nur im Frontend; eingeloggte Autoren (legitimer Editor-Upload) bleiben unber\\u00fchrt.\",\"desc_en\":\"File upload via the JCE file browser (plugin.rpc, method=upload). Applies only
on the frontend; logged-in authors (legitimate editor upload) are unaffected.\",\"default\":1,\"qs\":\"option=com_jce.*task=plugin\\\\.rpc.*method=upload\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-imgmanager\",\"label\":\"JCE Image Manager (Alt-Exploit)\",\"label_en\":\"JCE Image Manager (legacy exploit)\",\"desc\":\"Klassischer unauthentifizierter Datei-Upload \\u00fcber den JCE-Bildmanager (sehr alte JCE-Versionen).\",\"desc_en\":\"Classic unauthenticated file upload via the JCE image manager (very old JCE versions).\",\"default\":1,\"qs\":\"option=com_jce.*plugin=imgmanager.*method=form\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"novarain-nrframework\",\"label\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"label_en\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"desc\":\"CVE-2026-21627: unauthentifizierte PHP-Datei-Einbindung \\u00fcber plg_system_nrframework via com_ajax (task=include).\",\"desc_en\":\"CVE-2026-21627: unauthenticated PHP file inclusion via plg_system_nrframework through com_ajax (task=include).\",\"default\":1,\"qs\":\"option=com_ajax.*nrframework.*task=include\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"astroid-ajax\",\"label\":\"Astroid Framework (AJAX-Endpunkt)\",\"label_en\":\"Astroid Framework (AJAX endpoint)\",\"desc\":\"CVE-2026-21628: ungepr\\u00fcfter Astroid-AJAX-Endpunkt (Upload\\/Installation). Coarse-Match auf com_ajax + astroid.\",\"desc_en\":\"CVE-2026-21628: unchecked Astroid AJAX endpoint (upload\\/installation). Coarse match
on com_ajax + astroid.\",\"default\":1,\"qs\":\"option=com_ajax.*(plugin|template|view)=astroid\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"helix3-ajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Handler (Datei schreiben\\/l\\u00f6schen)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax handler (file write\\/delete)\",\"desc\":\"Helix3 < 3.1.1: der Ajax-Handler onAjaxHelix3 pr\\u00fcfte weder Login noch Rechte. Trifft gezielt die gef\\u00e4hrlichen Unauth-Aktionen im POST-Body: save (Layout-JSON ins aktive Template schreiben), remove (Datei l\\u00f6schen via Path-Traversal), import (Template-Style-Settings \\u00fcberschreiben) sowie upload_image\\/remove_image\\/updateFonts. Legitime Gast-Aktionen (voting, load) und eingeloggte Template-Nutzung \",\"desc_en\":\"Helix3 < 3.1.1: the onAjaxHelix3 ajax handler checked neither login nor permission. Targets the dangerous unauth POST-body actions: save (write layout JSON into the active template), remove (delete a file via path traversal), import (overwrite template style settings) plus upload_image\\/remove_image\\/updateFonts. Legitimate guest actions (voting, load)
and logged-in template use are unaffected. Fix:\",\"default\":1,\"qs\":\"data(?:\\\\[|%5b)action(?:\\\\]|%5d)=(?:save|remove|import|updatefonts)|action=(?:upload_image|remove_image)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helix3-comajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Dispatcher (Datei-Write\\/Delete, Style-Injektion)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax dispatcher (file write\\/delete, style injection)\",\"desc\":\"Helix3 < 3.1.1: der Front-Dispatcher (option=com_ajax mit plugin=helix3) rief onAjaxHelix3 VOR jeder Token-\\/Rechtepr\\u00fcfung auf - unauthentifiziert save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (Datei-Schreiben, Path-Traversal-L\\u00f6schen, Template-Style-Injektion, Stored XSS). Blockt jeden GAST-Aufruf dieses Dispatchers im Frontend (Defense-in-Depth, f\\u00e4ngt auch laufende Scans) - erg\\u00e4nzt d\",\"desc_en\":\"Helix3 < 3.1.1: the front-end dispatcher (option=com_ajax with plugin=helix3) invoked onAjaxHelix3 BEFORE any token\\/permission check - unauthenticated save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (file write, path-traversal delete, template style injection, stored XSS). Blocks every GUEST call of this dispatcher
on the front end (defense in depth, also catches ongoing scans) - complemen\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helix3\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helixultimate-comajax\",\"label\":\"Helix Ultimate (JoomShaper): unauth. com_ajax-Dispatcher (Men\\u00fc-Write\\/Datei\\/Export)\",\"label_en\":\"Helix Ultimate (JoomShaper): unauth com_ajax dispatcher (menu write\\/file\\/export)\",\"desc\":\"Helix Ultimate < 2.2.7: der com_ajax-Handler onAjaxHelixultimate (option=com_ajax mit plugin=helixultimate, Action im task-Param) lief VOR jeder Login-\\/Rechtepr\\u00fcfung - ein anonymer Angreifer konnte in die Men\\u00fc-Einstellungen schreiben (Stored XSS bis in die Admin-Sitzung), Dateien per Path-Traversal beliebig l\\u00f6schen, einen Open Redirect ausl\\u00f6sen und das Template ungesch\\u00fctzt exportieren. Blockt\",\"desc_en\":\"Helix Ultimate < 2.2.7: the com_ajax handler onAjaxHelixultimate (option=com_ajax with plugin=helixultimate, action in the task param) ran BEFORE any login\\/permission check - an anonymous attacker could write into the menu settings (stored XSS reaching the admin session), delete files anywhere via path traversal, trigger an open redirect
and export the template unprotected. Blocks every GUEST call\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helixultimate\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"comajax-include\",\"label\":\"com_ajax: Datei-Einbindung (generisch)\",\"label_en\":\"com_ajax: file inclusion (generic)\",\"desc\":\"F\\u00e4ngt unbekannte LFI-L\\u00fccken derselben Klasse ab: com_ajax mit task=include\\/require. Frontend.\",\"desc_en\":\"Catches unknown LFI holes of the same class: com_ajax with task=include\\/require. Frontend.\",\"default\":1,\"qs\":\"option=com_ajax.*task=(include|require)(_once)?\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"sppagebuilder-uploadicon\",\"label\":\"SP Page Builder: unauthentifizierter Icon-Upload (RCE)\",\"label_en\":\"SP Page Builder: unauthenticated icon upload (RCE)\",\"desc\":\"Zero-Day in SP Page Builder bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keinerlei Zugriffs-\\/Login-Pr\\u00fcfung - unauthentifizierter Datei-Upload nach \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Nur Mini-WAF (G\\u00e4ste), da eingeloggte Builder den Endpunkt legitim nutzen.\",\"desc_en\":\"Zero-day in SP Page Builder up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login check - unauthenticated file upload to \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Mini-WAF only (guests), since logged-in builders use the endpoint legitimately.\",\"default\":1,\"qs\":\"option=com_sppagebuilder.*task=asset\\\\.uploadCustomIcon\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":null},{\"id\":\"dpcalendar-createdby-sqli\",\"label\":\"DPCalendar: unauth. SQL-Injection (Autor-Filter)\",\"label_en\":\"DPCalendar: unauth SQL injection (author filter)\",\"desc\":\"DPCalendar Blind-SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): der Frontend-Autor-Filter filter_created_by (option=com_dpcalendar, view=events) floss in skalarer Form ungecastet in a.created_by IN (...) - anonymes Auslesen beliebiger DB-Tabellen (nur lesend). Blockt Gast-Anfragen, deren filter_created_by kein reiner Integer ist (legitim = Autor-IDs\\/Ziffern) -> FP-frei. Fix 10.11.2 \\/ 8.19.4.\",\"desc_en\":\"DPCalendar blind SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): the front-end author filter filter_created_by (option=com_dpcalendar, view=events) flowed uncast into a.created_by IN (...) in its scalar form - anonymous read of arbitrary DB tables (read-only). Blocks guest requests whose filter_created_by is not a pure integer (legit = author IDs\\/digits) -> FP-free. Fix 10.11.2 \\/ 8.19.4.\",\"default\":1,\"qs\":\"(?=.*option=com_dpcalendar)(?=.*filter_created_by=[0-9,]*[^0-9,&])\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_dpcalendar\"},{\"id\":\"acym-entityselect-sqli\",\"label\":\"AcyMailing: unauth. SQL-Injection (Entity-Select Spaltenliste)\",\"label_en\":\"AcyMailing: unauth SQL injection (entity-select column list)\",\"desc\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): der Frontend-Endpunkt EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) nahm die Request-Parameter columns\\/join_table ungeprueft in die SELECT-Spaltenliste von UserClass::getMatchingElements auf - ein anonymer Besucher konnte per Subquery beliebige DB-Tabellen (inkl. Passwort-Hashes) auslesen. Blockt GAST-Aufrufe dieses Tasks\",\"desc_en\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): the front-end endpoint EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) placed the request parameters columns\\/join_table unchecked into the SELECT column list of UserClass::getMatchingElements - an anonymous visitor could read arbitrary DB tables (incl. password hashes) via a subquery. Blocks GUEST calls of this task whose c\",\"default\":1,\"qs\":\"(?=.*option=com_acym)(?=.*task=loadEntityFront)(?=.*(?:columns|join_table|join)=[^&]*(?:\\\\(|%28|%2528|\\\\s|%20|\\\\+))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_acym\"},{\"id\":\"quix-article-sqli\",\"label\":\"Quix Page Builder: unauth. SQL-Injection (Einzel-Artikel-AJAX)\",\"label_en\":\"Quix Page Builder: unauth SQL injection (single-article AJAX)\",\"desc\":\"Quix (ThemeXpert, Free UND Pro) bis 6.2.0, inkl. der 5.x-Reihe: der oeffentliche AJAX-Endpunkt (option=com_quix, task=ajax, element=joomla-article) ruft QuixJoomlaArticleElement::getAjax() ohne Login-\\/Token-\\/Lizenz-Pruefung; die Artikel-ID kommt base64-kodiert im data-Parameter und wird in articleExist() UNGECASTET in die DB-Query konkateniert -> unauthentifizierte, fehler-basierte SQL-Injection (\",\"desc_en\":\"Quix (ThemeXpert, Free
AND Pro) up to 6.2.0, incl. the 5.x line: the public AJAX endpoint (option=com_quix, task=ajax, element=joomla-article) calls QuixJoomlaArticleElement::getAjax() with no login\\/token\\/license check; the article id arrives base64-encoded in the data parameter
and is concatenated UNCAST into the DB query in articleExist() -> unauthenticated error-based SQL injection (CVSS 8.7). \",\"default\":1,\"qs\":\"(?=.*option=com_quix)(?=.*task=ajax\\\\b)(?=.*element=joomla-article\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_quix\"},{\"id\":\"joomcck-tags-sqli\",\"label\":\"JoomCCK: unauth. SQL-Injection (Tag-Verwaltung)\",\"label_en\":\"JoomCCK: unauth SQL injection (tag management)\",\"desc\":\"CVE-2026-49048 (JoomCCK 6.x vor 6.4.1): der Front-End-Task tags.save\\/tags.delete (option=com_joomcck) lief OHNE Token-\\/Login-\\/Rechte-Pruefung und schob den Request-Parameter tag (getString) roh - mit Double-Quote-Ausbruch - in ZWEI aufeinanderfolgende SQL-Statements (Existenz-SELECT + UPDATE). Ein anonymer Besucher konnte die Datenbank auslesen und veraendern (stacked\\/error-based SQLi). Blockt jed\",\"desc_en\":\"CVE-2026-49048 (JoomCCK 6.x before 6.4.1): the front-end task tags.save\\/tags.delete (option=com_joomcck) ran with NO token\\/login\\/permission check
and concatenated the request parameter tag (getString) raw - with a double-quote breakout - into TWO consecutive SQL statements (existence SELECT + UPDATE). An anonymous visitor could read
and modify the database (stacked\\/error-based SQLi). Blocks every \",\"default\":1,\"qs\":\"(?=.*option=com_joomcck)(?=.*task=tags\\\\.(?:save|delete))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_joomcck\"},{\"id\":\"traversal-encoded\",\"label\":\"Pfad-Klettern (kodierte Varianten)\",\"label_en\":\"Path traversal (encoded variants)\",\"desc\":\"Erg\\u00e4nzt den Standard-Filter um Umgehungstricks: ....\\/\\/ , doppelte Kodierung (%252e), %c0%ae, %2e%2e%5c.\",\"desc_en\":\"Extends the standard filter with bypass tricks: ....\\/\\/ , double encoding (%252e), %c0%ae, %2e%2e%5c.\",\"default\":1,\"qs\":\"(\\\\.{3,}\\/|%252e|%c0%a[ef]|%2e%2e%5c|\\\\.\\\\.%5c)\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-wrapper-uri\",\"label\":\"PHP-Stream-Wrapper im Pfad\",\"label_en\":\"PHP stream wrapper in the path\",\"desc\":\"Blockiert php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ u. a. direkt im angefragten Pfad.\",\"desc_en\":\"Blocks php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ etc. directly in the requested path.\",\"default\":1,\"qs\":null,\"uri\":\"(?:php|phar|data|expect|glob|zlib|zip):\\/\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"api-config-leak\",\"label\":\"Joomla-API Konfigurations-Leak\",\"label_en\":\"Joomla API configuration leak\",\"desc\":\"CVE-2023-23752: sch\\u00fctzt den Endpunkt \\/api\\/...\\/v1\\/config\\/application auch ohne komplette API-Sperre.\",\"desc_en\":\"CVE-2023-23752: protects the \\/api\\/...\\/v1\\/config\\/application endpoint even without a complete API block.\",\"default\":1,\"qs\":null,\"uri\":\"^api\\/index\\\\.php\\/v[0-9]+\\/config\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-object-injection\",\"label\":\"PHP Object Injection (serialisierte Payload)\",\"label_en\":\"PHP object injection (serialised payload)\",\"desc\":\"Serialisiertes PHP-Objekt in einem Parameter (O:\\/C:<L\\u00e4nge>:) - typischer Einstieg f\\u00fcr Object-Injection\\/POP-Ketten. Kommt in normalen Anfragen nicht vor.\",\"desc_en\":\"Serialised PHP object in a parameter (O:\\/C:<length>:) - typical entry point for object injection\\/POP chains. Does not occur in normal requests.\",\"default\":1,\"qs\":\"(?<![a-z0-9])[oc]:[0-9]{1,4}:\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"stream-wrapper-param\",\"label\":\"PHP-Stream-Wrapper in Parameter\",\"label_en\":\"PHP stream wrapper in a parameter\",\"desc\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ u. a. als Parameterwert - LFI\\/RCE-Vektor. Erg\\u00e4nzt die Pfad-Variante (php-wrapper-uri).\",\"desc_en\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ etc. as a parameter value - LFI\\/RCE vector. Complements the path variant (php-wrapper-uri).\",\"default\":1,\"qs\":\"(php|phar|data|expect|glob|zlib|zip):\\/{2}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"param-traversal\",\"label\":\"Pfad-Klettern im Parameter\",\"label_en\":\"Path traversal in a parameter\",\"desc\":\"Mehrfaches ..\\/ als Parameterwert - generisches Directory-Traversal\\/LFI in beliebigen Komponenten.\",\"desc_en\":\"Repeated ..\\/ as a parameter value - generic directory traversal\\/LFI in any component.\",\"default\":1,\"qs\":\"=(\\\\.\\\\.\\/){2,}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null}],\"vuln_extensions\":[{\"element\":\"nrframework\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Novarain \\/ Tassos Framework\",\"below\":\"6.0.38\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21627: unauthentifizierte PHP-Einbindung via com_ajax. Auf 6.0.38 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21627: unauthenticated PHP inclusion via com_ajax. Update to 6.0.38 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\"},{\"element\":\"astroid\",\"type\":\"library\",\"folder\":\"\",\"name\":\"Astroid Framework\",\"below\":\"3.3.11\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21628: unauthentifizierter Datei-Upload via AJAX-Endpunkt (Dropper in \\/images\\/). Auf 3.3.13 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21628: unauthenticated file upload via AJAX endpoint (dropper in \\/images\\/). Update to 3.3.13 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\"},{\"element\":\"helix3\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix3 (JoomShaper)\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Unauthentifizierter com_ajax-Handler (onAjaxHelix3) ohne Login-\\/Rechtepr\\u00fcfung: Angreifer k\\u00f6nnen Dateien ins aktive Template schreiben oder per Path-Traversal l\\u00f6schen (save\\/remove\\/import). Auf Helix3 3.1.1 oder neuer aktualisieren.\",\"note_en\":\"Unauthenticated com_ajax handler (onAjaxHelix3) with no login or permission check: attackers can write files into the active template or delete files via path traversal (save\\/remove\\/import). Update to Helix3 3.1.1 or newer.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix3\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix3\"},{\"element\":\"helixultimate\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix Ultimate (JoomShaper)\",\"below\":\"2.2.7\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische unauth. L\\u00fccke in ALLEN Versionen < 2.2.7: der com_ajax-Handler onAjaxHelixultimate lief VOR jeder Rechtepr\\u00fcfung - anonym in die Men\\u00fcs schreiben (Stored XSS in den Admin), Path-Traversal-L\\u00f6schen, Open Redirect, Template-Export. Auf 2.2.7 updaten (Plugin UND Template). HTProtects Mini-WAF blockt den Aufruf bereits. NICHT mit Helix3 verwechseln.\",\"note_en\":\"Critical unauth flaw in ALL versions below 2.2.7: the com_ajax handler onAjaxHelixultimate ran before any permission check - anonymous menu writes (stored XSS reaching the admin), path-traversal delete, open redirect, template export. Update to 2.2.7 (plugin
AND template). HTProtect mini-WAF already blocks the call. Not to be confused with Helix3.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix-ultimate\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix-ultimate\"},{\"element\":\"com_baforms\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Balbooa Forms\",\"below\":\"2.4.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver Zero-Day (RCE), ALLE Versionen bis 2.4.0: der Upload-Endpoint form.uploadAttachmentFile pr\\u00fcft weder Login\\/Token noch Dateityp - ein anonymer Angreifer kann eine PHP-Datei hochladen und ausf\\u00fchren. NOCH KEIN Patch. Sofortma\\u00dfnahme: Upload-Formulare depublizieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active zero-day (RCE), ALL versions up to 2.4.0: the upload endpoint form.uploadAttachmentFile checks neither login\\/token nor file type - an anonymous attacker can upload
and run a PHP file. NO patch yet. Interim: unpublish forms with upload fields. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/htprotect.org\\/balbooa-forms\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/balbooa-forms\"},{\"element\":\"com_jce\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JCE Editor\",\"below\":\"2.9.99.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-48907: unauthentifizierter Webshell-Upload (profiles.import + plugin.rpc). Dringend auf JCE 2.9.99.6 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-48907: unauthenticated webshell upload (profiles.import + plugin.rpc). Urgently update to JCE 2.9.99.6 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/jce-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/jce-sicherheitsluecke-joomla\"},{\"element\":\"com_rsfiles\",\"type\":\"component\",\"folder\":\"\",\"name\":\"RSFiles!\",\"below\":\"1.17.12\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver unauthentifizierter Datei-Upload -> RCE, ALLE Versionen bis 1.17.11: der Frontend-Upload (task=rsfiles.upload) pr\\u00fcft weder Login\\/Token noch Dateiendung - ein anonymer Angreifer l\\u00e4dt eine .php nach \\/downloads bzw. \\/briefcase und f\\u00fchrt sie aus. Dringend auf 1.17.12 aktualisieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active unauthenticated file upload -> RCE, ALL versions up to 1.17.11: the front-end upload (task=rsfiles.upload) checks neither login\\/token nor file extension - an anonymous attacker uploads a .php into \\/downloads or \\/briefcase
and executes it. Update to 1.17.12 urgently. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\",\"advisory_en\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\"},{\"element\":\"com_edocman\",\"type\":\"component\",\"folder\":\"\",\"name\":\"EDocman\",\"below\":\"3.9\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (alle Versionen bis 3.8): ein anonymer Besucher schleust ueber einen Filter-Parameter eines oeffentlichen Frontend-Endpunkts SQL in eine ungequotete DB-Abfrage ein und kann die Datenbank auslesen (bis hin zu Zugangsdaten). Der genaue Vektor ist bewusst nicht veroeffentlicht. Dringend auf EDocman 3.9.0 aktualisieren.\",\"note_en\":\"Unauthenticated SQL injection (all versions up to 3.8): an anonymous visitor injects SQL through a filter parameter of a public front-end endpoint into an unquoted DB query
and can read the database (up to credentials). The exact vector is deliberately undisclosed. Update to EDocman 3.9.0 urgently.\",\"advisory\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\",\"advisory_en\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\"},{\"element\":\"com_foranalytics\",\"type\":\"component\",\"folder\":\"\",\"name\":\"4Analytics\",\"below\":\"5.0.2\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Zwei unauthentifizierte Sicherheitsluecken (CVE-2026-57833 + CVE-2026-58077) in ALLEN Versionen vor 5.0.2 - ein anonymer Angreifer braucht keinen Login. Hersteller Weeblr stuft beide als kritisch ein; technische Details sind 7 Tage embargoed. Dringend auf 4Analytics 5.0.2 aktualisieren (laeuft auf Joomla 3-6).\",\"note_en\":\"Two unauthenticated security flaws (CVE-2026-57833 + CVE-2026-58077) in ALL versions before 5.0.2 - an anonymous attacker needs no login. Vendor Weeblr rates both critical; technical details are under a 7-day embargo. Update to 4Analytics 5.0.2 urgently (runs
on Joomla 3-6).\",\"advisory\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\",\"advisory_en\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\"},{\"element\":\"com_quix\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Quix\",\"below\":\"6.2.1\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (Free UND Pro, alle Versionen vor 6.2.1 \\u2013 auch die 5.x-Reihe): ein anonymer Besucher kann die gesamte Datenbank auslesen (CVSS 8.7). HTProtects Mini-WAF blockt den Angriff bereits aktiv. Auf Quix 6.2.1 aktualisieren (Free erh\\u00e4lt 6.2.1 ebenfalls \\u00fcber die Update-Funktion).\",\"note_en\":\"Unauthenticated SQL injection (Free
AND Pro, all versions below 6.2.1 \\u2013 including the 5.x line): an anonymous visitor can read the entire database (CVSS 8.7). HTProtect\'s mini-WAF already actively blocks the attack. Update to Quix 6.2.1 (Free receives 6.2.1 too via the update function).\",\"advisory\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\",\"advisory_en\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\"},{\"element\":\"com_joomcck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JoomCCK\",\"below\":\"6.4.1\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Unauthentifizierte SQL-Injection (CVE-2026-49048, JoomCCK 6.x vor 6.4.1): der Front-End-Task \\u201eTag speichern\\/l\\u00f6schen\\\" pr\\u00fcfte weder Login noch Token und \\u00fcbernahm den Parameter \\u201etag\\\" ungefiltert in zwei SQL-Abfragen - ein anonymer Besucher konnte die Datenbank auslesen und ver\\u00e4ndern. HTProtects Mini-WAF blockt den unautorisierten Gast-Aufruf bereits aktiv. Dringend auf JoomCCK 6.4.1 aktualisi\",\"note_en\":\"Unauthenticated SQL injection (CVE-2026-49048, JoomCCK 6.x before 6.4.1): the front-end \\\"save\\/delete tag\\\" task checked neither login nor token
and took the \\\"tag\\\" parameter unfiltered into two SQL queries - an anonymous visitor could read
and modify the database. HTProtect\'s mini-WAF already actively blocks the unauthorized guest call. Update to JoomCCK 6.4.1 urgently.\",\"advisory\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\",\"advisory_en\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\"},{\"element\":\"com_chronoforms8\",\"type\":\"component\",\"folder\":\"\",\"name\":\"ChronoForms\",\"below\":\"8.0.53\",\"above\":\"8.0.0\",\"severity\":\"high\",\"note\":\"Unauthentifizierte gespeicherte XSS (CVE-2026-58148, ChronoForms 8.x vor 8.0.53): ein anonymer Besucher schleust \\u00fcber ein Formular-Feld JavaScript ein, das ungefiltert gespeichert und sp\\u00e4ter - z. B. beim Ansehen der Einsendungen im Backend - ausgef\\u00fchrt wird, bis hin zur \\u00dcbernahme der Admin-Sitzung (CVSS 8.7). Auf ChronoForms 8.0.53 aktualisieren.\",\"note_en\":\"Unauthenticated stored XSS (CVE-2026-58148, ChronoForms 8.x before 8.0.53): an anonymous visitor injects JavaScript via a form field that is stored unfiltered
and later executed - e.g. when viewing the submissions in the backend - up to takeover of the admin session (CVSS 8.7). Update to ChronoForms 8.0.53.\",\"advisory\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\",\"advisory_en\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\"},{\"element\":\"com_jdownloads\",\"type\":\"component\",\"folder\":\"\",\"name\":\"jDownloads\",\"below\":\"4.1.6\",\"above\":\"4.1.0\",\"severity\":\"high\",\"note\":\"Unauthentifizierte Datei-Upload-L\\u00fccke (jDownloads 4.1.0-4.1.5): eine verwaiste Uploader-Datei (upload-handler.php) pr\\u00fcft weder Login noch Token und l\\u00e4sst einen anonymen Besucher beliebige Dateien - u. a. exe\\/msi\\/Archive - in einen Ordner der Site schreiben; auf manchen Servern bis zur Codeausf\\u00fchrung, sonst Malware-Hosting\\/Speicher-Flutung. HTProtects .htaccess-Schutzschild blockt den direkten \",\"note_en\":\"Unauthenticated file upload flaw (jDownloads 4.1.0-4.1.5): a leftover uploader file (upload-handler.php) checks neither login nor token
and lets an anonymous visitor write arbitrary files - incl. exe\\/msi\\/archives - into a folder
on the site; up to remote code execution
on some servers, otherwise malware hosting \\/ disk flooding. HTProtect\'s .htaccess shield already blocks direct access to the file \",\"advisory\":\"https:\\/\\/www.jdownloads.com\\/index.php\\/news\\/jdownloads-4-1-6-secure-update-released.html\",\"advisory_en\":\"https:\\/\\/www.jdownloads.com\\/index.php\\/news\\/jdownloads-4-1-6-secure-update-released.html\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"10.11.2\",\"above\":\"9.0.0\",\"severity\":\"high\",\"note\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthentifizierte Blind-SQL-Injection - der Autor-Filter filter_created_by (Frontend view=events) floss in skalarer Form ohne Integer-Cast in die Query (a.created_by IN ...); ein anonymer Besucher kann beliebige DB-Tabellen AUSLESEN (nichts \\u00e4ndern). Dringend auf 10.11.2 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthenticated blind SQL injection - the author filter filter_created_by (front-end view=events) flowed uncast (scalar form) into the query (a.created_by IN ...); an anonymous visitor can READ arbitrary DB tables (no writes). Update to 10.11.2 urgently. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"8.19.4\",\"above\":\"8.18.0\",\"severity\":\"high\",\"note\":\"DPCalendar Joomla-3-Linie (8.x), 8.18.0-8.19.3: dieselbe unauth Blind-SQL-Injection \\u00fcber den Autor-Filter filter_created_by (skalar, ohne Integer-Cast, nur lesend). In 8.19.4 (Joomla-3-Fix) behoben. Auf 8.19.4 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar Joomla 3 line (8.x), 8.18.0-8.19.3: same unauth blind SQL injection via the author filter filter_created_by (scalar, no integer cast, read-only). Fixed in 8.19.4 (Joomla 3 fix). Update to 8.19.4. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_phocadownload\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Phoca Download\",\"below\":\"6.1.3\",\"above\":\"6.0.0\",\"severity\":\"high\",\"note\":\"Authentifizierter Datei-Upload -> RCE (Versionen 6.0 bis 6.1.2): ein eingeloggter Nutzer mit Zugriff auf die Upload-Funktion kann eine ausf\\u00fchrbare Datei (z. B. .php) hochladen und ausf\\u00fchren. In 6.1.3 (Security-Release) behoben - auf 6.1.3 oder neuer aktualisieren. HTProtects PHP-Schild verhindert die Ausf\\u00fchrung einer hochgeladenen PHP-Datei in den Upload-Ordnern bereits.\",\"note_en\":\"Authenticated file upload -> RCE (versions 6.0 to 6.1.2): a logged-in user with access to the upload feature can upload
and run an executable file (e.g. .php). Fixed in 6.1.3 (security release) - update to 6.1.3 or newer. The HTProtect PHP shield already prevents execution of an uploaded PHP file in the upload folders.\",\"advisory\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\",\"advisory_en\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\"},{\"element\":\"com_acym\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing 6+\",\"below\":\"10.11.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Neuauflage (6+): CVE-2026-56292 unauthentifizierte SQL-Injection (6.0.0-10.11.0) - ein anonymer Angreifer liest beliebige DB-Tabellen inkl. Passwort-Hashes (CVSS 8.7). \\u00c4ltere L\\u00fccken: CVE-2023-28731 unauth Upload\\/RCE unter 8.3.0, CVE-2026-3614 Rechteausweitung 9.11.0-10.8.1. Dringend auf 10.11.1 aktualisieren.\",\"note_en\":\"AcyMailing new line (6+): CVE-2026-56292 unauthenticated SQL injection (6.0.0-10.11.0) - an anonymous attacker reads arbitrary DB tables incl. password hashes (CVSS 8.7). Older holes: CVE-2023-28731 unauth upload\\/RCE below 8.3.0, CVE-2026-3614 privilege escalation 9.11.0-10.8.1. Update to 10.11.1 urgently.\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_acymailing\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing Classic\",\"below\":\"4.9.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Classic (End-of-Life): \\u00e4ltere Versionen mit kritischen L\\u00fccken - unauthentifizierter Datei-Upload der 3.x-\\u00c4ra (RCE, z. B. 3.9.0) sowie Backend-SQL-Injection CVE-2015-7338 (in 4.9.5 behoben). Auf eine unterst\\u00fctzte AcyMailing-Version migrieren. (Die 5.x-Linie hat keine bekannte sehr kritische L\\u00fccke; CSV-Injection CVE-2018-9107 in 5.9.1-5.9.5 ist niedrig\\/client-seitig.)\",\"note_en\":\"AcyMailing Classic (end-of-life): older versions with critical holes - unauthenticated file upload of the 3.x era (RCE, e.g. 3.9.0)
and backend SQL injection CVE-2015-7338 (fixed in 4.9.5). Migrate to a supported AcyMailing version. (The 5.x line has no known very critical hole; CSV injection CVE-2018-9107 in 5.9.1-5.9.5 is low\\/client-side.)\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_igallery\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Ignite Gallery\",\"below\":\"5.4.1\",\"above\":\"5.0.0\",\"severity\":\"high\",\"note\":\"Ignite Gallery 5.0.0 bis 5.4.0: Stored XSS (hoch) durch fehlendes Output-Escaping beim Hochladen\\/Bearbeiten von Bildern, dazu SSRF (ungefilterte Video-URL) und eine Rechteausweitung beim Download geschuetzter\\/unveroeffentlichter Bilder. Ausnutzbar von Nutzern MIT Upload-\\/Bearbeitungsrecht (Frontend oder Backend). Auf 5.4.1 oder neuer aktualisieren.\",\"note_en\":\"Ignite Gallery 5.0.0 to 5.4.0: stored XSS (high) via missing output escaping when uploading\\/editing images, plus SSRF (unfiltered video URL)
and a privilege escalation when downloading restricted\\/unpublished images. Exploitable by users WITH upload\\/edit permission (frontend or backend). Update to 5.4.1 or newer.\",\"advisory\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\",\"advisory_en\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"4.0.8\",\"above\":\"4.0.0\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939 (4.x-Linie 4.0.0-4.0.7): das Event-Formular (task=submit.submit) pr\\u00fcft nur das CSRF-Token, keine Zugriffsrechte - anonymer Datei-Upload. Voller RCE nur auf Joomla 6 (Core blockt .php nicht mehr); auf Joomla <=5 mildert der Core-Filter, die Zugriffsl\\u00fccke bleibt. Dringend auf 4.0.8 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits.\",\"note_en\":\"CVE-2026-48939 (4.x line 4.0.0-4.0.7): the event form (task=submit.submit) checks only the CSRF token, no access rights - anonymous file upload. Full RCE only
on Joomla 6 (core no longer blocks .php);
on Joomla <=5 the core filter mitigates but the access flaw remains. Update to 4.0.8 urgently. The HTProtect file shield already prevents execution.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"3.9.15\",\"above\":\"3.2.1\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939, 3.x-Linie 3.2.1-3.9.14: dieselbe Zugriffsl\\u00fccke im Event-Formular (task=submit.submit, keine Rechtepr\\u00fcfung, anonymer Datei-Upload). In 3.9.15 (Security-Backport f\\u00fcr Joomla 3) behoben. Dringend auf 3.9.15 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits. (Voller RCE v. a. auf Joomla 6.)\",\"note_en\":\"CVE-2026-48939, 3.x line 3.2.1-3.9.14: same access-control flaw in the event form (task=submit.submit, no permission check, anonymous file upload). Fixed in 3.9.15 (security backport for Joomla 3). Update to 3.9.15 urgently. The HTProtect file shield already prevents execution. (Full RCE mainly
on Joomla 6.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_sppagebuilder\",\"type\":\"component\",\"folder\":\"\",\"name\":\"SP Page Builder\",\"below\":\"6.6.2\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Zero-Day (RCE) bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keine Zugriffs-\\/Login-\\/Token-Pr\\u00fcfung - jeder konnte ohne Login eine beliebige Datei hochladen und ausf\\u00fchren (Remote Code Execution). Wurde aktiv ausgenutzt. Dringend auf 6.6.2 aktualisieren. (HTProtects Mini-WAF blockt den unauthentifizierten Aufruf, das Dateischild verhindert zus\\u00e4tzlich die Ausf\\u00fchrung einer hoc\",\"note_en\":\"Zero-day (RCE) up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login\\/token check - anyone could upload
and execute an arbitrary file without logging in (remote code execution). Actively exploited. Update to 6.6.2 urgently. (HTProtect mini-WAF blocks the unauthenticated call,
and the file shield additionally prevents an uploaded PHP shell
from executing.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.6\",\"above\":\"3.5.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) bis 3.5.10: ein Front-End-Upload-Endpunkt (zum Hinzuf\\u00fcgen von Bildern) pr\\u00fcfte nur das CSRF-Token, aber keine Zugriffsrechte und keinen Dateityp - ein nicht eingeloggter Angreifer konnte eine beliebige Datei (z. B. PHP-Shell) in einen frei w\\u00e4hlbaren Ordner hochladen und ausf\\u00fchren (Remote Code Execution). Dringend auf 3.6.0 aktualisieren. (HTProtects generischer Upload-Sch\",\"note_en\":\"Critical flaw (RCE) up to 3.5.10: a front-end upload endpoint (for adding images) only verified the CSRF token but no access rights
and no file type - an unauthenticated attacker could upload an arbitrary file (e.g. a PHP shell) into a freely chosen folder
and execute it (remote code execution). Update to 3.6.0 urgently. (The HTProtect generic upload protection already blocks the unauthenticated u\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.4.10\",\"above\":\"3.2.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-4-Linie unter 3.4.10: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.4.10 (Backport) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Dateischild verh\",\"note_en\":\"Critical flaw (RCE) in the Joomla 4 line below 3.4.10: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder
and executable. Fixed in 3.4.10 (backport). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents execution.)\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-3-Linie unter 3.1.1: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.1.1 (Backport f\\u00fcr Joomla 3) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Date\",\"note_en\":\"Critical flaw (RCE) in the Joomla 3 line below 3.1.1: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder
and executable. Fixed in 3.1.1 (backport for Joomla 3). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents ex\",\"advisory\":\"\",\"advisory_en\":\"\"}],\"php_min\":\"8.1\",\"fetched\":\"2026-07-18 23:08:16\",\"fetched_ts\":1784408896,\"joomla_latest\":{\"3\":\"3.10.12\",\"4\":\"4.4.14\",\"5\":\"5.4.7\",\"6\":\"6.1.2\"},\"joomla_latest_ts\":1784402624,\"joomla_latest_try\":1784402624},\"htp_malware\":{\"schema\":1,\"version\":\"2026-07-18.184f12\",\"sigs\":[{\"id\":\"backdoor-prepend-sshkey\",\"all\":[\"auto_prepend_file\",\"authorized_keys\"]},{\"id\":\"cred-stealer-ctfaudit\",\"any\":[\"x-ctf-audit\",\"jlib_audit_gid\"]},{\"id\":\"upload-shell-form\",\"all\":[\"move_uploaded_file\",\"check directory permissions\"]},{\"id\":\"sppb-iconfont-shell\",\"any\":[\"sppbwhoami\"]},{\"id\":\"remote-eval-loader\",\"all\":[\"eval(\\\"?>\\\"\"],\"any\":[\"fetchcontentfromurl\",\"file_get_contents(\\\"http\",\"file_get_contents(\'http\"]},{\"id\":\"seo-doorway-slot\",\"any\":[\"slot gacor\",\"situs slot gacor\"]},{\"id\":\"filemanager-backdoor-data\",\"all\":[\"<?php exit;?>{\",\"\\\"groupinfo\\\"\",\"\\\"sizemax\\\"\"]},{\"id\":\"encrypted-eval-openssl\",\"all\":[\"openssl_raw_data\",\"aes-256-cbc\"],\"not\":[\"openssl_decrypt\",\"openssl_encrypt\"]},{\"id\":\"0xnix-split-encrypted\",\"all\":[\"0xnix encrypted code\"]},{\"id\":\"upload-shell-devco1\",\"all\":[\"move_uploaded_file\",\"devco1\"]},{\"id\":\"upload-shell-uname-form\",\"all\":[\"move_uploaded_file\",\"php_uname\",\"multipart\\/form-data\"]},{\"id\":\"hacktool-adminer\",\"all\":[\"adminer_errors\",\"idf_unescape\"]},{\"id\":\"webshell-range-obfuscator\",\"all\":[\"\\\"r\\\".\\\"a\\\".\\\"n\\\".\\\"g\\\".\\\"e\\\"\",\"eval\"]},{\"id\":\"webshell-md5quad-gate\",\"all\":[\"md5(md5(md5(md5(\",\"eval\"]},{\"id\":\"remote-loader-stream-include\",\"any\":[\"include stream_get_meta_data\",\"require stream_get_meta_data\",\"include(stream_get_meta_data\",\"require(stream_get_meta_data\"]},{\"id\":\"webshell-dual-uploader\",\"all\":[\"remote_url\",\"name=\\\"_upl\\\"\",\"name=\\\"_remote\\\"\"]},{\"id\":\"webshell-comment-obfuscator\",\"all\":[\"-*\\/\\/\\/\",\"\\\"~\\\"\"]},{\"id\":\"eval-openssl-shell\",\"label\":\"eval(openssl_decrypt) webshell\",\"all\":[\"eval(openssl_decrypt(\"]},{\"id\":\"dropper-drivergenius-c2\",\"label\":\"Remote-fetch dropper (drivergenius C2)\",\"all\":[\"drivergenius.it.com\"]},{\"id\":\"dropper-backdate-disguise\",\"label\":\"Remote-fetch dropper (mtime-forge + disguise)\",\"all\":[\"getreferencefiletime\",\"generatefilename\"]},{\"id\":\"js-inject-fake-cleaned\",\"label\":\"JS injection w\\/ fake \\\"cleaned\\/safe\\\" comment\",\"all\":[\"artifacts of previous malicious infection\",\"dangerous code has been removed\"]},{\"id\":\"linkforge-seo-injector\",\"label\":\"LinkForge SEO backlink injector\",\"all\":[\"linkforge.cc\"]},{\"id\":\"seo-doorway-cloak\",\"label\":\"SEO cloaking doorway (Thai gambling, fake sitemap)\",\"all\":[\"output_sitemap_page\",\"is_from_google\",\"send_404_and_exit\"]},{\"id\":\"helix-ultimate-xss\",\"label\":\"Helix Ultimate mega-menu XSS campaign\",\"any\":[\"xss.report\",\"_hu_inject\",\"_huinject\",\"sessionstorage._hxd\"]},{\"id\":\"gsocket-c2\",\"label\":\"gsocket reverse-shell C2 marker\",\"any\":[\"gs_args\"]},{\"id\":\"cloak-engine-thiscitze\",\"label\":\"thiscitze SEO cloaking engine\",\"all\":[\"thiscitze\"]}],\"scan_ext\":[],\"ack\":[\"6608daed700e0afc330788b2a272ca8d\",\"67b5f9a00c7aabf34261c715aeeaadba\",\"9812b693256a0c306cc53368559c7a4b\",\"ec96a3bed6681af996fd37f0818cba6b\",\"abfe3b7513994ae6ac2f33129b5f6e7b\",\"fb2e76c5ebafc2b8ea82e0d35d45fa02\",\"2ec54ce00420cd41dfae5abedc9edcb7\",\"02c1a767857c55d31cae7277bc43bac2\",\"573a5e7374be2925911b552d485a28f3\",\"cdf24443c39d943f8750d4a4420e6581\",\"99af93b919c5b6bc14a82382c39010ec\",\"55e704bb88a8f9ab0d756976c527516b\",\"981b4f5e07bf9cd1249d60d659e4ef93\",\"87d978102ed075a8e58074a0d3595c30\",\"85648deb8324a11400ecaebcfd04ae16\",\"323707d28051b4cbf161420f5f1bb499\",\"19104a261abbdffe7cd1713949b286cf\",\"a72013015988ad7d978ce9841a9668dd\",\"a8af9b93d27c774601e1d8a902145bd7\",\"82c8de717e67a620ca503a1a01a7d909\",\"a8192a3cf6279862054cb3092dad82bf\",\"eae8beb708347cfe54bf87506b572f41\",\"5db6f4cdd20dfee86e05110a2276d748\",\"872e97edc1d4247d2ed86d35f468ff88\",\"da9c67c9b7be2d5a7eb9113d76119abc\",\"d0c5a881e845f93a72e1450259de0d33\",\"ea531694f501221b61a324d3754da603\",\"b8333a512d949684c91c9dd907f9cb0c\",\"2c57aea21d161fe5761ffab0abff8228\",\"93117860cd06939707a4ff1797bebb40\",\"7f58961ebcc0db81b16c2d16072fb084\",\"760423f79cedc17e78df95505e93f0c7\",\"d8b0c0f2faf44495f7954fe826720bad\"],\"community\":0,\"fp\":[{\"all\":[\"easycalccheckplus\"],\"only\":[\"rce\"],\"id\":\"ecc-plus-doc-rce\"},{\"all\":[\"phpoffice\\\\phpspreadsheet\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpspreadsheet-lib\"},{\"any\":[\"cp_errordocument\",\"status-reason\"],\"not\":[\"<!--#exec\",\"<?\"],\"only\":[\"shtml\"],\"id\":\"plesk-error-shtml\"},{\"all\":[\"gumlet\",\"data:\\/\\/application\\/octet-stream\"],\"only\":[\"wrapper\"],\"id\":\"gumlet-imageresize-datawrapper\"},{\"all\":[\"data:\\/\\/image\",\"exif_read_data\"],\"only\":[\"wrapper\"],\"id\":\"exif-data-wrapper\"},{\"all\":[\"phpoffice\\\\phpword\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpword-lib\"},{\"all\":[\"box\\\\spout\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"box-spout-lib\"},{\"all\":[\"sarciszewski\\\\phpfuture\"],\"only\":[\"wrapper\"],\"id\":\"php-future-lib\"},{\"all\":[\"baformsmodelform\"],\"only\":[\"feed:upload-shell-uname-form\"],\"id\":\"fp-baforms-model\"},{\"all\":[\"quixnxt\"],\"only\":[\"goto\"],\"id\":\"fp-quix-goto\"},{\"all\":[\"varexporter\"],\"only\":[\"goto\"],\"id\":\"fp-symfony-varexporter-goto\"},{\"all\":[\"valorapps.com\"],\"only\":[\"idxbuild\"],\"id\":\"fp-easyfolderlisting-changelog\"},{\"all\":[\"matomo.org\"],\"only\":[\"rce\"],\"id\":\"fp-matomo-rce\"},{\"all\":[\"namespace tracy\"],\"only\":[\"phtml\"],\"id\":\"fp-tracy-phtml\"},{\"all\":[\"guzzlehttp\",\"requestfsm\"],\"only\":[\"goto\"],\"id\":\"fp-guzzle-requestfsm\"},{\"all\":[\"siteguarding.com\",\"siteguarding_server_ip1\"],\"only\":[\"feed:upload-shell-uname-form\"],\"id\":\"fp-siteguarding-agent\"}],\"seo\":{\"weights\":[],\"keywords\":[],\"sigs\":[]},\"recall\":[],\"fetched\":\"2026-07-19 03:25:40\",\"fetched_ts\":1784424340},\"htp_incidents\":{\".htaccess|changed\":1784287304,\"images\\/.htaccess|changed\":1784287304,\"media\\/.htaccess|changed\":1784288226}}'