Free protection and diagnostics — a sensible place to start
WO Traffic Guard Free responds to specific, known patterns of technical traffic in PrestaShop: absurd resultsPerPage values, looping login URLs, obvious scanners and technical filtering or sorting URLs. The rules are intentionally narrow so that normal store use remains unaffected.
The module works locally, stores lightweight analytics without full IP addresses and can send email alerts when traffic starts looking unusual. Free is not a time-limited or demo edition — it remains free under the MIT licence, including for commercial use.
If the store receives a distributed flood, needs protection before the full PrestaShop bootstrap, or requires route-cost analysis and cart protection, the panel clearly shows which additional layers are available in the Pro edition.
Free remains free and has no time limit. The configuration screen includes a clearly labelled, inactive preview of Pro features — those controls do not save settings or affect customer traffic.
What problems can the Free edition help reduce?
- Absurd resultsPerPage values that can force PrestaShop to generate an extremely heavy product list.
- Looping or external back= parameters in the authentication controller.
- Obvious probes for .env, .git, secret files, GraphQL endpoints and similar technical resources.
- Technical filtering and sorting URLs that should not clutter the search-engine index.
- Sudden spikes in unusual events that are worth noticing before the problem escalates.
- No simple way to see whether the problem comes from logins, scanners, heavy listings or faceted SEO URLs.
What do you get for free?
ResultsPerPage Guard
Redirects invalid and absurdly high resultsPerPage values to a safe limit before the product list is generated.
Authentication Guard
Normalises the back= parameter, removes external targets and untangles looping login URLs.
Hard AUTH loop termination
Obvious authentication loops can end with HTTP 410 without rendering the full login page.
Scanner Guard
Returns HTTP 404 for simple probes targeting .env, .git, secret files and common technical endpoints.
Faceted SEO Guard
Adds noindex,follow to technical filtering and sorting URLs without preventing normal customer navigation.
Lightweight 30-day analytics
Separates event types and shows the current hour, day, 7 days and 30 days without storing full IP addresses.
Intelligent email alerts
Detects thresholds, anomalies against previous days and signals that may need to be moved to a WAF or the Pro protection layer.
Local log and health check
Can store a shortened URL and User-Agent without the IP address and periodically confirm that the protection is operating correctly.
FREE OR PRO?
Free or Pro? Choose the protection that matches the problem
Free is a fully functional first line of protection. Pro adds the layers required for distributed floods, expensive routes and automated attacks that cannot be controlled effectively with a simple per-IP limit.
The inactive Pro options displayed in the Free panel are only a clear preview of the differences between the editions.
WO TRAFFIC GUARD PRO
When bots bypass per-IP limits, Pro takes over
A distributed flood can send one request from each source and still generate hundreds of expensive listings. Pro analyses that pattern, keeps protection active with hysteresis and can stop technical traffic before the store fully starts.
- detection of distributed faceted-search floods
- Early Guard and selected HARD Zero-PHP rules
- Adaptive Guard with SHADOW and CHALLENGE modes
- Resource Providers and new-cart protection
How to start safely
- Back up the store and upload the ZIP through Module Manager without uninstalling the previous version.
- Leave the default narrow rules in place and test sign-in, listings, filters and search.
- Set the notification address and send a test email.
- Observe the analytics and event types for several days.
- If the problem is distributed or still reaches the full PrestaShop bootstrap, compare the Pro edition.
- Do not treat Free as a replacement for security updates, reliable hosting, a WAF or network-level protection.
Privacy and the limits of the Free edition
WO Traffic Guard Free works locally in the store. It does not store full IP addresses in its own traffic log. The update check downloads only the public version manifest and does not send store statistics or customer data.
Important: Free is a lightweight application layer that runs after PrestaShop starts. It does not include Distributed Facet Flood Guard, Early Guard before the full PrestaShop bootstrap, HARD Zero-PHP, Adaptive Route Guard, Resource Providers or new-cart protection. Those features are available in Pro. The module is not an antivirus product or a complete WAF.
Free releases
Version 1.1.2
Oct 10, 2026 · 85 KB
Full Polish and English localisation:
- bilingual configuration panel, alerts and email notifications,
- English interface selected from the PrestaShop back-office language,
- Polish remains available without changing protection rules,
- no changes to saved settings, analytics or privacy behaviour.
Version 1.1.1
Oct 10, 2026 · 42 KB
Free edition refresh:
- professional first-line protection description,
- clear inactive preview of Pro features in the configuration,
- direct Free / Pro comparison,
- no changes to protection rules, privacy or saved settings.
Version 1.1.0
Sep 13, 2026 · 37 KB
Shared core prepared for the Pro edition. Free retains its existing traffic protection, analytics and notifications. The Free package does not include Pro cart protection. Back up the store and test the module on a copy before updating.
Version 1.0.0
Sep 12, 2026 · 29 KB
First stable release: traffic protection, lightweight analytics, intelligent email alerts, health checks and update notifications.
Frequently asked questions
Is WO Traffic Guard Free really free?
Yes. Version 1.1.2 is provided under the MIT licence, including for commercial use, with no time limit.
Why can I see disabled Pro options in the configuration?
They are a clearly labelled preview of the differences between the editions. The controls are intentionally inactive, save nothing and do not affect store protection.
When is it worth moving from Free to Pro?
When traffic is distributed, still reaches the full PrestaShop bootstrap, requires Adaptive Challenge, route-cost measurement, new-cart protection or filtering before PHP.
Does the module block normal customers?
The Free rules are intentionally narrow. Normal sign-in, valid resultsPerPage values and ordinary filtering remain available. Test the module on a store copy before production deployment.
Does the module store visitor IP addresses?
Not in its own Traffic Guard log. Free analytics use event counters. Independent server or hosting logs may follow their own policies.
Does Free replace Cloudflare, ModSecurity or a WAF?
No. It is an additional application layer specialised in known PrestaShop patterns. Hosting security, a WAF and regular security updates remain important.
How do I update the module?
Upload the new ZIP through Module Manager without uninstalling the previous version. Settings, analytics and history are preserved.
Does WO Traffic Guard Free support PrestaShop 9?
Version 1.1.2 is intended for PrestaShop 8.x. PrestaShop 9 is not yet declared officially supported.
Comments
There are no public comments for this product yet.
Sign in to add a comment.