ProvenceFerien - Kinderbecken

FREIZEITPARK

Website der Domaine de Bélézy - www.belezy.com

Joomla!-Debug-Konsole

Sitzung

{
    "__default": {
        "session": {
            "counter": 1,
            "timer": {
                "start": 1784374929,
                "last": 1784374929,
                "now": 1784374929
            },
            "token": "DiVudjmIndekx8yyxGQBQupSUKCOCuBm"
        },
        "registry": {},
        "user": {
            "id": 0,
            "name": null,
            "username": null,
            "email": null,
            "password": null,
            "password_clear": "",
            "block": null,
            "sendEmail": 0,
            "registerDate": null,
            "lastvisitDate": null,
            "activation": null,
            "params": null,
            "groups": [],
            "guest": 1,
            "lastResetTime": null,
            "resetCount": null,
            "requireReset": null,
            "aid": 0
        },
        "plg_system_languagefilter": {
            "language": "de-DE"
        }
    }
}

Profil zum Laufzeitverhalten

Zeit

Speicher

Zeit: 102.60 ms / 102.60 ms Speicher: 1.762 MB / 2.13 MB Application: afterLoad

Zeit: 187.64 ms / 290.24 ms Speicher: 4.648 MB / 6.78 MB Application: afterInitialise

Zeit: 38.66 ms / 328.90 ms Speicher: 0.557 MB / 7.34 MB Application: afterRoute

Zeit: 13.73 ms / 342.63 ms Speicher: 0.305 MB / 7.64 MB Application: beforeRenderComponent com_content

Zeit: 20.70 ms / 363.33 ms Speicher: 0.454 MB / 8.10 MB Application: Before Access::preloadComponents (all components)

Zeit: 1.62 ms / 364.95 ms Speicher: 0.052 MB / 8.15 MB Application: After Access::preloadComponents (all components)

Zeit: 0.04 ms / 364.99 ms Speicher: -0.000 MB / 8.15 MB Application: Before Access::preloadPermissions (com_content)

Zeit: 1.32 ms / 366.31 ms Speicher: 0.117 MB / 8.26 MB Application: After Access::preloadPermissions (com_content)

Zeit: 0.04 ms / 366.35 ms Speicher: -0.001 MB / 8.26 MB Application: Before Access::getAssetRules (id:57 name:com_content.article.11)

Zeit: 1.95 ms / 368.29 ms Speicher: 0.026 MB / 8.29 MB Application: After Access::getAssetRules (id:57 name:com_content.article.11)

Zeit: 108.38 ms / 476.67 ms Speicher: 2.181 MB / 10.47 MB Application: afterRenderComponent com_content

Zeit: 4.76 ms / 481.43 ms Speicher: 0.098 MB / 10.57 MB Application: afterDispatch

Zeit: 17.74 ms / 499.17 ms Speicher: 0.218 MB / 10.79 MB Application: beforeRenderModule mod_menu (FREIZEITPARK)

Zeit: 13.44 ms / 512.61 ms Speicher: 0.111 MB / 10.90 MB Application: afterRenderModule mod_menu (FREIZEITPARK)

Zeit: 0.09 ms / 512.70 ms Speicher: -0.002 MB / 10.89 MB Application: beforeRenderModule mod_menu (Deutsch)

Zeit: 0.50 ms / 513.20 ms Speicher: 0.004 MB / 10.90 MB Application: afterRenderModule mod_menu (Deutsch)

Zeit: 0.04 ms / 513.23 ms Speicher: -0.002 MB / 10.90 MB Application: beforeRenderModule mod_menu (Startseite)

Zeit: 5.97 ms / 519.20 ms Speicher: 0.058 MB / 10.95 MB Application: afterRenderModule mod_menu (Startseite)

Zeit: 0.07 ms / 519.27 ms Speicher: -0.004 MB / 10.95 MB Application: beforeRenderModule mod_languages (SprachAuswahl)

Zeit: 12.88 ms / 532.15 ms Speicher: 0.199 MB / 11.15 MB Application: Before Access::getAssetRules (id:8 name:com_content)

Zeit: 0.07 ms / 532.23 ms Speicher: 0.006 MB / 11.15 MB Application: After Access::getAssetRules (id:8 name:com_content)

Zeit: 10.17 ms / 542.39 ms Speicher: 0.051 MB / 11.21 MB Application: afterRenderModule mod_languages (SprachAuswahl)

Zeit: 5.00 ms / 547.39 ms Speicher: 0.069 MB / 11.28 MB Application: afterRender

Datenbankabfragen gesamt: 99.93 ms

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_session	NULL	const	PRIMARY	PRIMARY	194	const	1	100.00	NULL

#	Aufrufer	Datei und Zeilennummer
16	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
15	JDatabaseDriver->loadResult()	JROOT/libraries/joomla/session/storage/database.php:45
14	JSessionStorageDatabase->read()	Derselbe Aufruf in der Zeile darunter.
13	session_start()	JROOT/libraries/joomla/session/handler/native.php:260
12	JSessionHandlerNative->doSessionStart()	JROOT/libraries/joomla/session/handler/native.php:50
11	JSessionHandlerNative->start()	JROOT/libraries/joomla/session/handler/joomla.php:88
10	JSessionHandlerJoomla->start()	JROOT/libraries/src/Session/Session.php:661
9	Joomla\CMS\Session\Session->_start()	JROOT/libraries/src/Session/Session.php:621
8	Joomla\CMS\Session\Session->start()	JROOT/libraries/src/Session/Session.php:499
7	Joomla\CMS\Session\Session->get()	JROOT/libraries/src/Session/Session.php:456
6	Joomla\CMS\Session\Session->isNew()	JROOT/libraries/src/Application/CMSApplication.php:826
5	Joomla\CMS\Application\CMSApplication->loadSession()	JROOT/libraries/src/Application/CMSApplication.php:136
4	Joomla\CMS\Application\CMSApplication->__construct()	JROOT/libraries/src/Application/SiteApplication.php:66
3	Joomla\CMS\Application\SiteApplication->__construct()	JROOT/libraries/src/Application/CMSApplication.php:386
2	Joomla\CMS\Application\CMSApplication::getInstance()	JROOT/libraries/src/Factory.php:140
1	Joomla\CMS\Factory::getApplication()	JROOT/index.php:46

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_session	NULL	const	PRIMARY	PRIMARY	194	const	1	100.00	Using index

„EXPLAIN“ unmöglich für Abfrage: INSERT INTO `bly_session` (`session_id`,`guest`,`time`,`userid`,`username`,`client_id`) VALUES (X'6f34306131636661763439306a6136696c6236386a37346f3330', 1, 1784374929, 0, '', 0)

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
update	0.06 ms
end	0.00 ms
query end	1.04 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
8	JDatabaseDriverMysqli->execute()	JROOT/libraries/src/Session/MetadataManager.php:116
7	Joomla\CMS\Session\MetadataManager->createRecordIfNonExisting()	JROOT/libraries/src/Application/CMSApplication.php:154
6	Joomla\CMS\Application\CMSApplication->checkSession()	JROOT/libraries/src/Application/CMSApplication.php:828
5	Joomla\CMS\Application\CMSApplication->loadSession()	JROOT/libraries/src/Application/CMSApplication.php:136
4	Joomla\CMS\Application\CMSApplication->__construct()	JROOT/libraries/src/Application/SiteApplication.php:66
3	Joomla\CMS\Application\SiteApplication->__construct()	JROOT/libraries/src/Application/CMSApplication.php:386
2	Joomla\CMS\Application\CMSApplication::getInstance()	JROOT/libraries/src/Factory.php:140
1	Joomla\CMS\Factory::getApplication()	JROOT/index.php:46

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 2.82 ms Nach letzter Abfrage: 9.91 ms Abfragespeichernutzung: 0.131 MB Speichernutzung vor Abfrage: 4.221 MB Zeilen zurückgegeben: 39

SELECT `extension_id` AS `id`,`element` AS `option`,`params`,`enabled`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `state` = 0 
  AND `enabled` = 1

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	extension	extension	82	const	40	1.00	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.12 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.15 ms
end	0.00 ms
query end	0.01 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
12	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
11	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Component/ComponentHelper.php:445
10	Joomla\CMS\Component\ComponentHelper::Joomla\CMS\Component\{closure}()	Derselbe Aufruf in der Zeile darunter.
9	call_user_func_array()	JROOT/libraries/src/Cache/Controller/CallbackController.php:173
8	Joomla\CMS\Cache\Controller\CallbackController->get()	JROOT/libraries/src/Component/ComponentHelper.php:453
7	Joomla\CMS\Component\ComponentHelper::load()	JROOT/libraries/src/Component/ComponentHelper.php:519
6	Joomla\CMS\Component\ComponentHelper::getComponents()	JROOT/libraries/src/Component/ComponentHelper.php:44
5	Joomla\CMS\Component\ComponentHelper::getComponent()	JROOT/libraries/src/Component/ComponentHelper.php:103
4	Joomla\CMS\Component\ComponentHelper::getParams()	JROOT/libraries/src/Application/SiteApplication.php:594
3	Joomla\CMS\Application\SiteApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:212
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.01 ms Nach letzter Abfrage: 9.51 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 4.518 MB Zeilen zurückgegeben: 4

SELECT id, rules

  FROM `bly_viewlevels`

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_viewlevels	NULL	ALL	NULL	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	4	100.00	NULL

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.11 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.01 ms
preparing	0.00 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1506
9	JDatabaseDriver->loadAssocList()	JROOT/libraries/src/Access/Access.php:1063
8	Joomla\CMS\Access\Access::getAuthorisedViewLevels()	JROOT/libraries/src/User/User.php:458
7	Joomla\CMS\User\User->getAuthorisedViewLevels()	JROOT/libraries/src/Plugin/PluginHelper.php:318
6	Joomla\CMS\Plugin\PluginHelper::load()	JROOT/libraries/src/Plugin/PluginHelper.php:87
5	Joomla\CMS\Plugin\PluginHelper::getPlugin()	JROOT/libraries/src/Plugin/PluginHelper.php:129
4	Joomla\CMS\Plugin\PluginHelper::isEnabled()	JROOT/libraries/src/Application/SiteApplication.php:604
3	Joomla\CMS\Application\SiteApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:212
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.13 ms Nach letzter Abfrage: 0.15 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 4.528 MB Zeilen zurückgegeben: 2

SELECT b.id

  FROM bly_usergroups AS a

  LEFT JOIN bly_usergroups AS b 
  ON b.lft <= a.lft 
  AND b.rgt >= a.rgt

  WHERE a.id = 9

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	a	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	NULL
1	SIMPLE	b	NULL	range	idx_usergroup_nested_set_lookup	idx_usergroup_nested_set_lookup	4	NULL	2	100.00	Using where; Using index

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.12 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.01 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.02 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1550
10	JDatabaseDriver->loadColumn()	JROOT/libraries/src/Access/Access.php:980
9	Joomla\CMS\Access\Access::getGroupsByUser()	JROOT/libraries/src/Access/Access.php:1095
8	Joomla\CMS\Access\Access::getAuthorisedViewLevels()	JROOT/libraries/src/User/User.php:458
7	Joomla\CMS\User\User->getAuthorisedViewLevels()	JROOT/libraries/src/Plugin/PluginHelper.php:318
6	Joomla\CMS\Plugin\PluginHelper::load()	JROOT/libraries/src/Plugin/PluginHelper.php:87
5	Joomla\CMS\Plugin\PluginHelper::getPlugin()	JROOT/libraries/src/Plugin/PluginHelper.php:129
4	Joomla\CMS\Plugin\PluginHelper::isEnabled()	JROOT/libraries/src/Application/SiteApplication.php:604
3	Joomla\CMS\Application\SiteApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:212
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.23 ms Nach letzter Abfrage: 0.18 ms Abfragespeichernutzung: 0.022 MB Speichernutzung vor Abfrage: 4.548 MB Zeilen zurückgegeben: 88

SELECT `folder` AS `type`,`element` AS `name`,`params` AS `params`,`extension_id` AS `id`

  FROM bly_extensions

  WHERE enabled = 1 
  AND type = 'plugin' 
  AND state IN (0,1) 
  AND access IN (1,1,5)

  ORDER BY ordering

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	extension	extension	82	const	111	0.60	Using index condition; Using where; filesort wurde genutzt

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.02 ms
preparing	0.01 ms
Sorting result	0.01 ms
executing	0.00 ms
Sending data	0.00 ms
Creating sort index	0.27 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
10	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Plugin/PluginHelper.php:351
9	Joomla\CMS\Plugin\PluginHelper::Joomla\CMS\Plugin\{closure}()	Derselbe Aufruf in der Zeile darunter.
8	call_user_func_array()	JROOT/libraries/src/Cache/Controller/CallbackController.php:173
7	Joomla\CMS\Cache\Controller\CallbackController->get()	JROOT/libraries/src/Plugin/PluginHelper.php:356
6	Joomla\CMS\Plugin\PluginHelper::load()	JROOT/libraries/src/Plugin/PluginHelper.php:87
5	Joomla\CMS\Plugin\PluginHelper::getPlugin()	JROOT/libraries/src/Plugin/PluginHelper.php:129
4	Joomla\CMS\Plugin\PluginHelper::isEnabled()	JROOT/libraries/src/Application/SiteApplication.php:604
3	Joomla\CMS\Application\SiteApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:212
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.21 ms Nach letzter Abfrage: 39.42 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 6.018 MB Zeilen zurückgegeben: 3

SELECT *

  FROM bly_languages

  WHERE published=1

  ORDER BY ordering ASC

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_languages	NULL	ALL	NULL	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	4	25.00	Using where; filesort wurde genutzt

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.11 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.01 ms
preparing	0.01 ms
Sorting result	0.00 ms
executing	0.00 ms
Sending data	0.01 ms
Creating sort index	0.03 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
9	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Language/LanguageHelper.php:150
8	Joomla\CMS\Language\LanguageHelper::getLanguages()	JROOT/plugins/system/languagefilter/languagefilter.php:96
7	PlgSystemLanguageFilter->__construct()	JROOT/libraries/src/Plugin/PluginHelper.php:280
6	Joomla\CMS\Plugin\PluginHelper::import()	JROOT/libraries/src/Plugin/PluginHelper.php:182
5	Joomla\CMS\Plugin\PluginHelper::importPlugin()	JROOT/libraries/src/Application/CMSApplication.php:667
4	Joomla\CMS\Application\CMSApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:686
3	Joomla\CMS\Application\SiteApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:212
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.92 ms Nach letzter Abfrage: 0.23 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 6.027 MB Zeilen zurückgegeben: 8

SELECT `element`,`name`,`client_id`,`extension_id`

  FROM `bly_extensions`

  WHERE `type` = 'language' 
  AND `state` = 0 
  AND `enabled` = 1

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	extension	extension	82	const	8	1.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.02 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.03 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
9	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Language/LanguageHelper.php:209
8	Joomla\CMS\Language\LanguageHelper::getInstalledLanguages()	JROOT/plugins/system/languagefilter/languagefilter.php:110
7	PlgSystemLanguageFilter->__construct()	JROOT/libraries/src/Plugin/PluginHelper.php:280
6	Joomla\CMS\Plugin\PluginHelper::import()	JROOT/libraries/src/Plugin/PluginHelper.php:182
5	Joomla\CMS\Plugin\PluginHelper::importPlugin()	JROOT/libraries/src/Application/CMSApplication.php:667
4	Joomla\CMS\Application\CMSApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:686
3	Joomla\CMS\Application\SiteApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:212
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.65 ms Nach letzter Abfrage: 26.10 ms Abfragespeichernutzung: 0.089 MB Speichernutzung vor Abfrage: 6.501 MB Zeilen zurückgegeben: 74

SELECT m.id, m.menutype, m.title, m.alias, m.note, m.path AS route, m.link, m.type, m.level, m.language,`m`.`browserNav`, m.access, m.params, m.home, m.img, m.template_style_id, m.component_id, m.parent_id,e.element as component

  FROM bly_menu AS m

  LEFT JOIN bly_extensions AS e 
  ON m.component_id = e.extension_id

  WHERE m.published = 1 
  AND m.parent_id > 0 
  AND m.client_id = 0

  ORDER BY m.lft

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	m	NULL	range	idx_client_id_parent_id_alias_language	idx_client_id_parent_id_alias_language	5	NULL	169	10.00	Using index condition; Using where; filesort wurde genutzt
1	SIMPLE	e	NULL	eq_ref	PRIMARY	PRIMARY	4	DB3826637.m.component_id	1	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.03 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.11 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.01 ms
Sorting result	0.00 ms
executing	0.00 ms
Sending data	0.01 ms
Creating sort index	0.48 ms
end	0.01 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
23	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
22	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Menu/SiteMenu.php:93
21	Joomla\CMS\Menu\SiteMenu->Joomla\CMS\Menu\{closure}()	Derselbe Aufruf in der Zeile darunter.
20	call_user_func_array()	JROOT/libraries/src/Cache/Controller/CallbackController.php:173
19	Joomla\CMS\Cache\Controller\CallbackController->get()	JROOT/libraries/src/Menu/SiteMenu.php:101
18	Joomla\CMS\Menu\SiteMenu->load()	JROOT/libraries/src/Menu/AbstractMenu.php:78
17	Joomla\CMS\Menu\AbstractMenu->__construct()	JROOT/libraries/src/Menu/SiteMenu.php:62
16	Joomla\CMS\Menu\SiteMenu->__construct()	JROOT/libraries/src/Menu/AbstractMenu.php:142
15	Joomla\CMS\Menu\AbstractMenu::getInstance()	JROOT/libraries/src/Application/CMSApplication.php:417
14	Joomla\CMS\Application\CMSApplication->getMenu()	JROOT/libraries/src/Application/SiteApplication.php:275
13	Joomla\CMS\Application\SiteApplication->getMenu()	JROOT/libraries/src/Router/SiteRouter.php:65
12	Joomla\CMS\Router\SiteRouter->__construct()	JROOT/libraries/src/Router/Router.php:189
11	Joomla\CMS\Router\Router::getInstance()	JROOT/libraries/src/Application/CMSApplication.php:533
10	Joomla\CMS\Application\CMSApplication::getRouter()	JROOT/libraries/src/Application/SiteApplication.php:403
9	Joomla\CMS\Application\SiteApplication::getRouter()	JROOT/plugins/system/languagefilter/languagefilter.php:145
8	PlgSystemLanguageFilter->onAfterInitialise()	JROOT/libraries/joomla/event/event.php:70
7	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
6	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
5	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:668
4	Joomla\CMS\Application\CMSApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:686
3	Joomla\CMS\Application\SiteApplication->initialiseApp()	JROOT/libraries/src/Application/SiteApplication.php:212
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.94 ms Nach letzter Abfrage: 44.57 ms Abfragespeichernutzung: 0.022 MB Speichernutzung vor Abfrage: 7.434 MB Zeilen zurückgegeben: 1

SELECT `extension_id` AS `id`,`element` AS `option`,`params`,`enabled`

  FROM `bly_extensions`

  WHERE `type` = 'library' 
  AND `element` = 'joomla'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	extension	484	const,const	1	100.00	NULL

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
15	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1662
14	JDatabaseDriver->loadObject()	JROOT/libraries/src/Helper/LibraryHelper.php:167
13	Joomla\CMS\Helper\LibraryHelper::Joomla\CMS\Helper\{closure}()	Derselbe Aufruf in der Zeile darunter.
12	call_user_func_array()	JROOT/libraries/src/Cache/Controller/CallbackController.php:173
11	Joomla\CMS\Cache\Controller\CallbackController->get()	JROOT/libraries/src/Helper/LibraryHelper.php:175
10	Joomla\CMS\Helper\LibraryHelper::loadLibrary()	JROOT/libraries/src/Helper/LibraryHelper.php:43
9	Joomla\CMS\Helper\LibraryHelper::getLibrary()	JROOT/libraries/src/Helper/LibraryHelper.php:90
8	Joomla\CMS\Helper\LibraryHelper::getParams()	JROOT/libraries/src/Version.php:321
7	Joomla\CMS\Version->getMediaVersion()	JROOT/libraries/src/Factory.php:778
6	Joomla\CMS\Factory::createDocument()	JROOT/libraries/src/Factory.php:234
5	Joomla\CMS\Factory::getDocument()	JROOT/libraries/src/Application/WebApplication.php:1137
4	Joomla\CMS\Application\WebApplication->loadDocument()	JROOT/libraries/src/Application/SiteApplication.php:133
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.91 ms Nach letzter Abfrage: 0.20 ms Abfragespeichernutzung: 0.004 MB Speichernutzung vor Abfrage: 7.424 MB

UPDATE `bly_extensions`

  SET `params` = '{\"mediaversion\":\"be08a26c60c6c2f28c01f4c79f610bdf\"}'

  WHERE `type` = 'library' 
  AND `element` = 'joomla'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	UPDATE	bly_extensions	NULL	range	element_clientid,element_folder_clientid,extension	extension	484	const,const	1	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.02 ms
updating	0.04 ms
end	0.01 ms
query end	0.93 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/src/Helper/LibraryHelper.php:117
9	Joomla\CMS\Helper\LibraryHelper::saveParams()	JROOT/libraries/src/Version.php:372
8	Joomla\CMS\Version->setMediaVersion()	JROOT/libraries/src/Version.php:331
7	Joomla\CMS\Version->getMediaVersion()	JROOT/libraries/src/Factory.php:778
6	Joomla\CMS\Factory::createDocument()	JROOT/libraries/src/Factory.php:234
5	Joomla\CMS\Factory::getDocument()	JROOT/libraries/src/Application/WebApplication.php:1137
4	Joomla\CMS\Application\WebApplication->loadDocument()	JROOT/libraries/src/Application/SiteApplication.php:133
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.14 ms Nach letzter Abfrage: 4.94 ms Abfragespeichernutzung: 0.018 MB Speichernutzung vor Abfrage: 7.610 MB Zeilen zurückgegeben: 3

SELECT id, home, template, s.params

  FROM bly_template_styles as s

  LEFT JOIN bly_extensions as e 
  ON e.element=s.template 
  AND e.type='template' 
  AND e.client_id=s.client_id

  WHERE s.client_id = 0 
  AND e.enabled = 1

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	e	NULL	ref	element_clientid,element_folder_clientid,extension	extension	82	const	7	1.00	Using index condition; Using where
1	SIMPLE	s	NULL	ref	idx_template,idx_client_id,idx_client_id_home	idx_template	202	DB3826637.e.element	1	83.33	Using index condition; Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.11 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.04 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.04 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
6	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
5	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Application/SiteApplication.php:486
4	Joomla\CMS\Application\SiteApplication->getTemplate()	JROOT/libraries/src/Application/SiteApplication.php:168
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.35 ms Nach letzter Abfrage: 24.11 ms Abfragespeichernutzung: 0.024 MB Speichernutzung vor Abfrage: 8.099 MB Zeilen zurückgegeben: 39

SELECT `id`,`name`,`rules`,`parent_id`

  FROM `bly_assets`

  WHERE `name` IN ('root.1','com_actionlogs','com_admin','com_ajax','com_akeeba','com_associations','com_banners','com_cache','com_categories','com_checkin','com_config','com_contact','com_content','com_contenthistory','com_cpanel','com_fields','com_finder','com_htprotect','com_installer','com_jce','com_joomlaupdate','com_languages','com_login','com_mailto','com_media','com_menus','com_messages','com_modules','com_newsfeeds','com_phocagallery','com_plugins','com_postinstall','com_privacy','com_redirect','com_search','com_tags','com_templates','com_users','com_weblinks','com_wrapper')

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_assets	NULL	ALL	idx_asset_name	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	184	21.74	Using where

Profil (Profile)

Status	Duration
starting	0.03 ms
checking permissions	0.00 ms
Opening tables	0.15 ms
init	0.05 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.05 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.15 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.03 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
18	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
17	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Access/Access.php:429
16	Joomla\CMS\Access\Access::preloadComponents()	JROOT/libraries/src/Access/Access.php:213
15	Joomla\CMS\Access\Access::preload()	JROOT/libraries/src/Access/Access.php:531
14	Joomla\CMS\Access\Access::getAssetRules()	JROOT/libraries/src/Access/Access.php:183
13	Joomla\CMS\Access\Access::check()	JROOT/libraries/src/User/User.php:398
12	Joomla\CMS\User\User->authorise()	JROOT/components/com_content/models/article.php:58
11	ContentModelArticle->populateState()	JROOT/libraries/src/MVC/Model/BaseDatabaseModel.php:457
10	Joomla\CMS\MVC\Model\BaseDatabaseModel->getState()	JROOT/components/com_content/models/article.php:251
9	ContentModelArticle->hit()	JROOT/components/com_content/controller.php:113
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.03 ms Nach letzter Abfrage: 0.24 ms Abfragespeichernutzung: 0.041 MB Speichernutzung vor Abfrage: 8.148 MB Zeilen zurückgegeben: 118

SELECT `id`,`name`,`rules`,`parent_id`

  FROM `bly_assets`

  WHERE `name` LIKE 'com_content.%' OR `name` = 'com_content' OR `parent_id` = 0

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_assets	NULL	ALL	idx_asset_name,idx_parent_id	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	184	22.16	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.07 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
18	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
17	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Access/Access.php:359
16	Joomla\CMS\Access\Access::preloadPermissions()	JROOT/libraries/src/Access/Access.php:226
15	Joomla\CMS\Access\Access::preload()	JROOT/libraries/src/Access/Access.php:540
14	Joomla\CMS\Access\Access::getAssetRules()	JROOT/libraries/src/Access/Access.php:183
13	Joomla\CMS\Access\Access::check()	JROOT/libraries/src/User/User.php:398
12	Joomla\CMS\User\User->authorise()	JROOT/components/com_content/models/article.php:58
11	ContentModelArticle->populateState()	JROOT/libraries/src/MVC/Model/BaseDatabaseModel.php:457
10	Joomla\CMS\MVC\Model\BaseDatabaseModel->getState()	JROOT/components/com_content/models/article.php:251
9	ContentModelArticle->hit()	JROOT/components/com_content/controller.php:113
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.55 ms Nach letzter Abfrage: 4.71 ms Abfragespeichernutzung: 0.023 MB Speichernutzung vor Abfrage: 8.329 MB Zeilen zurückgegeben: 31

SHOW FULL COLUMNS 
  FROM `bly_content`

Explain

„EXPLAIN“ unmöglich für Abfrage: SHOW FULL COLUMNS FROM `bly_content`

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.25 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.01 ms
preparing	0.00 ms
executing	0.01 ms
Opening tables	0.11 ms
checking permissions	0.02 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.00 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.00 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.00 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.00 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
checking permissions	0.01 ms
Sending data	0.03 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
removing tmp table	0.07 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
16	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
15	JDatabaseDriver->loadObjectList()	JROOT/libraries/joomla/database/driver/mysqli.php:448
14	JDatabaseDriverMysqli->getTableColumns()	JROOT/libraries/src/Table/Table.php:261
13	Joomla\CMS\Table\Table->getFields()	JROOT/libraries/src/Table/Table.php:180
12	Joomla\CMS\Table\Table->__construct()	JROOT/libraries/src/Table/Content.php:39
11	Joomla\CMS\Table\Content->__construct()	JROOT/libraries/src/Table/Table.php:328
10	Joomla\CMS\Table\Table::getInstance()	JROOT/components/com_content/models/article.php:253
9	ContentModelArticle->hit()	JROOT/components/com_content/controller.php:113
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 2.93 ms Nach letzter Abfrage: 12.08 ms Abfragespeichernutzung: 0.005 MB Speichernutzung vor Abfrage: 8.561 MB

UPDATE bly_content

  SET `hits` = (`hits` + 1)

  WHERE `id` = '11'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	UPDATE	bly_content	NULL	range	PRIMARY	PRIMARY	4	const	1	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.02 ms
updating	0.04 ms
end	0.01 ms
query end	2.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/src/Table/Table.php:1264
10	Joomla\CMS\Table\Table->hit()	JROOT/components/com_content/models/article.php:254
9	ContentModelArticle->hit()	JROOT/components/com_content/controller.php:113
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.35 ms Nach letzter Abfrage: 6.31 ms Abfragespeichernutzung: 0.022 MB Speichernutzung vor Abfrage: 8.682 MB Zeilen zurückgegeben: 1

SELECT a.id, a.asset_id, a.title, a.alias, a.introtext, a.fulltext, a.state, a.catid, a.created, a.created_by, a.created_by_alias, 
  CASE WHEN a.modified = '0000-00-00 00:00:00' THEN a.created ELSE a.modified END as modified, a.modified_by, a.checked_out, a.checked_out_time, a.publish_up, a.publish_down, a.images, a.urls, a.attribs, a.version, a.ordering, a.metakey, a.metadesc, a.access, a.hits, a.metadata, a.featured, a.language, a.xreference,c.title AS category_title, c.alias AS category_alias, c.access AS category_access,u.name AS author,parent.title as parent_title, parent.id as parent_id, parent.path as parent_route, parent.alias as parent_alias,ROUND(v.rating_sum / v.rating_count, 0) AS rating, v.rating_count as rating_count

  FROM bly_content AS a

  INNER JOIN bly_categories AS c 
  on c.id = a.catid

  LEFT JOIN bly_users AS u 
  on u.id = a.created_by

  LEFT JOIN bly_categories as parent 
  ON parent.id = c.parent_id

  LEFT JOIN bly_content_rating AS v 
  ON a.id = v.content_id

  WHERE a.id = 11 
  AND c.published > 0 
  AND a.language in ('de-DE','*') 
  AND (a.publish_up = '0000-00-00 00:00:00' OR a.publish_up <= '2026-07-18 11:42:09') 
  AND (a.publish_down = '0000-00-00 00:00:00' OR a.publish_down >= '2026-07-18 11:42:09') 
  AND (a.state = 1 OR a.state =2)

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	a	NULL	const	PRIMARY,idx_state,idx_catid,idx_language	PRIMARY	4	const	1	100.00	NULL
1	SIMPLE	c	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	NULL
1	SIMPLE	u	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	NULL
1	SIMPLE	parent	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	NULL
1	SIMPLE	v	NULL	const	PRIMARY	PRIMARY	4	const	0	0.00	unique row not found

Profil (Profile)

Status	Duration
starting	0.07 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.20 ms
init	0.03 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.05 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.02 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
14	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1662
13	JDatabaseDriver->loadObject()	JROOT/components/com_content/models/article.php:151
12	ContentModelArticle->getItem()	JROOT/libraries/src/MVC/View/HtmlView.php:425
11	Joomla\CMS\MVC\View\HtmlView->get()	JROOT/components/com_content/views/article/view.html.php:42
10	ContentViewArticle->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:664
9	Joomla\CMS\MVC\Controller\BaseController->display()	JROOT/components/com_content/controller.php:118
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.49 ms Nach letzter Abfrage: 6.46 ms Abfragespeichernutzung: 0.021 MB Speichernutzung vor Abfrage: 8.864 MB Zeilen zurückgegeben: 0

SELECT `m`.`tag_id`,`t`.*

  FROM `bly_contentitem_tag_map` AS m 

  INNER JOIN `bly_tags` AS t  
  ON `m`.`tag_id` = `t`.`id`

  WHERE `m`.`type_alias` = 'com_content.article' 
  AND `m`.`content_item_id` = 11 
  AND `t`.`published` = 1 
  AND t.access IN (1,1,5)

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	m	NULL	ALL	idx_tag_type	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	1	100.00	Using where
1	SIMPLE	t	NULL	eq_ref	PRIMARY,tag_idx,idx_access	PRIMARY	4	DB3826637.m.tag_id	1	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.03 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.43 ms
init	0.02 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
13	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
12	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Helper/TagsHelper.php:454
11	Joomla\CMS\Helper\TagsHelper->getItemTags()	JROOT/components/com_content/views/article/view.html.php:184
10	ContentViewArticle->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:664
9	Joomla\CMS\MVC\Controller\BaseController->display()	JROOT/components/com_content/controller.php:118
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.18 ms Nach letzter Abfrage: 27.94 ms Abfragespeichernutzung: 0.024 MB Speichernutzung vor Abfrage: 9.342 MB Zeilen zurückgegeben: 4

SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time,
				c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level,
				c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id,
				c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version, 
  CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug

  FROM `bly_categories` AS `s`

  INNER JOIN `bly_categories` AS `c` 
  ON (s.lft < c.lft 
  AND c.lft < s.rgt 
  AND c.language IN ('de-DE','*')) OR (c.lft <= s.lft 
  AND s.rgt <= c.rgt)

  WHERE (c.extension='com_content' OR c.extension='system') 
  AND c.access IN (1,1,5) 
  AND c.published = 1 
  AND s.id = 16

  ORDER BY c.lft

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	s	NULL	const	PRIMARY,idx_left_right	PRIMARY	4	const	1	100.00	filesort wurde genutzt
1	SIMPLE	c	NULL	ALL	cat_idx,idx_access,idx_left_right,idx_language	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	45	14.52	Using where

Profil (Profile)

Status	Duration
starting	0.05 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.03 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.09 ms
preparing	0.01 ms
Sorting result	0.00 ms
executing	0.00 ms
Sending data	0.01 ms
Creating sort index	0.06 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
21	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
20	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Categories/Categories.php:324
19	Joomla\CMS\Categories\Categories->_load()	JROOT/libraries/src/Categories/Categories.php:184
18	Joomla\CMS\Categories\Categories->get()	JROOT/administrator/components/com_fields/models/fields.php:203
17	FieldsModelFields->getListQuery()	JROOT/libraries/src/MVC/Model/ListModel.php:140
16	Joomla\CMS\MVC\Model\ListModel->_getListQuery()	JROOT/libraries/src/MVC/Model/ListModel.php:194
15	Joomla\CMS\MVC\Model\ListModel->getItems()	JROOT/administrator/components/com_fields/helpers/fields.php:136
14	FieldsHelper::getFields()	JROOT/plugins/system/fields/fields.php:495
13	PlgSystemFields->onContentPrepare()	JROOT/libraries/joomla/event/event.php:70
12	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
11	JEventDispatcher->trigger()	JROOT/components/com_content/views/article/view.html.php:193
10	ContentViewArticle->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:664
9	Joomla\CMS\MVC\Controller\BaseController->display()	JROOT/components/com_content/controller.php:118
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.60 ms Nach letzter Abfrage: 1.29 ms Abfragespeichernutzung: 0.024 MB Speichernutzung vor Abfrage: 9.395 MB Zeilen zurückgegeben: 0

SELECT DISTINCT a.id, a.title, a.name, a.checked_out, a.checked_out_time, a.note, a.state, a.access, a.created_time, a.created_user_id, a.ordering, a.language, a.fieldparams, a.params, a.type, a.default_value, a.context, a.group_id, a.label, a.description, a.required,l.title AS language_title, l.image AS language_image,uc.name AS editor,ag.title AS access_level,ua.name AS author_name,g.title AS group_title, g.access as group_access, g.state AS group_state, g.note as group_note

  FROM bly_fields AS a

  LEFT JOIN `bly_languages` AS l 
  ON l.lang_code = a.language

  LEFT JOIN bly_users AS uc 
  ON uc.id=a.checked_out

  LEFT JOIN bly_viewlevels AS ag 
  ON ag.id = a.access

  LEFT JOIN bly_users AS ua 
  ON ua.id = a.created_user_id

  LEFT JOIN bly_fields_groups AS g 
  ON g.id = a.group_id

  LEFT JOIN `bly_fields_categories` AS fc 
  ON fc.field_id = a.id

  WHERE a.context = 'com_content.article' 
  AND (fc.category_id IS NULL OR fc.category_id IN (16,0,8,19)) 
  AND a.access IN (1,1,5) 
  AND (a.group_id = 0 OR g.access IN (1,1,5)) 
  AND a.state = 1 
  AND (a.group_id = 0 OR g.state = 1) 
  AND a.language in ('*','de-DE')

  ORDER BY a.ordering ASC

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	a	NULL	ref	idx_state,idx_access,idx_language,idx_context	idx_state	1	const	1	100.00	Using index condition; Using where; Using temporary; filesort wurde genutzt
1	SIMPLE	l	NULL	eq_ref	idx_langcode	idx_langcode	28	DB3826637.a.language	1	100.00	Using where
1	SIMPLE	uc	NULL	eq_ref	PRIMARY	PRIMARY	4	DB3826637.a.checked_out	1	100.00	NULL
1	SIMPLE	ag	NULL	eq_ref	PRIMARY	PRIMARY	4	DB3826637.a.access	1	100.00	Using where
1	SIMPLE	ua	NULL	eq_ref	PRIMARY	PRIMARY	4	DB3826637.a.created_user_id	1	100.00	Using where
1	SIMPLE	g	NULL	eq_ref	PRIMARY	PRIMARY	4	DB3826637.a.group_id	1	100.00	Using where
1	SIMPLE	fc	NULL	ref	PRIMARY	PRIMARY	4	DB3826637.a.id	1	100.00	Using where; Using index; Distinct

Profil (Profile)

Status	Duration
starting	0.05 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.23 ms
init	0.03 ms
System lock	0.01 ms
optimizing	0.01 ms
statistics	0.08 ms
preparing	0.02 ms
Creating tmp table	0.03 ms
Sorting result	0.00 ms
executing	0.00 ms
Sending data	0.19 ms
Creating sort index	0.01 ms
end	0.00 ms
query end	0.00 ms
removing tmp table	0.05 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
19	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
18	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/MVC/Model/BaseDatabaseModel.php:322
17	Joomla\CMS\MVC\Model\BaseDatabaseModel->_getList()	JROOT/administrator/components/com_fields/models/fields.php:333
16	FieldsModelFields->_getList()	JROOT/libraries/src/MVC/Model/ListModel.php:194
15	Joomla\CMS\MVC\Model\ListModel->getItems()	JROOT/administrator/components/com_fields/helpers/fields.php:136
14	FieldsHelper::getFields()	JROOT/plugins/system/fields/fields.php:495
13	PlgSystemFields->onContentPrepare()	JROOT/libraries/joomla/event/event.php:70
12	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
11	JEventDispatcher->trigger()	JROOT/components/com_content/views/article/view.html.php:193
10	ContentViewArticle->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:664
9	Joomla\CMS\MVC\Controller\BaseController->display()	JROOT/components/com_content/controller.php:118
8	ContentController->display()	JROOT/libraries/src/MVC/Controller/BaseController.php:702
7	Joomla\CMS\MVC\Controller\BaseController->execute()	JROOT/components/com_content/content.php:43
6	require_once JROOT/components/com_content/content.php	JROOT/libraries/src/Component/ComponentHelper.php:402
5	Joomla\CMS\Component\ComponentHelper::executeComponent()	JROOT/libraries/src/Component/ComponentHelper.php:377
4	Joomla\CMS\Component\ComponentHelper::renderComponent()	JROOT/libraries/src/Application/SiteApplication.php:194
3	Joomla\CMS\Application\SiteApplication->dispatch()	JROOT/libraries/src/Application/SiteApplication.php:233
2	Joomla\CMS\Application\SiteApplication->doExecute()	JROOT/libraries/src/Application/CMSApplication.php:225
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.54 ms Nach letzter Abfrage: 56.79 ms Abfragespeichernutzung: 0.022 MB Speichernutzung vor Abfrage: 10.768 MB Zeilen zurückgegeben: 4

SELECT m.id, m.title, m.module, m.position, m.content, m.showtitle, m.params, mm.menuid

  FROM bly_modules AS m

  LEFT JOIN bly_modules_menu AS mm 
  ON mm.moduleid = m.id

  LEFT JOIN bly_extensions AS e 
  ON e.element = m.module 
  AND e.client_id = m.client_id

  WHERE m.published = 1 
  AND e.enabled = 1 
  AND (m.publish_up = '0000-00-00 00:00:00' OR m.publish_up <= '2026-07-18 11:42:09') 
  AND (m.publish_down = '0000-00-00 00:00:00' OR m.publish_down >= '2026-07-18 11:42:09') 
  AND m.access IN (1,1,5) 
  AND m.client_id = 0 
  AND (mm.menuid = 124 OR mm.menuid <= 0) 
  AND m.language IN ('de-DE','*')

  ORDER BY m.position, m.ordering

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	m	NULL	range	PRIMARY,published,newsfeeds,idx_language	published	5	NULL	16	2.70	Using index condition; Using where; filesort wurde genutzt
1	SIMPLE	e	NULL	ref	element_clientid,element_folder_clientid	element_clientid	403	DB3826637.m.module,const	1	10.00	Using index condition; Using where
1	SIMPLE	mm	NULL	ref	PRIMARY	PRIMARY	4	DB3826637.m.id	8	40.00	Using where; Using index

Profil (Profile)

Status	Duration
starting	0.06 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.01 ms
Opening tables	0.18 ms
init	0.03 ms
System lock	0.01 ms
optimizing	0.01 ms
statistics	0.06 ms
preparing	0.02 ms
Sorting result	0.00 ms
executing	0.00 ms
Sending data	0.01 ms
Creating sort index	0.12 ms
end	0.00 ms
query end	0.01 ms
closing tables	0.01 ms
freeing items	0.03 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
16	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
15	JDatabaseDriver->loadObjectList()	Derselbe Aufruf in der Zeile darunter.
14	call_user_func_array()	JROOT/libraries/src/Cache/Controller/CallbackController.php:173
13	Joomla\CMS\Cache\Controller\CallbackController->get()	JROOT/libraries/src/Helper/ModuleHelper.php:441
12	Joomla\CMS\Helper\ModuleHelper::getModuleList()	JROOT/libraries/src/Helper/ModuleHelper.php:371
11	Joomla\CMS\Helper\ModuleHelper::load()	JROOT/libraries/src/Helper/ModuleHelper.php:87
10	Joomla\CMS\Helper\ModuleHelper::getModules()	JROOT/libraries/src/Document/HtmlDocument.php:601
9	Joomla\CMS\Document\HtmlDocument->countModules()	JROOT/templates/Belezy42/library/Artx/Page.php:46
8	ArtxPage->containsModules()	JROOT/templates/Belezy42/index.php:96
7	require JROOT/templates/Belezy42/index.php	JROOT/libraries/src/Document/HtmlDocument.php:678
6	Joomla\CMS\Document\HtmlDocument->_loadTemplate()	JROOT/libraries/src/Document/HtmlDocument.php:740
5	Joomla\CMS\Document\HtmlDocument->_fetchTemplate()	JROOT/libraries/src/Document/HtmlDocument.php:555
4	Joomla\CMS\Document\HtmlDocument->parse()	JROOT/libraries/src/Application/CMSApplication.php:1098
3	Joomla\CMS\Application\CMSApplication->render()	JROOT/libraries/src/Application/SiteApplication.php:778
2	Joomla\CMS\Application\SiteApplication->render()	JROOT/libraries/src/Application/CMSApplication.php:231
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.20 ms Nach letzter Abfrage: 33.73 ms Abfragespeichernutzung: 0.022 MB Speichernutzung vor Abfrage: 11.060 MB Zeilen zurückgegeben: 3

SELECT `c2`.`language`,`c2`.`id`

  FROM `bly_menu` AS `c`

  INNER JOIN `bly_associations` AS `a` 
  ON a.id = c.`id` 
  AND a.context='com_menus.item'

  INNER JOIN `bly_associations` AS `a2` 
  ON `a`.`key` = `a2`.`key`

  INNER JOIN `bly_menu` AS `c2` 
  ON a2.id = c2.`id`

  WHERE c.id = 124

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	c	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	Using index
1	SIMPLE	a	NULL	const	PRIMARY,idx_key	PRIMARY	206	const,const	1	100.00	NULL
1	SIMPLE	a2	NULL	ref	idx_key	idx_key	128	const	3	100.00	Using index
1	SIMPLE	c2	NULL	eq_ref	PRIMARY	PRIMARY	4	DB3826637.a2.id	1	100.00	NULL

Profil (Profile)

Status	Duration
starting	0.04 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.16 ms
init	0.01 ms
System lock	0.01 ms
optimizing	0.01 ms
statistics	0.05 ms
preparing	0.01 ms
executing	0.01 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
15	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
14	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Language/Associations.php:115
13	Joomla\CMS\Language\Associations::getAssociations()	JROOT/administrator/components/com_menus/helpers/menus.php:321
12	MenusHelper::getAssociations()	JROOT/modules/mod_languages/helper.php:58
11	ModLanguagesHelper::getList()	JROOT/modules/mod_languages/mod_languages.php:17
10	include JROOT/modules/mod_languages/mod_languages.php	JROOT/libraries/src/Helper/ModuleHelper.php:200
9	Joomla\CMS\Helper\ModuleHelper::renderModule()	JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98
8	Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render()	JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47
7	Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render()	JROOT/libraries/src/Document/HtmlDocument.php:511
6	Joomla\CMS\Document\HtmlDocument->getBuffer()	JROOT/libraries/src/Document/HtmlDocument.php:803
5	Joomla\CMS\Document\HtmlDocument->_renderTemplate()	JROOT/libraries/src/Document/HtmlDocument.php:577
4	Joomla\CMS\Document\HtmlDocument->render()	JROOT/libraries/src/Application/CMSApplication.php:1112
3	Joomla\CMS\Application\CMSApplication->render()	JROOT/libraries/src/Application/SiteApplication.php:778
2	Joomla\CMS\Application\SiteApplication->render()	JROOT/libraries/src/Application/CMSApplication.php:231
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.18 ms Nach letzter Abfrage: 4.16 ms Abfragespeichernutzung: 0.022 MB Speichernutzung vor Abfrage: 11.157 MB Zeilen zurückgegeben: 2

SELECT `c2`.`language`,CONCAT_WS(':', `c2`.`id`, `c2`.`alias`) AS `id`,CONCAT_WS(':', ca.id, ca.alias) AS `catid`

  FROM `bly_content` AS `c`

  INNER JOIN `bly_associations` AS `a` 
  ON a.id = c.`id` 
  AND a.context='com_content.item'

  INNER JOIN `bly_associations` AS `a2` 
  ON `a`.`key` = `a2`.`key`

  INNER JOIN `bly_content` AS `c2` 
  ON a2.id = c2.`id`

  INNER JOIN `bly_categories` AS `ca` 
  ON `c2`.`catid` = ca.id 
  AND ca.extension = 'com_content'

  WHERE c.id = 11 
  AND c2.access IN (1,1,5) 
  AND c2.language != 'de-DE' 
  AND (c2.publish_up = '0000-00-00 00:00:00' OR c2.publish_up <= '2026-07-18 11:42:09') 
  AND (c2.publish_down = '0000-00-00 00:00:00' OR c2.publish_down >= '2026-07-18 11:42:09') 
  AND c2.state = 1

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	c	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	Using index
1	SIMPLE	a	NULL	const	PRIMARY,idx_key	PRIMARY	206	const,const	1	100.00	NULL
1	SIMPLE	a2	NULL	ref	idx_key	idx_key	128	const	3	100.00	Using index
1	SIMPLE	c2	NULL	eq_ref	PRIMARY,idx_access,idx_state,idx_catid,idx_language	PRIMARY	4	DB3826637.a2.id	1	11.72	Using where
1	SIMPLE	ca	NULL	eq_ref	PRIMARY,cat_idx	PRIMARY	4	DB3826637.c2.catid	1	86.67	Using where

Profil (Profile)

Status	Duration
starting	0.05 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.05 ms
init	0.03 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.09 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.04 ms
end	0.00 ms
query end	0.01 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
15	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
14	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Language/Associations.php:115
13	Joomla\CMS\Language\Associations::getAssociations()	JROOT/components/com_content/helpers/association.php:76
12	ContentHelperAssociation::getAssociations()	JROOT/modules/mod_languages/helper.php:68
11	ModLanguagesHelper::getList()	JROOT/modules/mod_languages/mod_languages.php:17
10	include JROOT/modules/mod_languages/mod_languages.php	JROOT/libraries/src/Helper/ModuleHelper.php:200
9	Joomla\CMS\Helper\ModuleHelper::renderModule()	JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98
8	Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render()	JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47
7	Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render()	JROOT/libraries/src/Document/HtmlDocument.php:511
6	Joomla\CMS\Document\HtmlDocument->getBuffer()	JROOT/libraries/src/Document/HtmlDocument.php:803
5	Joomla\CMS\Document\HtmlDocument->_renderTemplate()	JROOT/libraries/src/Document/HtmlDocument.php:577
4	Joomla\CMS\Document\HtmlDocument->render()	JROOT/libraries/src/Application/CMSApplication.php:1112
3	Joomla\CMS\Application\CMSApplication->render()	JROOT/libraries/src/Application/SiteApplication.php:778
2	Joomla\CMS\Application\SiteApplication->render()	JROOT/libraries/src/Application/CMSApplication.php:231
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.15 ms Nach letzter Abfrage: 1.64 ms Abfragespeichernutzung: 0.026 MB Speichernutzung vor Abfrage: 11.171 MB Zeilen zurückgegeben: 4

SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time,
				c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level,
				c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id,
				c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version, 
  CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug

  FROM `bly_categories` AS `s`

  INNER JOIN `bly_categories` AS `c` 
  ON (s.lft < c.lft 
  AND c.lft < s.rgt 
  AND c.language IN ('de-DE','*')) OR (c.lft <= s.lft 
  AND s.rgt <= c.rgt)

  WHERE (c.extension='com_content' OR c.extension='system') 
  AND c.access IN (1,1,5) 
  AND c.published = 1 
  AND s.id = 29

  ORDER BY c.lft

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	s	NULL	const	PRIMARY,idx_left_right	PRIMARY	4	const	1	100.00	filesort wurde genutzt
1	SIMPLE	c	NULL	ALL	cat_idx,idx_access,idx_left_right,idx_language	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	45	6.91	Using where

Profil (Profile)

Status	Duration
starting	0.05 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.03 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.06 ms
preparing	0.01 ms
Sorting result	0.00 ms
executing	0.00 ms
Sending data	0.01 ms
Creating sort index	0.06 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
25	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
24	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Categories/Categories.php:324
23	Joomla\CMS\Categories\Categories->_load()	JROOT/libraries/src/Categories/Categories.php:184
22	Joomla\CMS\Categories\Categories->get()	JROOT/components/com_content/router.php:72
21	ContentRouter->getCategorySegment()	Derselbe Aufruf in der Zeile darunter.
20	call_user_func_array()	JROOT/libraries/src/Component/Router/RouterView.php:120
19	Joomla\CMS\Component\Router\RouterView->getPath()	JROOT/libraries/src/Component/Router/Rules/MenuRules.php:111
18	Joomla\CMS\Component\Router\Rules\MenuRules->preprocess()	JROOT/libraries/src/Component/Router/RouterView.php:222
17	Joomla\CMS\Component\Router\RouterView->preprocess()	JROOT/libraries/src/Router/SiteRouter.php:676
16	Joomla\CMS\Router\SiteRouter->processBuildRules()	JROOT/libraries/src/Router/Router.php:266
15	Joomla\CMS\Router\Router->build()	JROOT/libraries/src/Router/SiteRouter.php:155
14	Joomla\CMS\Router\SiteRouter->build()	JROOT/libraries/src/Router/Route.php:144
13	Joomla\CMS\Router\Route::link()	JROOT/libraries/src/Router/Route.php:93
12	Joomla\CMS\Router\Route::_()	JROOT/modules/mod_languages/helper.php:115
11	ModLanguagesHelper::getList()	JROOT/modules/mod_languages/mod_languages.php:17
10	include JROOT/modules/mod_languages/mod_languages.php	JROOT/libraries/src/Helper/ModuleHelper.php:200
9	Joomla\CMS\Helper\ModuleHelper::renderModule()	JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98
8	Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render()	JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47
7	Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render()	JROOT/libraries/src/Document/HtmlDocument.php:511
6	Joomla\CMS\Document\HtmlDocument->getBuffer()	JROOT/libraries/src/Document/HtmlDocument.php:803
5	Joomla\CMS\Document\HtmlDocument->_renderTemplate()	JROOT/libraries/src/Document/HtmlDocument.php:577
4	Joomla\CMS\Document\HtmlDocument->render()	JROOT/libraries/src/Application/CMSApplication.php:1112
3	Joomla\CMS\Application\CMSApplication->render()	JROOT/libraries/src/Application/SiteApplication.php:778
2	Joomla\CMS\Application\SiteApplication->render()	JROOT/libraries/src/Application/CMSApplication.php:231
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.06 ms Nach letzter Abfrage: 1.56 ms Abfragespeichernutzung: 0.026 MB Speichernutzung vor Abfrage: 11.199 MB Zeilen zurückgegeben: 4

SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time,
				c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level,
				c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id,
				c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version, 
  CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug

  FROM `bly_categories` AS `s`

  INNER JOIN `bly_categories` AS `c` 
  ON (s.lft < c.lft 
  AND c.lft < s.rgt 
  AND c.language IN ('de-DE','*')) OR (c.lft <= s.lft 
  AND s.rgt <= c.rgt)

  WHERE (c.extension='com_content' OR c.extension='system') 
  AND c.access IN (1,1,5) 
  AND c.published = 1 
  AND s.id = 39

  ORDER BY c.lft

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	s	NULL	const	PRIMARY,idx_left_right	PRIMARY	4	const	1	100.00	filesort wurde genutzt
1	SIMPLE	c	NULL	ALL	cat_idx,idx_access,idx_left_right,idx_language	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	45	29.04	Using where

Profil (Profile)

Status	Duration
starting	0.04 ms
checking permissions	0.00 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.02 ms
System lock	0.01 ms
optimizing	0.01 ms
statistics	0.04 ms
preparing	0.01 ms
Sorting result	0.00 ms
executing	0.00 ms
Sending data	0.01 ms
Creating sort index	0.04 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
25	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1701
24	JDatabaseDriver->loadObjectList()	JROOT/libraries/src/Categories/Categories.php:324
23	Joomla\CMS\Categories\Categories->_load()	JROOT/libraries/src/Categories/Categories.php:184
22	Joomla\CMS\Categories\Categories->get()	JROOT/components/com_content/router.php:72
21	ContentRouter->getCategorySegment()	Derselbe Aufruf in der Zeile darunter.
20	call_user_func_array()	JROOT/libraries/src/Component/Router/RouterView.php:120
19	Joomla\CMS\Component\Router\RouterView->getPath()	JROOT/libraries/src/Component/Router/Rules/MenuRules.php:111
18	Joomla\CMS\Component\Router\Rules\MenuRules->preprocess()	JROOT/libraries/src/Component/Router/RouterView.php:222
17	Joomla\CMS\Component\Router\RouterView->preprocess()	JROOT/libraries/src/Router/SiteRouter.php:676
16	Joomla\CMS\Router\SiteRouter->processBuildRules()	JROOT/libraries/src/Router/Router.php:266
15	Joomla\CMS\Router\Router->build()	JROOT/libraries/src/Router/SiteRouter.php:155
14	Joomla\CMS\Router\SiteRouter->build()	JROOT/libraries/src/Router/Route.php:144
13	Joomla\CMS\Router\Route::link()	JROOT/libraries/src/Router/Route.php:93
12	Joomla\CMS\Router\Route::_()	JROOT/modules/mod_languages/helper.php:115
11	ModLanguagesHelper::getList()	JROOT/modules/mod_languages/mod_languages.php:17
10	include JROOT/modules/mod_languages/mod_languages.php	JROOT/libraries/src/Helper/ModuleHelper.php:200
9	Joomla\CMS\Helper\ModuleHelper::renderModule()	JROOT/libraries/src/Document/Renderer/Html/ModuleRenderer.php:98
8	Joomla\CMS\Document\Renderer\Html\ModuleRenderer->render()	JROOT/libraries/src/Document/Renderer/Html/ModulesRenderer.php:47
7	Joomla\CMS\Document\Renderer\Html\ModulesRenderer->render()	JROOT/libraries/src/Document/HtmlDocument.php:511
6	Joomla\CMS\Document\HtmlDocument->getBuffer()	JROOT/libraries/src/Document/HtmlDocument.php:803
5	Joomla\CMS\Document\HtmlDocument->_renderTemplate()	JROOT/libraries/src/Document/HtmlDocument.php:577
4	Joomla\CMS\Document\HtmlDocument->render()	JROOT/libraries/src/Application/CMSApplication.php:1112
3	Joomla\CMS\Application\CMSApplication->render()	JROOT/libraries/src/Application/SiteApplication.php:778
2	Joomla\CMS\Application\SiteApplication->render()	JROOT/libraries/src/Application/CMSApplication.php:231
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.06 ms Nach letzter Abfrage: 74.29 ms Abfragespeichernutzung: 0.129 MB Speichernutzung vor Abfrage: 16.026 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #29 #34 #38 #44 #45 #46 #48 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.03 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.04 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.06 ms
end	0.01 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
9	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
8	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/config.php:310
7	HtpConfig::load()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2342
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 3.65 ms Nach letzter Abfrage: 4.12 ms Abfragespeichernutzung: 0.005 MB Speichernutzung vor Abfrage: 16.319 MB

UPDATE `bly_session`

  SET `data` = 'joomla|s:840:\"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\";'
	, `time` = 1784374930

  WHERE `session_id` = X'6f34306131636661763439306a6136696c6236386a37346f3330'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	UPDATE	bly_session	NULL	range	PRIMARY	PRIMARY	194	const	1	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.01 ms
updating	0.06 ms
end	0.01 ms
query end	2.62 ms
closing tables	0.06 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
12	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/session/storage/database.php:84
11	JSessionStorageDatabase->write()	Derselbe Aufruf in der Zeile darunter.
10	session_write_close()	JROOT/libraries/joomla/session/handler/native.php:194
9	JSessionHandlerNative->save()	JROOT/libraries/src/Session/Session.php:824
8	Joomla\CMS\Session\Session->close()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2575
7	PlgSystemHtprotectwatch->backgroundDetach()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2350
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.07 ms Nach letzter Abfrage: 0.26 ms Abfragespeichernutzung: 0.130 MB Speichernutzung vor Abfrage: 16.323 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #34 #38 #44 #45 #46 #48 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.04 ms
preparing	0.01 ms
executing	0.01 ms
Sending data	0.06 ms
end	0.01 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
10	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/config.php:310
9	HtpConfig::load()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:1176
8	HtpCompat::enabledByConfig()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:184
7	HtpCompat::observeState()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2364
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.91 ms Nach letzter Abfrage: 1.43 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.320 MB Zeilen zurückgegeben: 1

SELECT COUNT(*)

  FROM `bly_extensions`

  WHERE `type` = 'plugin' 
  AND `folder` = 'behaviour' 
  AND `element` IN ('compat', 'compat6')

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	range	element_clientid,element_folder_clientid,extension	extension	886	NULL	2	100.00	Using where; Using index

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.04 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.01 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
10	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:1221
9	HtpCompat::scalar()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:1226
8	HtpCompat::bcExists()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:200
7	HtpCompat::observeState()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2364
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.88 ms Nach letzter Abfrage: 2.01 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.326 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #40

SELECT `rules`

  FROM `bly_assets`

  WHERE `id` = 1

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_assets	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	NULL

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.02 ms
preparing	0.00 ms
executing	0.00 ms
Sending data	0.00 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
10	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/accounts.php:449
9	HtpAccounts::privilegedGroupIds()	JROOT/administrator/components/com_htprotect/core/accounts.php:359
8	HtpAccounts::snapshot()	JROOT/administrator/components/com_htprotect/core/accounts.php:35
7	HtpAccounts::evaluate()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2372
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 14.28 ms Nach letzter Abfrage: 0.14 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.331 MB Zeilen zurückgegeben: 3

Doppelte Abfragen: #41

SELECT DISTINCT `user_id`

  FROM `bly_user_usergroup_map`

  WHERE `group_id` IN (8) 
  LIMIT 500

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_user_usergroup_map	NULL	index	PRIMARY	PRIMARY	8	NULL	7672	10.00	Using where; Using index; Using temporary

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.19 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.01 ms
preparing	0.01 ms
Creating tmp table	0.02 ms
executing	0.00 ms
Sending data	13.15 ms
end	0.01 ms
query end	0.00 ms
removing tmp table	0.00 ms
query end	0.00 ms
closing tables	0.02 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1550
9	JDatabaseDriver->loadColumn()	JROOT/administrator/components/com_htprotect/core/accounts.php:371
8	HtpAccounts::snapshot()	JROOT/administrator/components/com_htprotect/core/accounts.php:35
7	HtpAccounts::evaluate()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2372
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.96 ms Nach letzter Abfrage: 0.12 ms Abfragespeichernutzung: 0.021 MB Speichernutzung vor Abfrage: 16.337 MB Zeilen zurückgegeben: 3

SELECT `id`,`username`,`email`,`password`,`block`,`lastvisitDate`

  FROM `bly_users`

  WHERE `id` IN (374,461,162201) 
  LIMIT 500

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_users	NULL	range	PRIMARY	PRIMARY	4	NULL	3	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.02 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1506
9	JDatabaseDriver->loadAssocList()	JROOT/administrator/components/com_htprotect/core/accounts.php:390
8	HtpAccounts::snapshot()	JROOT/administrator/components/com_htprotect/core/accounts.php:35
7	HtpAccounts::evaluate()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2372
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.10 ms Nach letzter Abfrage: 2.58 ms Abfragespeichernutzung: 0.130 MB Speichernutzung vor Abfrage: 16.349 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #29 #38 #44 #45 #46 #48 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.04 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.07 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
13	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
12	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/defs.php:1807
11	HtpDefs::loadMalwareCached()	JROOT/administrator/components/com_htprotect/core/defs.php:928
10	HtpDefs::malwareSigs()	JROOT/administrator/components/com_htprotect/core/storage.php:1316
9	HtpStorage::malwareSignature()	JROOT/administrator/components/com_htprotect/core/watch.php:703
8	HtpWatch::contentLooksHostile()	JROOT/administrator/components/com_htprotect/core/watch.php:554
7	HtpWatch::integrityCheck()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2381
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.02 ms Nach letzter Abfrage: 2.07 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.391 MB Zeilen zurückgegeben: 2

SELECT `template`,`client_id`

  FROM `bly_template_styles`

  WHERE `home` = '1'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_template_styles	NULL	ALL	NULL	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	6	16.67	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.01 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.01 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1506
10	JDatabaseDriver->loadAssocList()	JROOT/administrator/components/com_htprotect/core/watch.php:887
9	HtpWatch::activeTemplateFiles()	JROOT/administrator/components/com_htprotect/core/watch.php:857
8	HtpWatch::anomalyOnlyFiles()	JROOT/administrator/components/com_htprotect/core/watch.php:587
7	HtpWatch::integrityCheck()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2381
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.13 ms Nach letzter Abfrage: 5.84 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.394 MB Zeilen zurückgegeben: 1

SELECT MIN(`ordering`)

  FROM `bly_extensions`

  WHERE `type` = 'plugin' 
  AND `folder` = 'system' 
  AND `enabled` = 1 
  AND `element` <> 'htprotectwatch'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	range	element_clientid,element_folder_clientid,extension	extension	484	NULL	110	1.00	Using index condition; Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.02 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.05 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.09 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
9	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:1221
8	HtpCompat::scalar()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:1120
7	HtpCompat::ensureWatchFirst()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2389
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.94 ms Nach letzter Abfrage: 0.27 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.398 MB Zeilen zurückgegeben: 1

SELECT `ordering`

  FROM `bly_extensions`

  WHERE `type` = 'plugin' 
  AND `folder` = 'system' 
  AND `element` = 'htprotectwatch'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	5.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.01 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
9	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:1221
8	HtpCompat::scalar()	JROOT/administrator/components/com_htprotect/core/compat_guard.php:1131
7	HtpCompat::ensureWatchFirst()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2389
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.05 ms Nach letzter Abfrage: 0.14 ms Abfragespeichernutzung: 0.130 MB Speichernutzung vor Abfrage: 16.403 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #29 #34 #44 #45 #46 #48 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.01 ms
Opening tables	0.00 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.02 ms
preparing	0.01 ms
executing	0.01 ms
Sending data	0.05 ms
end	0.01 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
10	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/defs.php:3206
9	HtpDefs::loadCached()	JROOT/administrator/components/com_htprotect/core/defs.php:600
8	HtpDefs::effectiveVuln()	JROOT/administrator/components/com_htprotect/core/defs.php:2690
7	HtpDefs::checkExtensions()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2393
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.16 ms Nach letzter Abfrage: 1.07 ms Abfragespeichernutzung: 0.117 MB Speichernutzung vor Abfrage: 16.497 MB Zeilen zurückgegeben: 231

SELECT `element`,`type`,`folder`,`client_id`,`manifest_cache`,`enabled`

  FROM `bly_extensions`

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ALL	NULL	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	218	100.00	NULL

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.00 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.00 ms
preparing	0.00 ms
executing	0.00 ms
Sending data	0.24 ms
end	0.01 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
9	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1506
8	JDatabaseDriver->loadAssocList()	JROOT/administrator/components/com_htprotect/core/defs.php:2701
7	HtpDefs::checkExtensions()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2393
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.92 ms Nach letzter Abfrage: 6.13 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.501 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #31

SELECT `rules`

  FROM `bly_assets`

  WHERE `id` = 1

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_assets	NULL	const	PRIMARY	PRIMARY	4	const	1	100.00	NULL

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.02 ms
preparing	0.00 ms
executing	0.00 ms
Sending data	0.00 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.00 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
9	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/accounts.php:449
8	HtpAccounts::privilegedGroupIds()	JROOT/administrator/components/com_htprotect/core/accounts.php:563
7	HtpAccounts::suspiciousAdmins()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2462
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 18.76 ms Nach letzter Abfrage: 0.11 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.505 MB Zeilen zurückgegeben: 3

Doppelte Abfragen: #32

SELECT DISTINCT `user_id`

  FROM `bly_user_usergroup_map`

  WHERE `group_id` IN (8) 
  LIMIT 500

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_user_usergroup_map	NULL	index	PRIMARY	PRIMARY	8	NULL	7672	10.00	Using where; Using index; Using temporary

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.00 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.01 ms
preparing	0.01 ms
Creating tmp table	0.02 ms
executing	0.00 ms
Sending data	17.79 ms
end	0.03 ms
query end	0.01 ms
removing tmp table	0.01 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.03 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
9	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1550
8	JDatabaseDriver->loadColumn()	JROOT/administrator/components/com_htprotect/core/accounts.php:575
7	HtpAccounts::suspiciousAdmins()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2462
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.08 ms Nach letzter Abfrage: 0.15 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.510 MB Zeilen zurückgegeben: 3

SELECT `id`,`username`,`name`,`email`,`registerDate`,`lastvisitDate`,`block`

  FROM `bly_users`

  WHERE `id` IN (374,461,162201) 
  LIMIT 500

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_users	NULL	range	PRIMARY	PRIMARY	4	NULL	3	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.04 ms
checking permissions	0.01 ms
Opening tables	0.01 ms
init	0.02 ms
System lock	0.01 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.03 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
9	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1506
8	JDatabaseDriver->loadAssocList()	JROOT/administrator/components/com_htprotect/core/accounts.php:594
7	HtpAccounts::suspiciousAdmins()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2462
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 2.67 ms Nach letzter Abfrage: 0.33 ms Abfragespeichernutzung: 0.020 MB Speichernutzung vor Abfrage: 16.513 MB Zeilen zurückgegeben: 1

SELECT `id`,`name`,`types`,`area`,`plugins`,`params`

  FROM `bly_wf_profiles`

  WHERE `published` = 1 
  LIMIT 200

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_wf_profiles	NULL	ALL	NULL	ES KONNTE KEIN INDEX-SCHLÜSSEL GENUTZT WERDEN	NULL	NULL	4	25.00	Using where

Profil (Profile)

Status	Duration
starting	0.02 ms
checking permissions	0.00 ms
Opening tables	0.21 ms
init	0.01 ms
System lock	0.01 ms
optimizing	0.01 ms
statistics	0.01 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
9	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1506
8	JDatabaseDriver->loadAssocList()	JROOT/administrator/components/com_htprotect/core/defs.php:2824
7	HtpDefs::checkJceProfiles()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2484
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.11 ms Nach letzter Abfrage: 10.32 ms Abfragespeichernutzung: 0.130 MB Speichernutzung vor Abfrage: 16.517 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #29 #34 #38 #45 #46 #48 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.03 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.01 ms
optimizing	0.01 ms
statistics	0.05 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.06 ms
end	0.01 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
10	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/watch.php:956
9	HtpWatch::loadNotified()	JROOT/administrator/components/com_htprotect/core/watch.php:334
8	HtpWatch::dueForNotification()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2633
7	PlgSystemHtprotectwatch->notify()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.00 ms Nach letzter Abfrage: 1.04 ms Abfragespeichernutzung: 0.130 MB Speichernutzung vor Abfrage: 16.522 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #29 #34 #38 #44 #46 #48 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.00 ms
executing	0.00 ms
Sending data	0.04 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
10	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/watch.php:956
9	HtpWatch::loadNotified()	JROOT/administrator/components/com_htprotect/core/watch.php:348
8	HtpWatch::recordNotification()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2670
7	PlgSystemHtprotectwatch->notify()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 0.96 ms Nach letzter Abfrage: 0.81 ms Abfragespeichernutzung: 0.130 MB Speichernutzung vor Abfrage: 16.527 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #29 #34 #38 #44 #45 #48 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.02 ms
preparing	0.00 ms
executing	0.00 ms
Sending data	0.05 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
11	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
10	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/watch.php:994
9	HtpWatch::saveNotified()	JROOT/administrator/components/com_htprotect/core/watch.php:348
8	HtpWatch::recordNotification()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2670
7	PlgSystemHtprotectwatch->notify()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 3.90 ms Nach letzter Abfrage: 2.63 ms Abfragespeichernutzung: 0.004 MB Speichernutzung vor Abfrage: 16.931 MB

Doppelte Abfragen: #50

UPDATE `bly_extensions`

  SET `params` = '{\"htp_shield\":{\"site_path\":\"\",\"sef_rules\":1,\"api_router\":1,\"api_mode\":\"route\",\"fastcgi_auth\":1,\"apache_options\":1,\"follow_symlink\":0,\"force_https\":1,\"www_mode\":0,\"canonical_host\":\"\",\"h_frame\":1,\"h_nosniff\":1,\"h_referrer\":\"strict-origin-when-cross-origin\",\"h_poweredby\":1,\"h_hsts\":0,\"h_hsts_sub\":0,\"h_coop\":0,\"h_permissions\":0,\"f_query\":1,\"f_rfi\":1,\"f_methods\":1,\"f_wpnoise\":1,\"htaccess_external\":0,\"guard_dismissed\":0,\"x_shield\":1,\"x_sigs_off\":[],\"defs_version\":\"2026-07-15.9ac386\",\"mal_whitelist\":[],\"u_harden\":1,\"u_dirs\":[\"images\",\"media\"],\"emergency_lock\":0,\"notify_email\":\"mail@website-bereinigung.de\",\"notify_reminder_days\":14,\"unsub_secret\":\"a3ovOtDuiJ2JWUICnSikGA7204m_W0KkrPOvl88kIDU\",\"unsub_base\":\"https:\\/\\/belezy.eu\\/\",\"site_fp\":\"9d003c1a41c42c108fbc877300d68eac557ccaac\",\"swarm_contrib_id\":\"\",\"swarm_acked\":[],\"watch_manifest\":{\".htaccess\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"images\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\",\"media\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\"},\"core_manifest\":{\"index.php\":\"b1c33443a827fd25d6e033d14bdba8e6f9df6ad1\",\"administrator\\/index.php\":\"7078c5d7b2181900c509c93302f324e2dae228bf\"},\"core_jversion\":\"3.10.11\",\"accounts_watch\":1,\"account_baseline\":{\"374\":{\"id\":374,\"username\":\"hberdel\",\"email\":\"info@belezy.eu\",\"phash\":\"4e4fa5fb0131a9781fca0d873c22f53c2ad8a248\",\"block\":0,\"lastvisit\":\"2026-06-24 12:03:38\",\"pneeds\":0},\"461\":{\"id\":461,\"username\":\"Loose\",\"email\":\"info@wm-loose.de\",\"phash\":\"efabda101d354010a79343bd47474e6e3fc8676d\",\"block\":0,\"lastvisit\":\"2023-02-28 14:32:15\",\"pneeds\":0},\"162201\":{\"id\":162201,\"username\":\"pascall\",\"email\":\"mail@website-bereinigung.de\",\"phash\":\"a77d1a74e85312c45348eeec7605887016661d17\",\"block\":0,\"lastvisit\":\"2026-06-24 15:56:20\",\"pneeds\":0}},\"admin_whitelist\":[],\"seo_watch\":1,\"compat_guard\":1,\"seo_cloaking_auto\":0,\"seo_whitelist\":[],\"seo_topic_ack\":[],\"seo_baseline\":{\"title\":\"ProvenceFerien - Startseite\",\"out_domains\":{\"xdebug.org\":1},\"shingles\":{\"2773276488\":1,\"694934048\":1,\"2276828720\":1,\"1014845744\":1,\"2164272920\":1,\"654648592\":1,\"3252768728\":1,\"2703306816\":1,\"4206898064\":1,\"3965176784\":1,\"324970472\":1,\"3140698272\":1,\"2596003040\":1,\"2737171944\":1,\"95016752\":1,\"1222032616\":1,\"3967628640\":1,\"2144334616\":1,\"1571366176\":1,\"2296853872\":1,\"2149620600\":1,\"1121698424\":1,\"1523411896\":1,\"2049945696\":1,\"2144915136\":1,\"2204935488\":1,\"723865528\":1,\"3725506112\":1,\"1945954912\":1,\"4263363480\":1,\"1309988440\":1,\"1421026616\":1,\"3426863704\":1,\"1030014896\":1,\"912520336\":1,\"2088853496\":1,\"3979502160\":1,\"4116536448\":1,\"2863093792\":1,\"3037412432\":1,\"3620898072\":1,\"2314148544\":1,\"37976\":1,\"2414448336\":1,\"3977858536\":1,\"11385216\":1,\"1409844200\":1,\"1751197192\":1,\"1518609656\":1,\"1130239024\":1,\"716131384\":1,\"1236659328\":1,\"3001742640\":1,\"3903950424\":1,\"2657582952\":1,\"1545708136\":1,\"3170111184\":1,\"4275824384\":1,\"1476852648\":1,\"3518915328\":1,\"2973823744\":1,\"332369504\":1,\"581432120\":1,\"1827905688\":1,\"2062886848\":1,\"2311799488\":1,\"4179887752\":1,\"183707264\":1,\"821579528\":1,\"1552434376\":1,\"3369362064\":1,\"3578063520\":1,\"3682544776\":1,\"365264784\":1,\"2968954048\":1,\"1708211424\":1,\"3133635568\":1,\"1298729048\":1,\"2599037872\":1,\"4081499304\":1,\"187337984\":1,\"362962264\":1,\"2094558736\":1,\"2787016200\":1,\"658564976\":1,\"3893519200\":1,\"2014934032\":1,\"2807223808\":1,\"1971365808\":1,\"1492481664\":1,\"3208575176\":1,\"4132949216\":1,\"1552018832\":1,\"344452216\":1,\"2539551096\":1,\"1882892912\":1,\"547683160\":1,\"1431046296\":1,\"2240553192\":1,\"1993946344\":1,\"2704876872\":1,\"1558974800\":1,\"883158256\":1,\"1213187168\":1,\"3879781728\":1,\"3735037840\":1,\"829495128\":1,\"1020533640\":1,\"2306348504\":1,\"1441885712\":1,\"1365789064\":1,\"3510447536\":1,\"3648057168\":1,\"28501736\":1,\"2051798112\":1,\"4075032544\":1,\"3189454464\":1,\"555083136\":1,\"1550852192\":1,\"1246339560\":1,\"1354898128\":1,\"2981285080\":1,\"815862896\":1,\"703426624\":1,\"305723808\":1,\"249961104\":1,\"3008275536\":1,\"1743788824\":1,\"4265276576\":1,\"3557110600\":1,\"4041208904\":1,\"1327249520\":1,\"1607673584\":1,\"4007425464\":1,\"1175775032\":1,\"2276517544\":1,\"1205991320\":1,\"1113485296\":1,\"315353232\":1,\"2500630616\":1,\"4221532808\":1,\"1980425792\":1,\"2693581640\":1,\"3968187688\":1,\"2974680912\":1,\"3741881144\":1,\"3462925544\":1,\"2964742568\":1,\"3711292792\":1,\"479869424\":1,\"973742744\":1,\"351015224\":1,\"3738520704\":1,\"3335574944\":1,\"1248024752\":1,\"1534907152\":1,\"4101744904\":1,\"433360288\":1,\"2791891896\":1,\"3626748360\":1,\"3196827536\":1,\"1559046784\":1,\"7730296\":1,\"1458451704\":1,\"2911589176\":1,\"454621680\":1,\"179928728\":1,\"1982037912\":1,\"916874840\":1,\"1548123496\":1,\"3846924096\":1,\"4123225216\":1,\"670221008\":1,\"2571777288\":1,\"3627078176\":1,\"293222816\":1,\"281163600\":1,\"2508087208\":1,\"3770727200\":1,\"3556748072\":1,\"3381116688\":1,\"3107900104\":1,\"2034508136\":1,\"1977429088\":1,\"2703274016\":1,\"4139311008\":1,\"4261163824\":1,\"3539583040\":1,\"3792461240\":1,\"2691280184\":1,\"1856123928\":1,\"376102376\":1,\"2521452248\":1,\"3357431832\":1,\"971320240\":1,\"1808893192\":1,\"2709313920\":1,\"444641888\":1,\"2043081592\":1,\"1854799872\":1,\"2071995072\":1,\"1818046032\":1,\"4043405808\":1,\"2965571680\":1,\"1618392856\":1,\"1253472664\":1,\"1925217168\":1,\"933003528\":1,\"2230427152\":1,\"1208455864\":1,\"2025534160\":1,\"1408784776\":1,\"2685059296\":1,\"3489792648\":1,\"1615724560\":1,\"80777296\":1,\"466411848\":1,\"2846665840\":1,\"1911606592\":1,\"2696697384\":1,\"2804037960\":1,\"4138023008\":1,\"1630734352\":1,\"1587613576\":1,\"1950652592\":1,\"2777296976\":1,\"2255302400\":1,\"2621186584\":1,\"36106456\":1,\"2243664024\":1,\"3186220248\":1,\"3286361792\":1,\"4109595712\":1,\"335870296\":1,\"947878136\":1,\"885775072\":1,\"2836090264\":1,\"3195444184\":1,\"1373515616\":1,\"2703441304\":1,\"2999798000\":1,\"4124423392\":1,\"1153004272\":1,\"796890520\":1,\"1247028480\":1,\"958748368\":1,\"1744512424\":1,\"647816080\":1,\"1300060200\":1,\"1148044208\":1,\"3431685056\":1,\"3679148440\":1,\"1466140040\":1,\"1735424048\":1,\"1298914320\":1,\"3451668792\":1,\"3485632672\":1,\"3040222736\":1,\"3818565424\":1,\"428036792\":1,\"2710735120\":1,\"1002378832\":1,\"347500504\":1,\"2570151984\":1,\"2776089360\":1,\"2607914576\":1,\"3758066944\":1,\"897055968\":1,\"237439056\":1,\"3134172856\":1,\"2464987728\":1,\"4214313248\":1,\"48098040\":1,\"2694091560\":1,\"1636308368\":1,\"334606008\":1,\"2144818552\":1,\"3130333816\":1,\"3591606896\":1,\"1894249248\":1,\"4188555200\":1,\"245520800\":1,\"1682089672\":1,\"9149544\":1,\"1372800744\":1,\"2964205104\":1,\"2728041256\":1,\"143834200\":1,\"1108585200\":1,\"2736916224\":1,\"2448768504\":1,\"2365893624\":1,\"2284709784\":1,\"802473640\":1,\"3772932312\":1,\"361847392\":1,\"1137970600\":1,\"1232831160\":1,\"144058216\":1,\"1646278032\":1,\"992984272\":1,\"3634194248\":1,\"3773773072\":1,\"4070217592\":1,\"3903737168\":1,\"431558624\":1,\"2195069352\":1,\"669332312\":1,\"3004089080\":1,\"3885706904\":1,\"2109380128\":1,\"3757583592\":1,\"2545468000\":1,\"3698566936\":1,\"183215536\":1,\"801931600\":1,\"1734328536\":1,\"2074309544\":1,\"2801752600\":1,\"548482512\":1,\"3129297296\":1,\"3367049600\":1,\"1792562160\":1,\"3633067472\":1,\"963883040\":1,\"1263046008\":1,\"539208032\":1,\"3362402488\":1,\"3069180952\":1,\"1120040384\":1,\"2840905640\":1,\"2078889728\":1,\"2274655504\":1,\"111197728\":1,\"2673020880\":1,\"125198544\":1,\"591729768\":1,\"4239283240\":1,\"2427366776\":1,\"56992680\":1,\"2801660040\":1,\"3593402112\":1,\"147956928\":1,\"1693971840\":1,\"3868138536\":1,\"320203224\":1,\"224045520\":1,\"39887024\":1,\"21699200\":1,\"1739726536\":1,\"142599880\":1,\"3747452816\":1,\"597727768\":1,\"4150626032\":1,\"2011179320\":1,\"1296426808\":1,\"1468108424\":1,\"965466024\":1,\"928231432\":1,\"1273095288\":1,\"13803176\":1,\"3529821320\":1,\"1822362464\":1,\"1602423200\":1,\"3045750632\":1,\"2746789680\":1,\"472550200\":1,\"3722023320\":1,\"2292319968\":1,\"4163832904\":1,\"2617823040\":1,\"1372429176\":1,\"4096226856\":1,\"400511176\":1,\"548872256\":1,\"466639536\":1,\"911090304\":1,\"3430473600\":1,\"4207759072\":1,\"1789941360\":1,\"4083465160\":1,\"777022376\":1,\"4197280096\":1,\"2424302952\":1,\"3615809224\":1,\"3578502824\":1,\"3707729224\":1,\"1558907592\":1,\"2213017096\":1,\"2360544800\":1,\"3955810424\":1,\"272558192\":1,\"1226552648\":1,\"1731302080\":1,\"1881370576\":1,\"2468291352\":1,\"1337371936\":1,\"2193969840\":1,\"1225233672\":1,\"1935561680\":1,\"4061168168\":1,\"603145208\":1,\"552122232\":1,\"3303788176\":1,\"1655746256\":1,\"1805588320\":1,\"1404709120\":1,\"2489808104\":1,\"3633200272\":1,\"1764116024\":1,\"612888888\":1,\"65828896\":1,\"3760394392\":1,\"2609229016\":1,\"3563655328\":1,\"3530396248\":1,\"1503893184\":1,\"4086958072\":1,\"1190305512\":1,\"806165960\":1,\"2330645552\":1,\"2565860128\":1,\"4245224744\":1,\"4290332968\":1,\"3816809680\":1,\"1731756096\":1,\"1958936056\":1,\"3260819152\":1,\"580197864\":1,\"987543272\":1,\"855783312\":1,\"2977809568\":1,\"2304156000\":1,\"4292843744\":1,\"102433336\":1,\"3382348056\":1,\"1583874176\":1,\"4030843888\":1,\"2806962832\":1,\"1027675616\":1,\"1368990104\":1,\"2968221928\":1,\"4108864432\":1,\"573687992\":1,\"3543193024\":1,\"915365216\":1,\"2398957320\":1,\"905451816\":1,\"3645704632\":1,\"2402616856\":1,\"3895858936\":1,\"2778828512\":1,\"2244131928\":1,\"3656171680\":1,\"2332508616\":1,\"2983233488\":1,\"4071616712\":1,\"277607960\":1,\"1584636592\":1,\"1691365664\":1,\"2256249280\":1,\"1087202040\":1,\"1274958032\":1,\"2610280200\":1,\"2416624344\":1,\"628806296\":1,\"348750888\":1,\"1093229552\":1,\"1032561952\":1,\"2424530240\":1,\"1220979848\":1,\"1628441040\":1,\"2646915792\":1,\"374883024\":1,\"2142571840\":1,\"18039456\":1,\"51483176\":1,\"3246251144\":1,\"2282816104\":1,\"538583928\":1,\"528013376\":1,\"2991483680\":1,\"3905412016\":1,\"189579960\":1,\"451549632\":1,\"672548352\":1,\"1333121952\":1,\"144147328\":1,\"2561248448\":1,\"2358573544\":1,\"2107445648\":1,\"1689309576\":1,\"19222088\":1,\"4011024600\":1,\"2984760960\":1,\"3229899560\":1},\"redirect_to\":\"\",\"ts\":1784353506},\"seo_overview_ts\":1784353505,\"seo_overview_finding\":[],\"core_overview_ts\":1784129158,\"core_overview_finding\":[],\"plugin_initialized\":1,\"quickicon_initialized\":1,\"autosecure\":0,\"autosecure_last\":0,\"tmp_autoclean\":0,\"tmp_keep\":[],\"autoupdate_notify\":0,\"autoupdate_ext\":0,\"autoupdate_all\":0,\"autoupdate_manual\":0,\"autoupdate_mail_success\":0,\"autoupdate_include\":[],\"autoupdate_keep\":2,\"autoupdate_interval\":86400,\"autoupdate_schedule\":\"weekly\",\"autoupdate_hour\":21,\"autoupdate_weekday\":5,\"autoupdate_grace\":0,\"autoupdate_malscan\":1,\"s_php\":1,\"s_types\":1,\"s_ext\":\"7z,avif,bmp,br,css,csv,doc,docx,eot,gif,gz,htm,html,ico,ics,jp2,jpe,jpeg,jpg,js,json,m4a,m4v,map,mjs,mov,mp3,mp4,mpeg,mpg,odp,ods,odt,oga,ogg,ogv,opus,otf,pdf,png,ppt,pptx,rar,rtf,svg,svgz,tif,tiff,ttf,txt,vtt,wasm,wav,webm,webmanifest,webp,woff,woff2,xls,xlsx,xml,xsl,zip\",\"s_files\":[\"administrator\\/components\\/com_akeeba\\/restore.php\",\"administrator\\/components\\/com_akeebabackup\\/restore.php\",\"joomla-connector.php\"],\"s_dirs_php\":[\"plugins\\/system\\/bfnetwork\"],\"s_dirs_static\":[],\"allow_paths\":[],\"s_dotfiles\":1,\"s_wellknown\":1,\"s_sensitive\":1,\"s_manifests\":0,\"s_sysdirs\":1,\"s_sysdirs_list\":[\"administrator\\/cache\",\"administrator\\/logs\",\"cache\",\"cli\",\"log\",\"logs\",\"tmp\"],\"p_compress\":1,\"p_precomp\":1,\"p_expires\":1,\"p_etag\":0,\"custom_top\":\"\",\"custom_bottom\":\"\",\"file_sha1\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"last_written\":\"2026-07-15 17:25:57\",\"last_test\":{\"checks\":[{\"label\":\"Startseite erreichbar\",\"url\":\"https:\\/\\/belezy.eu\\/\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"Backend erreichbar (401 = Passwortschutz aktiv)\",\"url\":\"https:\\/\\/belezy.eu\\/administrator\\/index.php\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"PHP-Schild aktiv (Test-Aufruf wird mit 403 abgewiesen)\",\"url\":\"https:\\/\\/belezy.eu\\/htpx-canary-567e3eb1.php\\/htp\",\"status\":403,\"ok\":true,\"note\":\"\"},{\"label\":\"configuration.php gesperrt\",\"url\":\"https:\\/\\/belezy.eu\\/configuration.php\",\"status\":403,\"ok\":true,\"note\":\"\"}],\"regression\":false,\"reason\":\"\",\"time\":\"2026-07-15 17:25:57\"},\"guard_dir\":\"\",\"htaccess_cap\":[]},\"htp_defs\":{\"schema\":1,\"version\":\"2026-07-17.e7aa4b\",\"signatures\":[{\"id\":\"jce-profiles-import\",\"label\":\"JCE Profil-Import (CVE-2026-48907)\",\"label_en\":\"JCE profile import (CVE-2026-48907)\",\"desc\":\"Unauthentifizierter Profil-Import im JCE-Editor - Beginn der aktuellen RCE-Kette (schaltet PHP-Uploads frei). Kein legitimer Frontend-Aufruf.\",\"desc_en\":\"Unauthenticated profile import in the JCE editor - start of the current RCE chain (enables PHP uploads). No legitimate frontend call.\",\"default\":1,\"qs\":\"option=com_jce.*task=profiles\\\\.import\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-rpc-upload\",\"label\":\"JCE Webshell-Upload via plugin.rpc (CVE-2026-48907)\",\"label_en\":\"JCE webshell upload via plugin.rpc (CVE-2026-48907)\",\"desc\":\"Datei-Upload \\u00fcber den JCE-Dateibrowser (plugin.rpc, method=upload). Greift nur im Frontend; eingeloggte Autoren (legitimer Editor-Upload) bleiben unber\\u00fchrt.\",\"desc_en\":\"File upload via the JCE file browser (plugin.rpc, method=upload). Applies only 
  on the frontend; logged-in authors (legitimate editor upload) are unaffected.\",\"default\":1,\"qs\":\"option=com_jce.*task=plugin\\\\.rpc.*method=upload\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-imgmanager\",\"label\":\"JCE Image Manager (Alt-Exploit)\",\"label_en\":\"JCE Image Manager (legacy exploit)\",\"desc\":\"Klassischer unauthentifizierter Datei-Upload \\u00fcber den JCE-Bildmanager (sehr alte JCE-Versionen).\",\"desc_en\":\"Classic unauthenticated file upload via the JCE image manager (very old JCE versions).\",\"default\":1,\"qs\":\"option=com_jce.*plugin=imgmanager.*method=form\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"novarain-nrframework\",\"label\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"label_en\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"desc\":\"CVE-2026-21627: unauthentifizierte PHP-Datei-Einbindung \\u00fcber plg_system_nrframework via com_ajax (task=include).\",\"desc_en\":\"CVE-2026-21627: unauthenticated PHP file inclusion via plg_system_nrframework through com_ajax (task=include).\",\"default\":1,\"qs\":\"option=com_ajax.*nrframework.*task=include\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"astroid-ajax\",\"label\":\"Astroid Framework (AJAX-Endpunkt)\",\"label_en\":\"Astroid Framework (AJAX endpoint)\",\"desc\":\"CVE-2026-21628: ungepr\\u00fcfter Astroid-AJAX-Endpunkt (Upload\\/Installation). Coarse-Match auf com_ajax + astroid.\",\"desc_en\":\"CVE-2026-21628: unchecked Astroid AJAX endpoint (upload\\/installation). Coarse match 
  on com_ajax + astroid.\",\"default\":1,\"qs\":\"option=com_ajax.*(plugin|template|view)=astroid\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"helix3-ajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Handler (Datei schreiben\\/l\\u00f6schen)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax handler (file write\\/delete)\",\"desc\":\"Helix3 < 3.1.1: der Ajax-Handler onAjaxHelix3 pr\\u00fcfte weder Login noch Rechte. Trifft gezielt die gef\\u00e4hrlichen Unauth-Aktionen im POST-Body: save (Layout-JSON ins aktive Template schreiben), remove (Datei l\\u00f6schen via Path-Traversal), import (Template-Style-Settings \\u00fcberschreiben) sowie upload_image\\/remove_image\\/updateFonts. Legitime Gast-Aktionen (voting, load) und eingeloggte Template-Nutzung \",\"desc_en\":\"Helix3 < 3.1.1: the onAjaxHelix3 ajax handler checked neither login nor permission. Targets the dangerous unauth POST-body actions: save (write layout JSON into the active template), remove (delete a file via path traversal), import (overwrite template style settings) plus upload_image\\/remove_image\\/updateFonts. Legitimate guest actions (voting, load) 
  and logged-in template use are unaffected. Fix:\",\"default\":1,\"qs\":\"data(?:\\\\[|%5b)action(?:\\\\]|%5d)=(?:save|remove|import|updatefonts)|action=(?:upload_image|remove_image)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helix3-comajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Dispatcher (Datei-Write\\/Delete, Style-Injektion)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax dispatcher (file write\\/delete, style injection)\",\"desc\":\"Helix3 < 3.1.1: der Front-Dispatcher (option=com_ajax mit plugin=helix3) rief onAjaxHelix3 VOR jeder Token-\\/Rechtepr\\u00fcfung auf - unauthentifiziert save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (Datei-Schreiben, Path-Traversal-L\\u00f6schen, Template-Style-Injektion, Stored XSS). Blockt jeden GAST-Aufruf dieses Dispatchers im Frontend (Defense-in-Depth, f\\u00e4ngt auch laufende Scans) - erg\\u00e4nzt d\",\"desc_en\":\"Helix3 < 3.1.1: the front-end dispatcher (option=com_ajax with plugin=helix3) invoked onAjaxHelix3 BEFORE any token\\/permission check - unauthenticated save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (file write, path-traversal delete, template style injection, stored XSS). Blocks every GUEST call of this dispatcher 
  on the front end (defense in depth, also catches ongoing scans) - complemen\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helix3\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helixultimate-comajax\",\"label\":\"Helix Ultimate (JoomShaper): unauth. com_ajax-Dispatcher (Men\\u00fc-Write\\/Datei\\/Export)\",\"label_en\":\"Helix Ultimate (JoomShaper): unauth com_ajax dispatcher (menu write\\/file\\/export)\",\"desc\":\"Helix Ultimate < 2.2.7: der com_ajax-Handler onAjaxHelixultimate (option=com_ajax mit plugin=helixultimate, Action im task-Param) lief VOR jeder Login-\\/Rechtepr\\u00fcfung - ein anonymer Angreifer konnte in die Men\\u00fc-Einstellungen schreiben (Stored XSS bis in die Admin-Sitzung), Dateien per Path-Traversal beliebig l\\u00f6schen, einen Open Redirect ausl\\u00f6sen und das Template ungesch\\u00fctzt exportieren. Blockt\",\"desc_en\":\"Helix Ultimate < 2.2.7: the com_ajax handler onAjaxHelixultimate (option=com_ajax with plugin=helixultimate, action in the task param) ran BEFORE any login\\/permission check - an anonymous attacker could write into the menu settings (stored XSS reaching the admin session), delete files anywhere via path traversal, trigger an open redirect 
  and export the template unprotected. Blocks every GUEST call\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helixultimate\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"comajax-include\",\"label\":\"com_ajax: Datei-Einbindung (generisch)\",\"label_en\":\"com_ajax: file inclusion (generic)\",\"desc\":\"F\\u00e4ngt unbekannte LFI-L\\u00fccken derselben Klasse ab: com_ajax mit task=include\\/require. Frontend.\",\"desc_en\":\"Catches unknown LFI holes of the same class: com_ajax with task=include\\/require. Frontend.\",\"default\":1,\"qs\":\"option=com_ajax.*task=(include|require)(_once)?\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"sppagebuilder-uploadicon\",\"label\":\"SP Page Builder: unauthentifizierter Icon-Upload (RCE)\",\"label_en\":\"SP Page Builder: unauthenticated icon upload (RCE)\",\"desc\":\"Zero-Day in SP Page Builder bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keinerlei Zugriffs-\\/Login-Pr\\u00fcfung - unauthentifizierter Datei-Upload nach \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Nur Mini-WAF (G\\u00e4ste), da eingeloggte Builder den Endpunkt legitim nutzen.\",\"desc_en\":\"Zero-day in SP Page Builder up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login check - unauthenticated file upload to \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Mini-WAF only (guests), since logged-in builders use the endpoint legitimately.\",\"default\":1,\"qs\":\"option=com_sppagebuilder.*task=asset\\\\.uploadCustomIcon\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":null},{\"id\":\"dpcalendar-createdby-sqli\",\"label\":\"DPCalendar: unauth. SQL-Injection (Autor-Filter)\",\"label_en\":\"DPCalendar: unauth SQL injection (author filter)\",\"desc\":\"DPCalendar Blind-SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): der Frontend-Autor-Filter filter_created_by (option=com_dpcalendar, view=events) floss in skalarer Form ungecastet in a.created_by IN (...) - anonymes Auslesen beliebiger DB-Tabellen (nur lesend). Blockt Gast-Anfragen, deren filter_created_by kein reiner Integer ist (legitim = Autor-IDs\\/Ziffern) -> FP-frei. Fix 10.11.2 \\/ 8.19.4.\",\"desc_en\":\"DPCalendar blind SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): the front-end author filter filter_created_by (option=com_dpcalendar, view=events) flowed uncast into a.created_by IN (...) in its scalar form - anonymous read of arbitrary DB tables (read-only). Blocks guest requests whose filter_created_by is not a pure integer (legit = author IDs\\/digits) -> FP-free. Fix 10.11.2 \\/ 8.19.4.\",\"default\":1,\"qs\":\"(?=.*option=com_dpcalendar)(?=.*filter_created_by=[0-9,]*[^0-9,&])\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_dpcalendar\"},{\"id\":\"acym-entityselect-sqli\",\"label\":\"AcyMailing: unauth. SQL-Injection (Entity-Select Spaltenliste)\",\"label_en\":\"AcyMailing: unauth SQL injection (entity-select column list)\",\"desc\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): der Frontend-Endpunkt EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) nahm die Request-Parameter columns\\/join_table ungeprueft in die SELECT-Spaltenliste von UserClass::getMatchingElements auf - ein anonymer Besucher konnte per Subquery beliebige DB-Tabellen (inkl. Passwort-Hashes) auslesen. Blockt GAST-Aufrufe dieses Tasks\",\"desc_en\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): the front-end endpoint EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) placed the request parameters columns\\/join_table unchecked into the SELECT column list of UserClass::getMatchingElements - an anonymous visitor could read arbitrary DB tables (incl. password hashes) via a subquery. Blocks GUEST calls of this task whose c\",\"default\":1,\"qs\":\"(?=.*option=com_acym)(?=.*task=loadEntityFront)(?=.*(?:columns|join_table|join)=[^&]*(?:\\\\(|%28|%2528|\\\\s|%20|\\\\+))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_acym\"},{\"id\":\"quix-article-sqli\",\"label\":\"Quix Page Builder: unauth. SQL-Injection (Einzel-Artikel-AJAX)\",\"label_en\":\"Quix Page Builder: unauth SQL injection (single-article AJAX)\",\"desc\":\"Quix (ThemeXpert, Free UND Pro) bis 6.2.0, inkl. der 5.x-Reihe: der oeffentliche AJAX-Endpunkt (option=com_quix, task=ajax, element=joomla-article) ruft QuixJoomlaArticleElement::getAjax() ohne Login-\\/Token-\\/Lizenz-Pruefung; die Artikel-ID kommt base64-kodiert im data-Parameter und wird in articleExist() UNGECASTET in die DB-Query konkateniert -> unauthentifizierte, fehler-basierte SQL-Injection (\",\"desc_en\":\"Quix (ThemeXpert, Free 
  AND Pro) up to 6.2.0, incl. the 5.x line: the public AJAX endpoint (option=com_quix, task=ajax, element=joomla-article) calls QuixJoomlaArticleElement::getAjax() with no login\\/token\\/license check; the article id arrives base64-encoded in the data parameter 
  and is concatenated UNCAST into the DB query in articleExist() -> unauthenticated error-based SQL injection (CVSS 8.7). \",\"default\":1,\"qs\":\"(?=.*option=com_quix)(?=.*task=ajax\\\\b)(?=.*element=joomla-article\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_quix\"},{\"id\":\"joomcck-tags-sqli\",\"label\":\"JoomCCK: unauth. SQL-Injection (Tag-Verwaltung)\",\"label_en\":\"JoomCCK: unauth SQL injection (tag management)\",\"desc\":\"CVE-2026-49048 (JoomCCK 6.x vor 6.4.1): der Front-End-Task tags.save\\/tags.delete (option=com_joomcck) lief OHNE Token-\\/Login-\\/Rechte-Pruefung und schob den Request-Parameter tag (getString) roh - mit Double-Quote-Ausbruch - in ZWEI aufeinanderfolgende SQL-Statements (Existenz-SELECT + UPDATE). Ein anonymer Besucher konnte die Datenbank auslesen und veraendern (stacked\\/error-based SQLi). Blockt jed\",\"desc_en\":\"CVE-2026-49048 (JoomCCK 6.x before 6.4.1): the front-end task tags.save\\/tags.delete (option=com_joomcck) ran with NO token\\/login\\/permission check 
  and concatenated the request parameter tag (getString) raw - with a double-quote breakout - into TWO consecutive SQL statements (existence SELECT + UPDATE). An anonymous visitor could read 
  and modify the database (stacked\\/error-based SQLi). Blocks every \",\"default\":1,\"qs\":\"(?=.*option=com_joomcck)(?=.*task=tags\\\\.(?:save|delete))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_joomcck\"},{\"id\":\"traversal-encoded\",\"label\":\"Pfad-Klettern (kodierte Varianten)\",\"label_en\":\"Path traversal (encoded variants)\",\"desc\":\"Erg\\u00e4nzt den Standard-Filter um Umgehungstricks: ....\\/\\/ , doppelte Kodierung (%252e), %c0%ae, %2e%2e%5c.\",\"desc_en\":\"Extends the standard filter with bypass tricks: ....\\/\\/ , double encoding (%252e), %c0%ae, %2e%2e%5c.\",\"default\":1,\"qs\":\"(\\\\.{3,}\\/|%252e|%c0%a[ef]|%2e%2e%5c|\\\\.\\\\.%5c)\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-wrapper-uri\",\"label\":\"PHP-Stream-Wrapper im Pfad\",\"label_en\":\"PHP stream wrapper in the path\",\"desc\":\"Blockiert php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ u. a. direkt im angefragten Pfad.\",\"desc_en\":\"Blocks php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ etc. directly in the requested path.\",\"default\":1,\"qs\":null,\"uri\":\"(?:php|phar|data|expect|glob|zlib|zip):\\/\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"api-config-leak\",\"label\":\"Joomla-API Konfigurations-Leak\",\"label_en\":\"Joomla API configuration leak\",\"desc\":\"CVE-2023-23752: sch\\u00fctzt den Endpunkt \\/api\\/...\\/v1\\/config\\/application auch ohne komplette API-Sperre.\",\"desc_en\":\"CVE-2023-23752: protects the \\/api\\/...\\/v1\\/config\\/application endpoint even without a complete API block.\",\"default\":1,\"qs\":null,\"uri\":\"^api\\/index\\\\.php\\/v[0-9]+\\/config\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-object-injection\",\"label\":\"PHP Object Injection (serialisierte Payload)\",\"label_en\":\"PHP object injection (serialised payload)\",\"desc\":\"Serialisiertes PHP-Objekt in einem Parameter (O:\\/C:<L\\u00e4nge>:) - typischer Einstieg f\\u00fcr Object-Injection\\/POP-Ketten. Kommt in normalen Anfragen nicht vor.\",\"desc_en\":\"Serialised PHP object in a parameter (O:\\/C:<length>:) - typical entry point for object injection\\/POP chains. Does not occur in normal requests.\",\"default\":1,\"qs\":\"(?<![a-z0-9])[oc]:[0-9]{1,4}:\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"stream-wrapper-param\",\"label\":\"PHP-Stream-Wrapper in Parameter\",\"label_en\":\"PHP stream wrapper in a parameter\",\"desc\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ u. a. als Parameterwert - LFI\\/RCE-Vektor. Erg\\u00e4nzt die Pfad-Variante (php-wrapper-uri).\",\"desc_en\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ etc. as a parameter value - LFI\\/RCE vector. Complements the path variant (php-wrapper-uri).\",\"default\":1,\"qs\":\"(php|phar|data|expect|glob|zlib|zip):\\/{2}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"param-traversal\",\"label\":\"Pfad-Klettern im Parameter\",\"label_en\":\"Path traversal in a parameter\",\"desc\":\"Mehrfaches ..\\/ als Parameterwert - generisches Directory-Traversal\\/LFI in beliebigen Komponenten.\",\"desc_en\":\"Repeated ..\\/ as a parameter value - generic directory traversal\\/LFI in any component.\",\"default\":1,\"qs\":\"=(\\\\.\\\\.\\/){2,}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null}],\"vuln_extensions\":[{\"element\":\"nrframework\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Novarain \\/ Tassos Framework\",\"below\":\"6.0.38\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21627: unauthentifizierte PHP-Einbindung via com_ajax. Auf 6.0.38 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21627: unauthenticated PHP inclusion via com_ajax. Update to 6.0.38 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\"},{\"element\":\"astroid\",\"type\":\"library\",\"folder\":\"\",\"name\":\"Astroid Framework\",\"below\":\"3.3.11\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21628: unauthentifizierter Datei-Upload via AJAX-Endpunkt (Dropper in \\/images\\/). Auf 3.3.13 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21628: unauthenticated file upload via AJAX endpoint (dropper in \\/images\\/). Update to 3.3.13 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\"},{\"element\":\"helix3\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix3 (JoomShaper)\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Unauthentifizierter com_ajax-Handler (onAjaxHelix3) ohne Login-\\/Rechtepr\\u00fcfung: Angreifer k\\u00f6nnen Dateien ins aktive Template schreiben oder per Path-Traversal l\\u00f6schen (save\\/remove\\/import). Auf Helix3 3.1.1 oder neuer aktualisieren.\",\"note_en\":\"Unauthenticated com_ajax handler (onAjaxHelix3) with no login or permission check: attackers can write files into the active template or delete files via path traversal (save\\/remove\\/import). Update to Helix3 3.1.1 or newer.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix3\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix3\"},{\"element\":\"helixultimate\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix Ultimate (JoomShaper)\",\"below\":\"2.2.7\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische unauth. L\\u00fccke in ALLEN Versionen < 2.2.7: der com_ajax-Handler onAjaxHelixultimate lief VOR jeder Rechtepr\\u00fcfung - anonym in die Men\\u00fcs schreiben (Stored XSS in den Admin), Path-Traversal-L\\u00f6schen, Open Redirect, Template-Export. Auf 2.2.7 updaten (Plugin UND Template). HTProtects Mini-WAF blockt den Aufruf bereits. NICHT mit Helix3 verwechseln.\",\"note_en\":\"Critical unauth flaw in ALL versions below 2.2.7: the com_ajax handler onAjaxHelixultimate ran before any permission check - anonymous menu writes (stored XSS reaching the admin), path-traversal delete, open redirect, template export. Update to 2.2.7 (plugin 
  AND template). HTProtect mini-WAF already blocks the call. Not to be confused with Helix3.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix-ultimate\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix-ultimate\"},{\"element\":\"com_baforms\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Balbooa Forms\",\"below\":\"2.4.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver Zero-Day (RCE), ALLE Versionen bis 2.4.0: der Upload-Endpoint form.uploadAttachmentFile pr\\u00fcft weder Login\\/Token noch Dateityp - ein anonymer Angreifer kann eine PHP-Datei hochladen und ausf\\u00fchren. NOCH KEIN Patch. Sofortma\\u00dfnahme: Upload-Formulare depublizieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active zero-day (RCE), ALL versions up to 2.4.0: the upload endpoint form.uploadAttachmentFile checks neither login\\/token nor file type - an anonymous attacker can upload 
  and run a PHP file. NO patch yet. Interim: unpublish forms with upload fields. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/htprotect.org\\/balbooa-forms\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/balbooa-forms\"},{\"element\":\"com_jce\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JCE Editor\",\"below\":\"2.9.99.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-48907: unauthentifizierter Webshell-Upload (profiles.import + plugin.rpc). Dringend auf JCE 2.9.99.6 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-48907: unauthenticated webshell upload (profiles.import + plugin.rpc). Urgently update to JCE 2.9.99.6 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/jce-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/jce-sicherheitsluecke-joomla\"},{\"element\":\"com_rsfiles\",\"type\":\"component\",\"folder\":\"\",\"name\":\"RSFiles!\",\"below\":\"1.17.12\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver unauthentifizierter Datei-Upload -> RCE, ALLE Versionen bis 1.17.11: der Frontend-Upload (task=rsfiles.upload) pr\\u00fcft weder Login\\/Token noch Dateiendung - ein anonymer Angreifer l\\u00e4dt eine .php nach \\/downloads bzw. \\/briefcase und f\\u00fchrt sie aus. Dringend auf 1.17.12 aktualisieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active unauthenticated file upload -> RCE, ALL versions up to 1.17.11: the front-end upload (task=rsfiles.upload) checks neither login\\/token nor file extension - an anonymous attacker uploads a .php into \\/downloads or \\/briefcase 
  and executes it. Update to 1.17.12 urgently. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\",\"advisory_en\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\"},{\"element\":\"com_edocman\",\"type\":\"component\",\"folder\":\"\",\"name\":\"EDocman\",\"below\":\"3.9\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (alle Versionen bis 3.8): ein anonymer Besucher schleust ueber einen Filter-Parameter eines oeffentlichen Frontend-Endpunkts SQL in eine ungequotete DB-Abfrage ein und kann die Datenbank auslesen (bis hin zu Zugangsdaten). Der genaue Vektor ist bewusst nicht veroeffentlicht. Dringend auf EDocman 3.9.0 aktualisieren.\",\"note_en\":\"Unauthenticated SQL injection (all versions up to 3.8): an anonymous visitor injects SQL through a filter parameter of a public front-end endpoint into an unquoted DB query 
  and can read the database (up to credentials). The exact vector is deliberately undisclosed. Update to EDocman 3.9.0 urgently.\",\"advisory\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\",\"advisory_en\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\"},{\"element\":\"com_foranalytics\",\"type\":\"component\",\"folder\":\"\",\"name\":\"4Analytics\",\"below\":\"5.0.2\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Zwei unauthentifizierte Sicherheitsluecken (CVE-2026-57833 + CVE-2026-58077) in ALLEN Versionen vor 5.0.2 - ein anonymer Angreifer braucht keinen Login. Hersteller Weeblr stuft beide als kritisch ein; technische Details sind 7 Tage embargoed. Dringend auf 4Analytics 5.0.2 aktualisieren (laeuft auf Joomla 3-6).\",\"note_en\":\"Two unauthenticated security flaws (CVE-2026-57833 + CVE-2026-58077) in ALL versions before 5.0.2 - an anonymous attacker needs no login. Vendor Weeblr rates both critical; technical details are under a 7-day embargo. Update to 4Analytics 5.0.2 urgently (runs 
  on Joomla 3-6).\",\"advisory\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\",\"advisory_en\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\"},{\"element\":\"com_quix\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Quix\",\"below\":\"6.2.1\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (Free UND Pro, alle Versionen vor 6.2.1 \\u2013 auch die 5.x-Reihe): ein anonymer Besucher kann die gesamte Datenbank auslesen (CVSS 8.7). HTProtects Mini-WAF blockt den Angriff bereits aktiv. Auf Quix 6.2.1 aktualisieren (Free erh\\u00e4lt 6.2.1 ebenfalls \\u00fcber die Update-Funktion).\",\"note_en\":\"Unauthenticated SQL injection (Free 
  AND Pro, all versions below 6.2.1 \\u2013 including the 5.x line): an anonymous visitor can read the entire database (CVSS 8.7). HTProtect\'s mini-WAF already actively blocks the attack. Update to Quix 6.2.1 (Free receives 6.2.1 too via the update function).\",\"advisory\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\",\"advisory_en\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\"},{\"element\":\"com_joomcck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JoomCCK\",\"below\":\"6.4.1\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Unauthentifizierte SQL-Injection (CVE-2026-49048, JoomCCK 6.x vor 6.4.1): der Front-End-Task \\u201eTag speichern\\/l\\u00f6schen\\\" pr\\u00fcfte weder Login noch Token und \\u00fcbernahm den Parameter \\u201etag\\\" ungefiltert in zwei SQL-Abfragen - ein anonymer Besucher konnte die Datenbank auslesen und ver\\u00e4ndern. HTProtects Mini-WAF blockt den unautorisierten Gast-Aufruf bereits aktiv. Dringend auf JoomCCK 6.4.1 aktualisi\",\"note_en\":\"Unauthenticated SQL injection (CVE-2026-49048, JoomCCK 6.x before 6.4.1): the front-end \\\"save\\/delete tag\\\" task checked neither login nor token 
  and took the \\\"tag\\\" parameter unfiltered into two SQL queries - an anonymous visitor could read 
  and modify the database. HTProtect\'s mini-WAF already actively blocks the unauthorized guest call. Update to JoomCCK 6.4.1 urgently.\",\"advisory\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\",\"advisory_en\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\"},{\"element\":\"com_chronoforms8\",\"type\":\"component\",\"folder\":\"\",\"name\":\"ChronoForms\",\"below\":\"8.0.53\",\"above\":\"8.0.0\",\"severity\":\"high\",\"note\":\"Unauthentifizierte gespeicherte XSS (CVE-2026-58148, ChronoForms 8.x vor 8.0.53): ein anonymer Besucher schleust \\u00fcber ein Formular-Feld JavaScript ein, das ungefiltert gespeichert und sp\\u00e4ter - z. B. beim Ansehen der Einsendungen im Backend - ausgef\\u00fchrt wird, bis hin zur \\u00dcbernahme der Admin-Sitzung (CVSS 8.7). Auf ChronoForms 8.0.53 aktualisieren.\",\"note_en\":\"Unauthenticated stored XSS (CVE-2026-58148, ChronoForms 8.x before 8.0.53): an anonymous visitor injects JavaScript via a form field that is stored unfiltered 
  and later executed - e.g. when viewing the submissions in the backend - up to takeover of the admin session (CVSS 8.7). Update to ChronoForms 8.0.53.\",\"advisory\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\",\"advisory_en\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"10.11.2\",\"above\":\"9.0.0\",\"severity\":\"high\",\"note\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthentifizierte Blind-SQL-Injection - der Autor-Filter filter_created_by (Frontend view=events) floss in skalarer Form ohne Integer-Cast in die Query (a.created_by IN ...); ein anonymer Besucher kann beliebige DB-Tabellen AUSLESEN (nichts \\u00e4ndern). Dringend auf 10.11.2 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthenticated blind SQL injection - the author filter filter_created_by (front-end view=events) flowed uncast (scalar form) into the query (a.created_by IN ...); an anonymous visitor can READ arbitrary DB tables (no writes). Update to 10.11.2 urgently. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"8.19.4\",\"above\":\"8.18.0\",\"severity\":\"high\",\"note\":\"DPCalendar Joomla-3-Linie (8.x), 8.18.0-8.19.3: dieselbe unauth Blind-SQL-Injection \\u00fcber den Autor-Filter filter_created_by (skalar, ohne Integer-Cast, nur lesend). In 8.19.4 (Joomla-3-Fix) behoben. Auf 8.19.4 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar Joomla 3 line (8.x), 8.18.0-8.19.3: same unauth blind SQL injection via the author filter filter_created_by (scalar, no integer cast, read-only). Fixed in 8.19.4 (Joomla 3 fix). Update to 8.19.4. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_phocadownload\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Phoca Download\",\"below\":\"6.1.3\",\"above\":\"6.0.0\",\"severity\":\"high\",\"note\":\"Authentifizierter Datei-Upload -> RCE (Versionen 6.0 bis 6.1.2): ein eingeloggter Nutzer mit Zugriff auf die Upload-Funktion kann eine ausf\\u00fchrbare Datei (z. B. .php) hochladen und ausf\\u00fchren. In 6.1.3 (Security-Release) behoben - auf 6.1.3 oder neuer aktualisieren. HTProtects PHP-Schild verhindert die Ausf\\u00fchrung einer hochgeladenen PHP-Datei in den Upload-Ordnern bereits.\",\"note_en\":\"Authenticated file upload -> RCE (versions 6.0 to 6.1.2): a logged-in user with access to the upload feature can upload 
  and run an executable file (e.g. .php). Fixed in 6.1.3 (security release) - update to 6.1.3 or newer. The HTProtect PHP shield already prevents execution of an uploaded PHP file in the upload folders.\",\"advisory\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\",\"advisory_en\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\"},{\"element\":\"com_acym\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing 6+\",\"below\":\"10.11.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Neuauflage (6+): CVE-2026-56292 unauthentifizierte SQL-Injection (6.0.0-10.11.0) - ein anonymer Angreifer liest beliebige DB-Tabellen inkl. Passwort-Hashes (CVSS 8.7). \\u00c4ltere L\\u00fccken: CVE-2023-28731 unauth Upload\\/RCE unter 8.3.0, CVE-2026-3614 Rechteausweitung 9.11.0-10.8.1. Dringend auf 10.11.1 aktualisieren.\",\"note_en\":\"AcyMailing new line (6+): CVE-2026-56292 unauthenticated SQL injection (6.0.0-10.11.0) - an anonymous attacker reads arbitrary DB tables incl. password hashes (CVSS 8.7). Older holes: CVE-2023-28731 unauth upload\\/RCE below 8.3.0, CVE-2026-3614 privilege escalation 9.11.0-10.8.1. Update to 10.11.1 urgently.\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_acymailing\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing Classic\",\"below\":\"4.9.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Classic (End-of-Life): \\u00e4ltere Versionen mit kritischen L\\u00fccken - unauthentifizierter Datei-Upload der 3.x-\\u00c4ra (RCE, z. B. 3.9.0) sowie Backend-SQL-Injection CVE-2015-7338 (in 4.9.5 behoben). Auf eine unterst\\u00fctzte AcyMailing-Version migrieren. (Die 5.x-Linie hat keine bekannte sehr kritische L\\u00fccke; CSV-Injection CVE-2018-9107 in 5.9.1-5.9.5 ist niedrig\\/client-seitig.)\",\"note_en\":\"AcyMailing Classic (end-of-life): older versions with critical holes - unauthenticated file upload of the 3.x era (RCE, e.g. 3.9.0) 
  and backend SQL injection CVE-2015-7338 (fixed in 4.9.5). Migrate to a supported AcyMailing version. (The 5.x line has no known very critical hole; CSV injection CVE-2018-9107 in 5.9.1-5.9.5 is low\\/client-side.)\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_igallery\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Ignite Gallery\",\"below\":\"5.4.1\",\"above\":\"5.0.0\",\"severity\":\"high\",\"note\":\"Ignite Gallery 5.0.0 bis 5.4.0: Stored XSS (hoch) durch fehlendes Output-Escaping beim Hochladen\\/Bearbeiten von Bildern, dazu SSRF (ungefilterte Video-URL) und eine Rechteausweitung beim Download geschuetzter\\/unveroeffentlichter Bilder. Ausnutzbar von Nutzern MIT Upload-\\/Bearbeitungsrecht (Frontend oder Backend). Auf 5.4.1 oder neuer aktualisieren.\",\"note_en\":\"Ignite Gallery 5.0.0 to 5.4.0: stored XSS (high) via missing output escaping when uploading\\/editing images, plus SSRF (unfiltered video URL) 
  and a privilege escalation when downloading restricted\\/unpublished images. Exploitable by users WITH upload\\/edit permission (frontend or backend). Update to 5.4.1 or newer.\",\"advisory\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\",\"advisory_en\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"4.0.8\",\"above\":\"4.0.0\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939 (4.x-Linie 4.0.0-4.0.7): das Event-Formular (task=submit.submit) pr\\u00fcft nur das CSRF-Token, keine Zugriffsrechte - anonymer Datei-Upload. Voller RCE nur auf Joomla 6 (Core blockt .php nicht mehr); auf Joomla <=5 mildert der Core-Filter, die Zugriffsl\\u00fccke bleibt. Dringend auf 4.0.8 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits.\",\"note_en\":\"CVE-2026-48939 (4.x line 4.0.0-4.0.7): the event form (task=submit.submit) checks only the CSRF token, no access rights - anonymous file upload. Full RCE only 
  on Joomla 6 (core no longer blocks .php); 
  on Joomla <=5 the core filter mitigates but the access flaw remains. Update to 4.0.8 urgently. The HTProtect file shield already prevents execution.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"3.9.15\",\"above\":\"3.2.1\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939, 3.x-Linie 3.2.1-3.9.14: dieselbe Zugriffsl\\u00fccke im Event-Formular (task=submit.submit, keine Rechtepr\\u00fcfung, anonymer Datei-Upload). In 3.9.15 (Security-Backport f\\u00fcr Joomla 3) behoben. Dringend auf 3.9.15 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits. (Voller RCE v. a. auf Joomla 6.)\",\"note_en\":\"CVE-2026-48939, 3.x line 3.2.1-3.9.14: same access-control flaw in the event form (task=submit.submit, no permission check, anonymous file upload). Fixed in 3.9.15 (security backport for Joomla 3). Update to 3.9.15 urgently. The HTProtect file shield already prevents execution. (Full RCE mainly 
  on Joomla 6.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_sppagebuilder\",\"type\":\"component\",\"folder\":\"\",\"name\":\"SP Page Builder\",\"below\":\"6.6.2\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Zero-Day (RCE) bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keine Zugriffs-\\/Login-\\/Token-Pr\\u00fcfung - jeder konnte ohne Login eine beliebige Datei hochladen und ausf\\u00fchren (Remote Code Execution). Wurde aktiv ausgenutzt. Dringend auf 6.6.2 aktualisieren. (HTProtects Mini-WAF blockt den unauthentifizierten Aufruf, das Dateischild verhindert zus\\u00e4tzlich die Ausf\\u00fchrung einer hoc\",\"note_en\":\"Zero-day (RCE) up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login\\/token check - anyone could upload 
  and execute an arbitrary file without logging in (remote code execution). Actively exploited. Update to 6.6.2 urgently. (HTProtect mini-WAF blocks the unauthenticated call, 
  and the file shield additionally prevents an uploaded PHP shell 
  from executing.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.6\",\"above\":\"3.5.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) bis 3.5.10: ein Front-End-Upload-Endpunkt (zum Hinzuf\\u00fcgen von Bildern) pr\\u00fcfte nur das CSRF-Token, aber keine Zugriffsrechte und keinen Dateityp - ein nicht eingeloggter Angreifer konnte eine beliebige Datei (z. B. PHP-Shell) in einen frei w\\u00e4hlbaren Ordner hochladen und ausf\\u00fchren (Remote Code Execution). Dringend auf 3.6.0 aktualisieren. (HTProtects generischer Upload-Sch\",\"note_en\":\"Critical flaw (RCE) up to 3.5.10: a front-end upload endpoint (for adding images) only verified the CSRF token but no access rights 
  and no file type - an unauthenticated attacker could upload an arbitrary file (e.g. a PHP shell) into a freely chosen folder 
  and execute it (remote code execution). Update to 3.6.0 urgently. (The HTProtect generic upload protection already blocks the unauthenticated u\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.4.10\",\"above\":\"3.2.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-4-Linie unter 3.4.10: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.4.10 (Backport) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Dateischild verh\",\"note_en\":\"Critical flaw (RCE) in the Joomla 4 line below 3.4.10: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder 
  and executable. Fixed in 3.4.10 (backport). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents execution.)\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-3-Linie unter 3.1.1: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.1.1 (Backport f\\u00fcr Joomla 3) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Date\",\"note_en\":\"Critical flaw (RCE) in the Joomla 3 line below 3.1.1: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder 
  and executable. Fixed in 3.1.1 (backport for Joomla 3). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents ex\",\"advisory\":\"\",\"advisory_en\":\"\"}],\"php_min\":\"8.1\",\"fetched\":\"2026-07-18 10:41:45\",\"fetched_ts\":1784364105,\"joomla_latest\":{\"3\":\"3.10.12\",\"4\":\"4.4.14\",\"5\":\"5.4.7\",\"6\":\"6.1.2\"},\"joomla_latest_ts\":1784315832,\"joomla_latest_try\":1784315832},\"htp_malware\":{\"schema\":1,\"version\":\"2026-07-14.66aa16\",\"sigs\":[{\"id\":\"backdoor-prepend-sshkey\",\"all\":[\"auto_prepend_file\",\"authorized_keys\"]},{\"id\":\"cred-stealer-ctfaudit\",\"any\":[\"x-ctf-audit\",\"jlib_audit_gid\"]},{\"id\":\"upload-shell-form\",\"all\":[\"move_uploaded_file\",\"check directory permissions\"]},{\"id\":\"sppb-iconfont-shell\",\"any\":[\"sppbwhoami\"]},{\"id\":\"remote-eval-loader\",\"all\":[\"eval(\\\"?>\\\"\"],\"any\":[\"fetchcontentfromurl\",\"file_get_contents(\\\"http\",\"file_get_contents(\'http\"]},{\"id\":\"seo-doorway-slot\",\"any\":[\"slot gacor\",\"situs slot gacor\"]},{\"id\":\"filemanager-backdoor-data\",\"all\":[\"<?php exit;?>{\",\"\\\"groupinfo\\\"\",\"\\\"sizemax\\\"\"]},{\"id\":\"encrypted-eval-openssl\",\"all\":[\"openssl_raw_data\",\"aes-256-cbc\"],\"not\":[\"openssl_decrypt\",\"openssl_encrypt\"]},{\"id\":\"0xnix-split-encrypted\",\"all\":[\"0xnix encrypted code\"]},{\"id\":\"upload-shell-devco1\",\"all\":[\"move_uploaded_file\",\"devco1\"]},{\"id\":\"upload-shell-uname-form\",\"all\":[\"move_uploaded_file\",\"php_uname\",\"multipart\\/form-data\"]},{\"id\":\"hacktool-adminer\",\"all\":[\"adminer_errors\",\"idf_unescape\"]},{\"id\":\"webshell-range-obfuscator\",\"all\":[\"\\\"r\\\".\\\"a\\\".\\\"n\\\".\\\"g\\\".\\\"e\\\"\",\"eval\"]},{\"id\":\"webshell-md5quad-gate\",\"all\":[\"md5(md5(md5(md5(\",\"eval\"]},{\"id\":\"remote-loader-stream-include\",\"any\":[\"include stream_get_meta_data\",\"require stream_get_meta_data\",\"include(stream_get_meta_data\",\"require(stream_get_meta_data\"]},{\"id\":\"webshell-dual-uploader\",\"all\":[\"remote_url\",\"name=\\\"_upl\\\"\",\"name=\\\"_remote\\\"\"]},{\"id\":\"webshell-comment-obfuscator\",\"all\":[\"-*\\/\\/\\/\",\"\\\"~\\\"\"]},{\"id\":\"eval-openssl-shell\",\"label\":\"eval(openssl_decrypt) webshell\",\"all\":[\"eval(openssl_decrypt(\"]},{\"id\":\"dropper-drivergenius-c2\",\"label\":\"Remote-fetch dropper (drivergenius C2)\",\"all\":[\"drivergenius.it.com\"]},{\"id\":\"dropper-backdate-disguise\",\"label\":\"Remote-fetch dropper (mtime-forge + disguise)\",\"all\":[\"getreferencefiletime\",\"generatefilename\"]},{\"id\":\"js-inject-fake-cleaned\",\"label\":\"JS injection w\\/ fake \\\"cleaned\\/safe\\\" comment\",\"all\":[\"artifacts of previous malicious infection\",\"dangerous code has been removed\"]},{\"id\":\"linkforge-seo-injector\",\"label\":\"LinkForge SEO backlink injector\",\"all\":[\"linkforge.cc\"]},{\"id\":\"seo-doorway-cloak\",\"label\":\"SEO cloaking doorway (Thai gambling, fake sitemap)\",\"all\":[\"output_sitemap_page\",\"is_from_google\",\"send_404_and_exit\"]},{\"id\":\"helix-ultimate-xss\",\"label\":\"Helix Ultimate mega-menu XSS campaign\",\"any\":[\"xss.report\",\"_hu_inject\",\"_huinject\",\"sessionstorage._hxd\"]},{\"id\":\"gsocket-c2\",\"label\":\"gsocket reverse-shell C2 marker\",\"any\":[\"gs_args\"]}],\"scan_ext\":[],\"ack\":[\"6608daed700e0afc330788b2a272ca8d\",\"67b5f9a00c7aabf34261c715aeeaadba\",\"9812b693256a0c306cc53368559c7a4b\",\"ec96a3bed6681af996fd37f0818cba6b\",\"abfe3b7513994ae6ac2f33129b5f6e7b\",\"fb2e76c5ebafc2b8ea82e0d35d45fa02\",\"2ec54ce00420cd41dfae5abedc9edcb7\",\"02c1a767857c55d31cae7277bc43bac2\",\"573a5e7374be2925911b552d485a28f3\",\"cdf24443c39d943f8750d4a4420e6581\",\"99af93b919c5b6bc14a82382c39010ec\",\"55e704bb88a8f9ab0d756976c527516b\",\"981b4f5e07bf9cd1249d60d659e4ef93\",\"87d978102ed075a8e58074a0d3595c30\",\"85648deb8324a11400ecaebcfd04ae16\",\"323707d28051b4cbf161420f5f1bb499\",\"19104a261abbdffe7cd1713949b286cf\",\"a72013015988ad7d978ce9841a9668dd\",\"a8af9b93d27c774601e1d8a902145bd7\",\"82c8de717e67a620ca503a1a01a7d909\",\"a8192a3cf6279862054cb3092dad82bf\",\"eae8beb708347cfe54bf87506b572f41\",\"5db6f4cdd20dfee86e05110a2276d748\",\"872e97edc1d4247d2ed86d35f468ff88\",\"da9c67c9b7be2d5a7eb9113d76119abc\",\"d0c5a881e845f93a72e1450259de0d33\",\"ea531694f501221b61a324d3754da603\",\"b8333a512d949684c91c9dd907f9cb0c\",\"2c57aea21d161fe5761ffab0abff8228\",\"93117860cd06939707a4ff1797bebb40\",\"7f58961ebcc0db81b16c2d16072fb084\"],\"community\":0,\"fp\":[{\"all\":[\"easycalccheckplus\"],\"only\":[\"rce\"],\"id\":\"ecc-plus-doc-rce\"},{\"all\":[\"phpoffice\\\\phpspreadsheet\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpspreadsheet-lib\"},{\"any\":[\"cp_errordocument\",\"status-reason\"],\"not\":[\"<!--#exec\",\"<?\"],\"only\":[\"shtml\"],\"id\":\"plesk-error-shtml\"},{\"all\":[\"gumlet\",\"data:\\/\\/application\\/octet-stream\"],\"only\":[\"wrapper\"],\"id\":\"gumlet-imageresize-datawrapper\"},{\"all\":[\"data:\\/\\/image\",\"exif_read_data\"],\"only\":[\"wrapper\"],\"id\":\"exif-data-wrapper\"},{\"all\":[\"phpoffice\\\\phpword\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpword-lib\"},{\"all\":[\"box\\\\spout\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"box-spout-lib\"},{\"all\":[\"sarciszewski\\\\phpfuture\"],\"only\":[\"wrapper\"],\"id\":\"php-future-lib\"},{\"all\":[\"baformsmodelform\"],\"only\":[\"feed:upload-shell-uname-form\"],\"id\":\"fp-baforms-model\"},{\"all\":[\"quixnxt\"],\"only\":[\"goto\"],\"id\":\"fp-quix-goto\"},{\"all\":[\"varexporter\"],\"only\":[\"goto\"],\"id\":\"fp-symfony-varexporter-goto\"},{\"all\":[\"valorapps.com\"],\"only\":[\"idxbuild\"],\"id\":\"fp-easyfolderlisting-changelog\"},{\"all\":[\"matomo.org\"],\"only\":[\"rce\"],\"id\":\"fp-matomo-rce\"},{\"all\":[\"namespace tracy\"],\"only\":[\"phtml\"],\"id\":\"fp-tracy-phtml\"}],\"seo\":{\"weights\":[],\"keywords\":[],\"sigs\":[]},\"recall\":[],\"fetched\":\"2026-07-18 09:11:48\",\"fetched_ts\":1784358708},\"htp_incidents\":{\".htaccess|changed\":1784287304,\"images\\/.htaccess|changed\":1784287304,\"media\\/.htaccess|changed\":1784288226}}'

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	UPDATE	bly_extensions	NULL	range	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.38 ms
checking permissions	0.00 ms
Opening tables	0.01 ms
init	0.01 ms
System lock	0.03 ms
updating	0.06 ms
end	0.00 ms
query end	0.01 ms
closing tables	0.01 ms
freeing items	0.01 ms
cleaning up	0.38 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/administrator/components/com_htprotect/core/watch.php:1021
9	HtpWatch::saveNotified()	JROOT/administrator/components/com_htprotect/core/watch.php:348
8	HtpWatch::recordNotification()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2670
7	PlgSystemHtprotectwatch->notify()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2491
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.05 ms Nach letzter Abfrage: 0.25 ms Abfragespeichernutzung: 0.129 MB Speichernutzung vor Abfrage: 16.602 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #29 #34 #38 #44 #45 #46 #49

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.00 ms
System lock	0.00 ms
optimizing	0.01 ms
statistics	0.03 ms
preparing	0.01 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
9	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/config.php:310
8	HtpConfig::load()	JROOT/administrator/components/com_htprotect/core/config.php:369
7	HtpConfig::saveKeys()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2507
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.02 ms Nach letzter Abfrage: 0.79 ms Abfragespeichernutzung: 0.129 MB Speichernutzung vor Abfrage: 16.632 MB Zeilen zurückgegeben: 1

Doppelte Abfragen: #27 #29 #34 #38 #44 #45 #46 #48

SELECT `params`

  FROM `bly_extensions`

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	SIMPLE	bly_extensions	NULL	ref	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	10.00	Using where

Profil (Profile)

Status	Duration
starting	0.01 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.01 ms
System lock	0.00 ms
optimizing	0.00 ms
statistics	0.02 ms
preparing	0.00 ms
executing	0.00 ms
Sending data	0.02 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.02 ms
cleaning up	0.00 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
10	JDatabaseDriverMysqli->execute()	JROOT/libraries/joomla/database/driver.php:1740
9	JDatabaseDriver->loadResult()	JROOT/administrator/components/com_htprotect/core/config.php:400
8	HtpConfig::save()	JROOT/administrator/components/com_htprotect/core/config.php:375
7	HtpConfig::saveKeys()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2507
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

Abfragezeit: 1.69 ms Nach letzter Abfrage: 1.90 ms Abfragespeichernutzung: 0.004 MB Speichernutzung vor Abfrage: 17.036 MB

Doppelte Abfragen: #47

UPDATE `bly_extensions`

  SET `params` = '{\"htp_shield\":{\"site_path\":\"\",\"sef_rules\":1,\"api_router\":1,\"api_mode\":\"route\",\"fastcgi_auth\":1,\"apache_options\":1,\"follow_symlink\":0,\"force_https\":1,\"www_mode\":0,\"canonical_host\":\"\",\"h_frame\":1,\"h_nosniff\":1,\"h_referrer\":\"strict-origin-when-cross-origin\",\"h_poweredby\":1,\"h_hsts\":0,\"h_hsts_sub\":0,\"h_coop\":0,\"h_permissions\":0,\"f_query\":1,\"f_rfi\":1,\"f_methods\":1,\"f_wpnoise\":1,\"htaccess_external\":0,\"guard_dismissed\":0,\"x_shield\":1,\"x_sigs_off\":[],\"defs_version\":\"2026-07-15.9ac386\",\"mal_whitelist\":[],\"u_harden\":1,\"u_dirs\":[\"images\",\"media\"],\"emergency_lock\":0,\"notify_email\":\"mail@website-bereinigung.de\",\"notify_reminder_days\":14,\"unsub_secret\":\"a3ovOtDuiJ2JWUICnSikGA7204m_W0KkrPOvl88kIDU\",\"unsub_base\":\"https:\\/\\/belezy.eu\\/\",\"site_fp\":\"9d003c1a41c42c108fbc877300d68eac557ccaac\",\"swarm_contrib_id\":\"\",\"swarm_acked\":[],\"watch_manifest\":{\".htaccess\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"images\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\",\"media\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\"},\"core_manifest\":{\"index.php\":\"b1c33443a827fd25d6e033d14bdba8e6f9df6ad1\",\"administrator\\/index.php\":\"7078c5d7b2181900c509c93302f324e2dae228bf\"},\"core_jversion\":\"3.10.11\",\"accounts_watch\":1,\"account_baseline\":{\"374\":{\"id\":374,\"username\":\"hberdel\",\"email\":\"info@belezy.eu\",\"phash\":\"4e4fa5fb0131a9781fca0d873c22f53c2ad8a248\",\"block\":0,\"lastvisit\":\"2026-06-24 12:03:38\",\"pneeds\":0},\"461\":{\"id\":461,\"username\":\"Loose\",\"email\":\"info@wm-loose.de\",\"phash\":\"efabda101d354010a79343bd47474e6e3fc8676d\",\"block\":0,\"lastvisit\":\"2023-02-28 14:32:15\",\"pneeds\":0},\"162201\":{\"id\":162201,\"username\":\"pascall\",\"email\":\"mail@website-bereinigung.de\",\"phash\":\"a77d1a74e85312c45348eeec7605887016661d17\",\"block\":0,\"lastvisit\":\"2026-06-24 15:56:20\",\"pneeds\":0}},\"admin_whitelist\":[],\"seo_watch\":1,\"compat_guard\":1,\"seo_cloaking_auto\":0,\"seo_whitelist\":[],\"seo_topic_ack\":[],\"seo_baseline\":{\"title\":\"ProvenceFerien - Startseite\",\"out_domains\":{\"xdebug.org\":1},\"shingles\":{\"2773276488\":1,\"694934048\":1,\"2276828720\":1,\"1014845744\":1,\"2164272920\":1,\"654648592\":1,\"3252768728\":1,\"2703306816\":1,\"4206898064\":1,\"3965176784\":1,\"324970472\":1,\"3140698272\":1,\"2596003040\":1,\"2737171944\":1,\"95016752\":1,\"1222032616\":1,\"3967628640\":1,\"2144334616\":1,\"1571366176\":1,\"2296853872\":1,\"2149620600\":1,\"1121698424\":1,\"1523411896\":1,\"2049945696\":1,\"2144915136\":1,\"2204935488\":1,\"723865528\":1,\"3725506112\":1,\"1945954912\":1,\"4263363480\":1,\"1309988440\":1,\"1421026616\":1,\"3426863704\":1,\"1030014896\":1,\"912520336\":1,\"2088853496\":1,\"3979502160\":1,\"4116536448\":1,\"2863093792\":1,\"3037412432\":1,\"3620898072\":1,\"2314148544\":1,\"37976\":1,\"2414448336\":1,\"3977858536\":1,\"11385216\":1,\"1409844200\":1,\"1751197192\":1,\"1518609656\":1,\"1130239024\":1,\"716131384\":1,\"1236659328\":1,\"3001742640\":1,\"3903950424\":1,\"2657582952\":1,\"1545708136\":1,\"3170111184\":1,\"4275824384\":1,\"1476852648\":1,\"3518915328\":1,\"2973823744\":1,\"332369504\":1,\"581432120\":1,\"1827905688\":1,\"2062886848\":1,\"2311799488\":1,\"4179887752\":1,\"183707264\":1,\"821579528\":1,\"1552434376\":1,\"3369362064\":1,\"3578063520\":1,\"3682544776\":1,\"365264784\":1,\"2968954048\":1,\"1708211424\":1,\"3133635568\":1,\"1298729048\":1,\"2599037872\":1,\"4081499304\":1,\"187337984\":1,\"362962264\":1,\"2094558736\":1,\"2787016200\":1,\"658564976\":1,\"3893519200\":1,\"2014934032\":1,\"2807223808\":1,\"1971365808\":1,\"1492481664\":1,\"3208575176\":1,\"4132949216\":1,\"1552018832\":1,\"344452216\":1,\"2539551096\":1,\"1882892912\":1,\"547683160\":1,\"1431046296\":1,\"2240553192\":1,\"1993946344\":1,\"2704876872\":1,\"1558974800\":1,\"883158256\":1,\"1213187168\":1,\"3879781728\":1,\"3735037840\":1,\"829495128\":1,\"1020533640\":1,\"2306348504\":1,\"1441885712\":1,\"1365789064\":1,\"3510447536\":1,\"3648057168\":1,\"28501736\":1,\"2051798112\":1,\"4075032544\":1,\"3189454464\":1,\"555083136\":1,\"1550852192\":1,\"1246339560\":1,\"1354898128\":1,\"2981285080\":1,\"815862896\":1,\"703426624\":1,\"305723808\":1,\"249961104\":1,\"3008275536\":1,\"1743788824\":1,\"4265276576\":1,\"3557110600\":1,\"4041208904\":1,\"1327249520\":1,\"1607673584\":1,\"4007425464\":1,\"1175775032\":1,\"2276517544\":1,\"1205991320\":1,\"1113485296\":1,\"315353232\":1,\"2500630616\":1,\"4221532808\":1,\"1980425792\":1,\"2693581640\":1,\"3968187688\":1,\"2974680912\":1,\"3741881144\":1,\"3462925544\":1,\"2964742568\":1,\"3711292792\":1,\"479869424\":1,\"973742744\":1,\"351015224\":1,\"3738520704\":1,\"3335574944\":1,\"1248024752\":1,\"1534907152\":1,\"4101744904\":1,\"433360288\":1,\"2791891896\":1,\"3626748360\":1,\"3196827536\":1,\"1559046784\":1,\"7730296\":1,\"1458451704\":1,\"2911589176\":1,\"454621680\":1,\"179928728\":1,\"1982037912\":1,\"916874840\":1,\"1548123496\":1,\"3846924096\":1,\"4123225216\":1,\"670221008\":1,\"2571777288\":1,\"3627078176\":1,\"293222816\":1,\"281163600\":1,\"2508087208\":1,\"3770727200\":1,\"3556748072\":1,\"3381116688\":1,\"3107900104\":1,\"2034508136\":1,\"1977429088\":1,\"2703274016\":1,\"4139311008\":1,\"4261163824\":1,\"3539583040\":1,\"3792461240\":1,\"2691280184\":1,\"1856123928\":1,\"376102376\":1,\"2521452248\":1,\"3357431832\":1,\"971320240\":1,\"1808893192\":1,\"2709313920\":1,\"444641888\":1,\"2043081592\":1,\"1854799872\":1,\"2071995072\":1,\"1818046032\":1,\"4043405808\":1,\"2965571680\":1,\"1618392856\":1,\"1253472664\":1,\"1925217168\":1,\"933003528\":1,\"2230427152\":1,\"1208455864\":1,\"2025534160\":1,\"1408784776\":1,\"2685059296\":1,\"3489792648\":1,\"1615724560\":1,\"80777296\":1,\"466411848\":1,\"2846665840\":1,\"1911606592\":1,\"2696697384\":1,\"2804037960\":1,\"4138023008\":1,\"1630734352\":1,\"1587613576\":1,\"1950652592\":1,\"2777296976\":1,\"2255302400\":1,\"2621186584\":1,\"36106456\":1,\"2243664024\":1,\"3186220248\":1,\"3286361792\":1,\"4109595712\":1,\"335870296\":1,\"947878136\":1,\"885775072\":1,\"2836090264\":1,\"3195444184\":1,\"1373515616\":1,\"2703441304\":1,\"2999798000\":1,\"4124423392\":1,\"1153004272\":1,\"796890520\":1,\"1247028480\":1,\"958748368\":1,\"1744512424\":1,\"647816080\":1,\"1300060200\":1,\"1148044208\":1,\"3431685056\":1,\"3679148440\":1,\"1466140040\":1,\"1735424048\":1,\"1298914320\":1,\"3451668792\":1,\"3485632672\":1,\"3040222736\":1,\"3818565424\":1,\"428036792\":1,\"2710735120\":1,\"1002378832\":1,\"347500504\":1,\"2570151984\":1,\"2776089360\":1,\"2607914576\":1,\"3758066944\":1,\"897055968\":1,\"237439056\":1,\"3134172856\":1,\"2464987728\":1,\"4214313248\":1,\"48098040\":1,\"2694091560\":1,\"1636308368\":1,\"334606008\":1,\"2144818552\":1,\"3130333816\":1,\"3591606896\":1,\"1894249248\":1,\"4188555200\":1,\"245520800\":1,\"1682089672\":1,\"9149544\":1,\"1372800744\":1,\"2964205104\":1,\"2728041256\":1,\"143834200\":1,\"1108585200\":1,\"2736916224\":1,\"2448768504\":1,\"2365893624\":1,\"2284709784\":1,\"802473640\":1,\"3772932312\":1,\"361847392\":1,\"1137970600\":1,\"1232831160\":1,\"144058216\":1,\"1646278032\":1,\"992984272\":1,\"3634194248\":1,\"3773773072\":1,\"4070217592\":1,\"3903737168\":1,\"431558624\":1,\"2195069352\":1,\"669332312\":1,\"3004089080\":1,\"3885706904\":1,\"2109380128\":1,\"3757583592\":1,\"2545468000\":1,\"3698566936\":1,\"183215536\":1,\"801931600\":1,\"1734328536\":1,\"2074309544\":1,\"2801752600\":1,\"548482512\":1,\"3129297296\":1,\"3367049600\":1,\"1792562160\":1,\"3633067472\":1,\"963883040\":1,\"1263046008\":1,\"539208032\":1,\"3362402488\":1,\"3069180952\":1,\"1120040384\":1,\"2840905640\":1,\"2078889728\":1,\"2274655504\":1,\"111197728\":1,\"2673020880\":1,\"125198544\":1,\"591729768\":1,\"4239283240\":1,\"2427366776\":1,\"56992680\":1,\"2801660040\":1,\"3593402112\":1,\"147956928\":1,\"1693971840\":1,\"3868138536\":1,\"320203224\":1,\"224045520\":1,\"39887024\":1,\"21699200\":1,\"1739726536\":1,\"142599880\":1,\"3747452816\":1,\"597727768\":1,\"4150626032\":1,\"2011179320\":1,\"1296426808\":1,\"1468108424\":1,\"965466024\":1,\"928231432\":1,\"1273095288\":1,\"13803176\":1,\"3529821320\":1,\"1822362464\":1,\"1602423200\":1,\"3045750632\":1,\"2746789680\":1,\"472550200\":1,\"3722023320\":1,\"2292319968\":1,\"4163832904\":1,\"2617823040\":1,\"1372429176\":1,\"4096226856\":1,\"400511176\":1,\"548872256\":1,\"466639536\":1,\"911090304\":1,\"3430473600\":1,\"4207759072\":1,\"1789941360\":1,\"4083465160\":1,\"777022376\":1,\"4197280096\":1,\"2424302952\":1,\"3615809224\":1,\"3578502824\":1,\"3707729224\":1,\"1558907592\":1,\"2213017096\":1,\"2360544800\":1,\"3955810424\":1,\"272558192\":1,\"1226552648\":1,\"1731302080\":1,\"1881370576\":1,\"2468291352\":1,\"1337371936\":1,\"2193969840\":1,\"1225233672\":1,\"1935561680\":1,\"4061168168\":1,\"603145208\":1,\"552122232\":1,\"3303788176\":1,\"1655746256\":1,\"1805588320\":1,\"1404709120\":1,\"2489808104\":1,\"3633200272\":1,\"1764116024\":1,\"612888888\":1,\"65828896\":1,\"3760394392\":1,\"2609229016\":1,\"3563655328\":1,\"3530396248\":1,\"1503893184\":1,\"4086958072\":1,\"1190305512\":1,\"806165960\":1,\"2330645552\":1,\"2565860128\":1,\"4245224744\":1,\"4290332968\":1,\"3816809680\":1,\"1731756096\":1,\"1958936056\":1,\"3260819152\":1,\"580197864\":1,\"987543272\":1,\"855783312\":1,\"2977809568\":1,\"2304156000\":1,\"4292843744\":1,\"102433336\":1,\"3382348056\":1,\"1583874176\":1,\"4030843888\":1,\"2806962832\":1,\"1027675616\":1,\"1368990104\":1,\"2968221928\":1,\"4108864432\":1,\"573687992\":1,\"3543193024\":1,\"915365216\":1,\"2398957320\":1,\"905451816\":1,\"3645704632\":1,\"2402616856\":1,\"3895858936\":1,\"2778828512\":1,\"2244131928\":1,\"3656171680\":1,\"2332508616\":1,\"2983233488\":1,\"4071616712\":1,\"277607960\":1,\"1584636592\":1,\"1691365664\":1,\"2256249280\":1,\"1087202040\":1,\"1274958032\":1,\"2610280200\":1,\"2416624344\":1,\"628806296\":1,\"348750888\":1,\"1093229552\":1,\"1032561952\":1,\"2424530240\":1,\"1220979848\":1,\"1628441040\":1,\"2646915792\":1,\"374883024\":1,\"2142571840\":1,\"18039456\":1,\"51483176\":1,\"3246251144\":1,\"2282816104\":1,\"538583928\":1,\"528013376\":1,\"2991483680\":1,\"3905412016\":1,\"189579960\":1,\"451549632\":1,\"672548352\":1,\"1333121952\":1,\"144147328\":1,\"2561248448\":1,\"2358573544\":1,\"2107445648\":1,\"1689309576\":1,\"19222088\":1,\"4011024600\":1,\"2984760960\":1,\"3229899560\":1},\"redirect_to\":\"\",\"ts\":1784353506},\"seo_overview_ts\":1784353505,\"seo_overview_finding\":[],\"core_overview_ts\":1784129158,\"core_overview_finding\":[],\"plugin_initialized\":1,\"quickicon_initialized\":1,\"autosecure\":0,\"autosecure_last\":0,\"tmp_autoclean\":0,\"tmp_keep\":[],\"autoupdate_notify\":0,\"autoupdate_ext\":0,\"autoupdate_all\":0,\"autoupdate_manual\":0,\"autoupdate_mail_success\":0,\"autoupdate_include\":[],\"autoupdate_keep\":2,\"autoupdate_interval\":86400,\"autoupdate_schedule\":\"weekly\",\"autoupdate_hour\":21,\"autoupdate_weekday\":5,\"autoupdate_grace\":0,\"autoupdate_malscan\":1,\"s_php\":1,\"s_types\":1,\"s_ext\":\"7z,avif,bmp,br,css,csv,doc,docx,eot,gif,gz,htm,html,ico,ics,jp2,jpe,jpeg,jpg,js,json,m4a,m4v,map,mjs,mov,mp3,mp4,mpeg,mpg,odp,ods,odt,oga,ogg,ogv,opus,otf,pdf,png,ppt,pptx,rar,rtf,svg,svgz,tif,tiff,ttf,txt,vtt,wasm,wav,webm,webmanifest,webp,woff,woff2,xls,xlsx,xml,xsl,zip\",\"s_files\":[\"administrator\\/components\\/com_akeeba\\/restore.php\",\"administrator\\/components\\/com_akeebabackup\\/restore.php\",\"joomla-connector.php\"],\"s_dirs_php\":[\"plugins\\/system\\/bfnetwork\"],\"s_dirs_static\":[],\"allow_paths\":[],\"s_dotfiles\":1,\"s_wellknown\":1,\"s_sensitive\":1,\"s_manifests\":0,\"s_sysdirs\":1,\"s_sysdirs_list\":[\"administrator\\/cache\",\"administrator\\/logs\",\"cache\",\"cli\",\"log\",\"logs\",\"tmp\"],\"p_compress\":1,\"p_precomp\":1,\"p_expires\":1,\"p_etag\":0,\"custom_top\":\"\",\"custom_bottom\":\"\",\"file_sha1\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"last_written\":\"2026-07-15 17:25:57\",\"last_test\":{\"checks\":[{\"label\":\"Startseite erreichbar\",\"url\":\"https:\\/\\/belezy.eu\\/\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"Backend erreichbar (401 = Passwortschutz aktiv)\",\"url\":\"https:\\/\\/belezy.eu\\/administrator\\/index.php\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"PHP-Schild aktiv (Test-Aufruf wird mit 403 abgewiesen)\",\"url\":\"https:\\/\\/belezy.eu\\/htpx-canary-567e3eb1.php\\/htp\",\"status\":403,\"ok\":true,\"note\":\"\"},{\"label\":\"configuration.php gesperrt\",\"url\":\"https:\\/\\/belezy.eu\\/configuration.php\",\"status\":403,\"ok\":true,\"note\":\"\"}],\"regression\":false,\"reason\":\"\",\"time\":\"2026-07-15 17:25:57\"},\"guard_dir\":\"\",\"htaccess_cap\":[]},\"htp_defs\":{\"schema\":1,\"version\":\"2026-07-17.e7aa4b\",\"signatures\":[{\"id\":\"jce-profiles-import\",\"label\":\"JCE Profil-Import (CVE-2026-48907)\",\"label_en\":\"JCE profile import (CVE-2026-48907)\",\"desc\":\"Unauthentifizierter Profil-Import im JCE-Editor - Beginn der aktuellen RCE-Kette (schaltet PHP-Uploads frei). Kein legitimer Frontend-Aufruf.\",\"desc_en\":\"Unauthenticated profile import in the JCE editor - start of the current RCE chain (enables PHP uploads). No legitimate frontend call.\",\"default\":1,\"qs\":\"option=com_jce.*task=profiles\\\\.import\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-rpc-upload\",\"label\":\"JCE Webshell-Upload via plugin.rpc (CVE-2026-48907)\",\"label_en\":\"JCE webshell upload via plugin.rpc (CVE-2026-48907)\",\"desc\":\"Datei-Upload \\u00fcber den JCE-Dateibrowser (plugin.rpc, method=upload). Greift nur im Frontend; eingeloggte Autoren (legitimer Editor-Upload) bleiben unber\\u00fchrt.\",\"desc_en\":\"File upload via the JCE file browser (plugin.rpc, method=upload). Applies only 
  on the frontend; logged-in authors (legitimate editor upload) are unaffected.\",\"default\":1,\"qs\":\"option=com_jce.*task=plugin\\\\.rpc.*method=upload\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-imgmanager\",\"label\":\"JCE Image Manager (Alt-Exploit)\",\"label_en\":\"JCE Image Manager (legacy exploit)\",\"desc\":\"Klassischer unauthentifizierter Datei-Upload \\u00fcber den JCE-Bildmanager (sehr alte JCE-Versionen).\",\"desc_en\":\"Classic unauthenticated file upload via the JCE image manager (very old JCE versions).\",\"default\":1,\"qs\":\"option=com_jce.*plugin=imgmanager.*method=form\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"novarain-nrframework\",\"label\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"label_en\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"desc\":\"CVE-2026-21627: unauthentifizierte PHP-Datei-Einbindung \\u00fcber plg_system_nrframework via com_ajax (task=include).\",\"desc_en\":\"CVE-2026-21627: unauthenticated PHP file inclusion via plg_system_nrframework through com_ajax (task=include).\",\"default\":1,\"qs\":\"option=com_ajax.*nrframework.*task=include\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"astroid-ajax\",\"label\":\"Astroid Framework (AJAX-Endpunkt)\",\"label_en\":\"Astroid Framework (AJAX endpoint)\",\"desc\":\"CVE-2026-21628: ungepr\\u00fcfter Astroid-AJAX-Endpunkt (Upload\\/Installation). Coarse-Match auf com_ajax + astroid.\",\"desc_en\":\"CVE-2026-21628: unchecked Astroid AJAX endpoint (upload\\/installation). Coarse match 
  on com_ajax + astroid.\",\"default\":1,\"qs\":\"option=com_ajax.*(plugin|template|view)=astroid\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"helix3-ajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Handler (Datei schreiben\\/l\\u00f6schen)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax handler (file write\\/delete)\",\"desc\":\"Helix3 < 3.1.1: der Ajax-Handler onAjaxHelix3 pr\\u00fcfte weder Login noch Rechte. Trifft gezielt die gef\\u00e4hrlichen Unauth-Aktionen im POST-Body: save (Layout-JSON ins aktive Template schreiben), remove (Datei l\\u00f6schen via Path-Traversal), import (Template-Style-Settings \\u00fcberschreiben) sowie upload_image\\/remove_image\\/updateFonts. Legitime Gast-Aktionen (voting, load) und eingeloggte Template-Nutzung \",\"desc_en\":\"Helix3 < 3.1.1: the onAjaxHelix3 ajax handler checked neither login nor permission. Targets the dangerous unauth POST-body actions: save (write layout JSON into the active template), remove (delete a file via path traversal), import (overwrite template style settings) plus upload_image\\/remove_image\\/updateFonts. Legitimate guest actions (voting, load) 
  and logged-in template use are unaffected. Fix:\",\"default\":1,\"qs\":\"data(?:\\\\[|%5b)action(?:\\\\]|%5d)=(?:save|remove|import|updatefonts)|action=(?:upload_image|remove_image)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helix3-comajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Dispatcher (Datei-Write\\/Delete, Style-Injektion)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax dispatcher (file write\\/delete, style injection)\",\"desc\":\"Helix3 < 3.1.1: der Front-Dispatcher (option=com_ajax mit plugin=helix3) rief onAjaxHelix3 VOR jeder Token-\\/Rechtepr\\u00fcfung auf - unauthentifiziert save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (Datei-Schreiben, Path-Traversal-L\\u00f6schen, Template-Style-Injektion, Stored XSS). Blockt jeden GAST-Aufruf dieses Dispatchers im Frontend (Defense-in-Depth, f\\u00e4ngt auch laufende Scans) - erg\\u00e4nzt d\",\"desc_en\":\"Helix3 < 3.1.1: the front-end dispatcher (option=com_ajax with plugin=helix3) invoked onAjaxHelix3 BEFORE any token\\/permission check - unauthenticated save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (file write, path-traversal delete, template style injection, stored XSS). Blocks every GUEST call of this dispatcher 
  on the front end (defense in depth, also catches ongoing scans) - complemen\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helix3\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helixultimate-comajax\",\"label\":\"Helix Ultimate (JoomShaper): unauth. com_ajax-Dispatcher (Men\\u00fc-Write\\/Datei\\/Export)\",\"label_en\":\"Helix Ultimate (JoomShaper): unauth com_ajax dispatcher (menu write\\/file\\/export)\",\"desc\":\"Helix Ultimate < 2.2.7: der com_ajax-Handler onAjaxHelixultimate (option=com_ajax mit plugin=helixultimate, Action im task-Param) lief VOR jeder Login-\\/Rechtepr\\u00fcfung - ein anonymer Angreifer konnte in die Men\\u00fc-Einstellungen schreiben (Stored XSS bis in die Admin-Sitzung), Dateien per Path-Traversal beliebig l\\u00f6schen, einen Open Redirect ausl\\u00f6sen und das Template ungesch\\u00fctzt exportieren. Blockt\",\"desc_en\":\"Helix Ultimate < 2.2.7: the com_ajax handler onAjaxHelixultimate (option=com_ajax with plugin=helixultimate, action in the task param) ran BEFORE any login\\/permission check - an anonymous attacker could write into the menu settings (stored XSS reaching the admin session), delete files anywhere via path traversal, trigger an open redirect 
  and export the template unprotected. Blocks every GUEST call\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helixultimate\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"comajax-include\",\"label\":\"com_ajax: Datei-Einbindung (generisch)\",\"label_en\":\"com_ajax: file inclusion (generic)\",\"desc\":\"F\\u00e4ngt unbekannte LFI-L\\u00fccken derselben Klasse ab: com_ajax mit task=include\\/require. Frontend.\",\"desc_en\":\"Catches unknown LFI holes of the same class: com_ajax with task=include\\/require. Frontend.\",\"default\":1,\"qs\":\"option=com_ajax.*task=(include|require)(_once)?\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"sppagebuilder-uploadicon\",\"label\":\"SP Page Builder: unauthentifizierter Icon-Upload (RCE)\",\"label_en\":\"SP Page Builder: unauthenticated icon upload (RCE)\",\"desc\":\"Zero-Day in SP Page Builder bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keinerlei Zugriffs-\\/Login-Pr\\u00fcfung - unauthentifizierter Datei-Upload nach \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Nur Mini-WAF (G\\u00e4ste), da eingeloggte Builder den Endpunkt legitim nutzen.\",\"desc_en\":\"Zero-day in SP Page Builder up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login check - unauthenticated file upload to \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Mini-WAF only (guests), since logged-in builders use the endpoint legitimately.\",\"default\":1,\"qs\":\"option=com_sppagebuilder.*task=asset\\\\.uploadCustomIcon\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":null},{\"id\":\"dpcalendar-createdby-sqli\",\"label\":\"DPCalendar: unauth. SQL-Injection (Autor-Filter)\",\"label_en\":\"DPCalendar: unauth SQL injection (author filter)\",\"desc\":\"DPCalendar Blind-SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): der Frontend-Autor-Filter filter_created_by (option=com_dpcalendar, view=events) floss in skalarer Form ungecastet in a.created_by IN (...) - anonymes Auslesen beliebiger DB-Tabellen (nur lesend). Blockt Gast-Anfragen, deren filter_created_by kein reiner Integer ist (legitim = Autor-IDs\\/Ziffern) -> FP-frei. Fix 10.11.2 \\/ 8.19.4.\",\"desc_en\":\"DPCalendar blind SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): the front-end author filter filter_created_by (option=com_dpcalendar, view=events) flowed uncast into a.created_by IN (...) in its scalar form - anonymous read of arbitrary DB tables (read-only). Blocks guest requests whose filter_created_by is not a pure integer (legit = author IDs\\/digits) -> FP-free. Fix 10.11.2 \\/ 8.19.4.\",\"default\":1,\"qs\":\"(?=.*option=com_dpcalendar)(?=.*filter_created_by=[0-9,]*[^0-9,&])\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_dpcalendar\"},{\"id\":\"acym-entityselect-sqli\",\"label\":\"AcyMailing: unauth. SQL-Injection (Entity-Select Spaltenliste)\",\"label_en\":\"AcyMailing: unauth SQL injection (entity-select column list)\",\"desc\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): der Frontend-Endpunkt EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) nahm die Request-Parameter columns\\/join_table ungeprueft in die SELECT-Spaltenliste von UserClass::getMatchingElements auf - ein anonymer Besucher konnte per Subquery beliebige DB-Tabellen (inkl. Passwort-Hashes) auslesen. Blockt GAST-Aufrufe dieses Tasks\",\"desc_en\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): the front-end endpoint EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) placed the request parameters columns\\/join_table unchecked into the SELECT column list of UserClass::getMatchingElements - an anonymous visitor could read arbitrary DB tables (incl. password hashes) via a subquery. Blocks GUEST calls of this task whose c\",\"default\":1,\"qs\":\"(?=.*option=com_acym)(?=.*task=loadEntityFront)(?=.*(?:columns|join_table|join)=[^&]*(?:\\\\(|%28|%2528|\\\\s|%20|\\\\+))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_acym\"},{\"id\":\"quix-article-sqli\",\"label\":\"Quix Page Builder: unauth. SQL-Injection (Einzel-Artikel-AJAX)\",\"label_en\":\"Quix Page Builder: unauth SQL injection (single-article AJAX)\",\"desc\":\"Quix (ThemeXpert, Free UND Pro) bis 6.2.0, inkl. der 5.x-Reihe: der oeffentliche AJAX-Endpunkt (option=com_quix, task=ajax, element=joomla-article) ruft QuixJoomlaArticleElement::getAjax() ohne Login-\\/Token-\\/Lizenz-Pruefung; die Artikel-ID kommt base64-kodiert im data-Parameter und wird in articleExist() UNGECASTET in die DB-Query konkateniert -> unauthentifizierte, fehler-basierte SQL-Injection (\",\"desc_en\":\"Quix (ThemeXpert, Free 
  AND Pro) up to 6.2.0, incl. the 5.x line: the public AJAX endpoint (option=com_quix, task=ajax, element=joomla-article) calls QuixJoomlaArticleElement::getAjax() with no login\\/token\\/license check; the article id arrives base64-encoded in the data parameter 
  and is concatenated UNCAST into the DB query in articleExist() -> unauthenticated error-based SQL injection (CVSS 8.7). \",\"default\":1,\"qs\":\"(?=.*option=com_quix)(?=.*task=ajax\\\\b)(?=.*element=joomla-article\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_quix\"},{\"id\":\"joomcck-tags-sqli\",\"label\":\"JoomCCK: unauth. SQL-Injection (Tag-Verwaltung)\",\"label_en\":\"JoomCCK: unauth SQL injection (tag management)\",\"desc\":\"CVE-2026-49048 (JoomCCK 6.x vor 6.4.1): der Front-End-Task tags.save\\/tags.delete (option=com_joomcck) lief OHNE Token-\\/Login-\\/Rechte-Pruefung und schob den Request-Parameter tag (getString) roh - mit Double-Quote-Ausbruch - in ZWEI aufeinanderfolgende SQL-Statements (Existenz-SELECT + UPDATE). Ein anonymer Besucher konnte die Datenbank auslesen und veraendern (stacked\\/error-based SQLi). Blockt jed\",\"desc_en\":\"CVE-2026-49048 (JoomCCK 6.x before 6.4.1): the front-end task tags.save\\/tags.delete (option=com_joomcck) ran with NO token\\/login\\/permission check 
  and concatenated the request parameter tag (getString) raw - with a double-quote breakout - into TWO consecutive SQL statements (existence SELECT + UPDATE). An anonymous visitor could read 
  and modify the database (stacked\\/error-based SQLi). Blocks every \",\"default\":1,\"qs\":\"(?=.*option=com_joomcck)(?=.*task=tags\\\\.(?:save|delete))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_joomcck\"},{\"id\":\"traversal-encoded\",\"label\":\"Pfad-Klettern (kodierte Varianten)\",\"label_en\":\"Path traversal (encoded variants)\",\"desc\":\"Erg\\u00e4nzt den Standard-Filter um Umgehungstricks: ....\\/\\/ , doppelte Kodierung (%252e), %c0%ae, %2e%2e%5c.\",\"desc_en\":\"Extends the standard filter with bypass tricks: ....\\/\\/ , double encoding (%252e), %c0%ae, %2e%2e%5c.\",\"default\":1,\"qs\":\"(\\\\.{3,}\\/|%252e|%c0%a[ef]|%2e%2e%5c|\\\\.\\\\.%5c)\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-wrapper-uri\",\"label\":\"PHP-Stream-Wrapper im Pfad\",\"label_en\":\"PHP stream wrapper in the path\",\"desc\":\"Blockiert php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ u. a. direkt im angefragten Pfad.\",\"desc_en\":\"Blocks php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ etc. directly in the requested path.\",\"default\":1,\"qs\":null,\"uri\":\"(?:php|phar|data|expect|glob|zlib|zip):\\/\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"api-config-leak\",\"label\":\"Joomla-API Konfigurations-Leak\",\"label_en\":\"Joomla API configuration leak\",\"desc\":\"CVE-2023-23752: sch\\u00fctzt den Endpunkt \\/api\\/...\\/v1\\/config\\/application auch ohne komplette API-Sperre.\",\"desc_en\":\"CVE-2023-23752: protects the \\/api\\/...\\/v1\\/config\\/application endpoint even without a complete API block.\",\"default\":1,\"qs\":null,\"uri\":\"^api\\/index\\\\.php\\/v[0-9]+\\/config\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-object-injection\",\"label\":\"PHP Object Injection (serialisierte Payload)\",\"label_en\":\"PHP object injection (serialised payload)\",\"desc\":\"Serialisiertes PHP-Objekt in einem Parameter (O:\\/C:<L\\u00e4nge>:) - typischer Einstieg f\\u00fcr Object-Injection\\/POP-Ketten. Kommt in normalen Anfragen nicht vor.\",\"desc_en\":\"Serialised PHP object in a parameter (O:\\/C:<length>:) - typical entry point for object injection\\/POP chains. Does not occur in normal requests.\",\"default\":1,\"qs\":\"(?<![a-z0-9])[oc]:[0-9]{1,4}:\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"stream-wrapper-param\",\"label\":\"PHP-Stream-Wrapper in Parameter\",\"label_en\":\"PHP stream wrapper in a parameter\",\"desc\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ u. a. als Parameterwert - LFI\\/RCE-Vektor. Erg\\u00e4nzt die Pfad-Variante (php-wrapper-uri).\",\"desc_en\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ etc. as a parameter value - LFI\\/RCE vector. Complements the path variant (php-wrapper-uri).\",\"default\":1,\"qs\":\"(php|phar|data|expect|glob|zlib|zip):\\/{2}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"param-traversal\",\"label\":\"Pfad-Klettern im Parameter\",\"label_en\":\"Path traversal in a parameter\",\"desc\":\"Mehrfaches ..\\/ als Parameterwert - generisches Directory-Traversal\\/LFI in beliebigen Komponenten.\",\"desc_en\":\"Repeated ..\\/ as a parameter value - generic directory traversal\\/LFI in any component.\",\"default\":1,\"qs\":\"=(\\\\.\\\\.\\/){2,}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null}],\"vuln_extensions\":[{\"element\":\"nrframework\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Novarain \\/ Tassos Framework\",\"below\":\"6.0.38\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21627: unauthentifizierte PHP-Einbindung via com_ajax. Auf 6.0.38 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21627: unauthenticated PHP inclusion via com_ajax. Update to 6.0.38 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\"},{\"element\":\"astroid\",\"type\":\"library\",\"folder\":\"\",\"name\":\"Astroid Framework\",\"below\":\"3.3.11\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21628: unauthentifizierter Datei-Upload via AJAX-Endpunkt (Dropper in \\/images\\/). Auf 3.3.13 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21628: unauthenticated file upload via AJAX endpoint (dropper in \\/images\\/). Update to 3.3.13 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\"},{\"element\":\"helix3\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix3 (JoomShaper)\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Unauthentifizierter com_ajax-Handler (onAjaxHelix3) ohne Login-\\/Rechtepr\\u00fcfung: Angreifer k\\u00f6nnen Dateien ins aktive Template schreiben oder per Path-Traversal l\\u00f6schen (save\\/remove\\/import). Auf Helix3 3.1.1 oder neuer aktualisieren.\",\"note_en\":\"Unauthenticated com_ajax handler (onAjaxHelix3) with no login or permission check: attackers can write files into the active template or delete files via path traversal (save\\/remove\\/import). Update to Helix3 3.1.1 or newer.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix3\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix3\"},{\"element\":\"helixultimate\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix Ultimate (JoomShaper)\",\"below\":\"2.2.7\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische unauth. L\\u00fccke in ALLEN Versionen < 2.2.7: der com_ajax-Handler onAjaxHelixultimate lief VOR jeder Rechtepr\\u00fcfung - anonym in die Men\\u00fcs schreiben (Stored XSS in den Admin), Path-Traversal-L\\u00f6schen, Open Redirect, Template-Export. Auf 2.2.7 updaten (Plugin UND Template). HTProtects Mini-WAF blockt den Aufruf bereits. NICHT mit Helix3 verwechseln.\",\"note_en\":\"Critical unauth flaw in ALL versions below 2.2.7: the com_ajax handler onAjaxHelixultimate ran before any permission check - anonymous menu writes (stored XSS reaching the admin), path-traversal delete, open redirect, template export. Update to 2.2.7 (plugin 
  AND template). HTProtect mini-WAF already blocks the call. Not to be confused with Helix3.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix-ultimate\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix-ultimate\"},{\"element\":\"com_baforms\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Balbooa Forms\",\"below\":\"2.4.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver Zero-Day (RCE), ALLE Versionen bis 2.4.0: der Upload-Endpoint form.uploadAttachmentFile pr\\u00fcft weder Login\\/Token noch Dateityp - ein anonymer Angreifer kann eine PHP-Datei hochladen und ausf\\u00fchren. NOCH KEIN Patch. Sofortma\\u00dfnahme: Upload-Formulare depublizieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active zero-day (RCE), ALL versions up to 2.4.0: the upload endpoint form.uploadAttachmentFile checks neither login\\/token nor file type - an anonymous attacker can upload 
  and run a PHP file. NO patch yet. Interim: unpublish forms with upload fields. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/htprotect.org\\/balbooa-forms\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/balbooa-forms\"},{\"element\":\"com_jce\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JCE Editor\",\"below\":\"2.9.99.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-48907: unauthentifizierter Webshell-Upload (profiles.import + plugin.rpc). Dringend auf JCE 2.9.99.6 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-48907: unauthenticated webshell upload (profiles.import + plugin.rpc). Urgently update to JCE 2.9.99.6 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/jce-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/jce-sicherheitsluecke-joomla\"},{\"element\":\"com_rsfiles\",\"type\":\"component\",\"folder\":\"\",\"name\":\"RSFiles!\",\"below\":\"1.17.12\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver unauthentifizierter Datei-Upload -> RCE, ALLE Versionen bis 1.17.11: der Frontend-Upload (task=rsfiles.upload) pr\\u00fcft weder Login\\/Token noch Dateiendung - ein anonymer Angreifer l\\u00e4dt eine .php nach \\/downloads bzw. \\/briefcase und f\\u00fchrt sie aus. Dringend auf 1.17.12 aktualisieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active unauthenticated file upload -> RCE, ALL versions up to 1.17.11: the front-end upload (task=rsfiles.upload) checks neither login\\/token nor file extension - an anonymous attacker uploads a .php into \\/downloads or \\/briefcase 
  and executes it. Update to 1.17.12 urgently. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\",\"advisory_en\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\"},{\"element\":\"com_edocman\",\"type\":\"component\",\"folder\":\"\",\"name\":\"EDocman\",\"below\":\"3.9\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (alle Versionen bis 3.8): ein anonymer Besucher schleust ueber einen Filter-Parameter eines oeffentlichen Frontend-Endpunkts SQL in eine ungequotete DB-Abfrage ein und kann die Datenbank auslesen (bis hin zu Zugangsdaten). Der genaue Vektor ist bewusst nicht veroeffentlicht. Dringend auf EDocman 3.9.0 aktualisieren.\",\"note_en\":\"Unauthenticated SQL injection (all versions up to 3.8): an anonymous visitor injects SQL through a filter parameter of a public front-end endpoint into an unquoted DB query 
  and can read the database (up to credentials). The exact vector is deliberately undisclosed. Update to EDocman 3.9.0 urgently.\",\"advisory\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\",\"advisory_en\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\"},{\"element\":\"com_foranalytics\",\"type\":\"component\",\"folder\":\"\",\"name\":\"4Analytics\",\"below\":\"5.0.2\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Zwei unauthentifizierte Sicherheitsluecken (CVE-2026-57833 + CVE-2026-58077) in ALLEN Versionen vor 5.0.2 - ein anonymer Angreifer braucht keinen Login. Hersteller Weeblr stuft beide als kritisch ein; technische Details sind 7 Tage embargoed. Dringend auf 4Analytics 5.0.2 aktualisieren (laeuft auf Joomla 3-6).\",\"note_en\":\"Two unauthenticated security flaws (CVE-2026-57833 + CVE-2026-58077) in ALL versions before 5.0.2 - an anonymous attacker needs no login. Vendor Weeblr rates both critical; technical details are under a 7-day embargo. Update to 4Analytics 5.0.2 urgently (runs 
  on Joomla 3-6).\",\"advisory\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\",\"advisory_en\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\"},{\"element\":\"com_quix\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Quix\",\"below\":\"6.2.1\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (Free UND Pro, alle Versionen vor 6.2.1 \\u2013 auch die 5.x-Reihe): ein anonymer Besucher kann die gesamte Datenbank auslesen (CVSS 8.7). HTProtects Mini-WAF blockt den Angriff bereits aktiv. Auf Quix 6.2.1 aktualisieren (Free erh\\u00e4lt 6.2.1 ebenfalls \\u00fcber die Update-Funktion).\",\"note_en\":\"Unauthenticated SQL injection (Free 
  AND Pro, all versions below 6.2.1 \\u2013 including the 5.x line): an anonymous visitor can read the entire database (CVSS 8.7). HTProtect\'s mini-WAF already actively blocks the attack. Update to Quix 6.2.1 (Free receives 6.2.1 too via the update function).\",\"advisory\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\",\"advisory_en\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\"},{\"element\":\"com_joomcck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JoomCCK\",\"below\":\"6.4.1\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Unauthentifizierte SQL-Injection (CVE-2026-49048, JoomCCK 6.x vor 6.4.1): der Front-End-Task \\u201eTag speichern\\/l\\u00f6schen\\\" pr\\u00fcfte weder Login noch Token und \\u00fcbernahm den Parameter \\u201etag\\\" ungefiltert in zwei SQL-Abfragen - ein anonymer Besucher konnte die Datenbank auslesen und ver\\u00e4ndern. HTProtects Mini-WAF blockt den unautorisierten Gast-Aufruf bereits aktiv. Dringend auf JoomCCK 6.4.1 aktualisi\",\"note_en\":\"Unauthenticated SQL injection (CVE-2026-49048, JoomCCK 6.x before 6.4.1): the front-end \\\"save\\/delete tag\\\" task checked neither login nor token 
  and took the \\\"tag\\\" parameter unfiltered into two SQL queries - an anonymous visitor could read 
  and modify the database. HTProtect\'s mini-WAF already actively blocks the unauthorized guest call. Update to JoomCCK 6.4.1 urgently.\",\"advisory\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\",\"advisory_en\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\"},{\"element\":\"com_chronoforms8\",\"type\":\"component\",\"folder\":\"\",\"name\":\"ChronoForms\",\"below\":\"8.0.53\",\"above\":\"8.0.0\",\"severity\":\"high\",\"note\":\"Unauthentifizierte gespeicherte XSS (CVE-2026-58148, ChronoForms 8.x vor 8.0.53): ein anonymer Besucher schleust \\u00fcber ein Formular-Feld JavaScript ein, das ungefiltert gespeichert und sp\\u00e4ter - z. B. beim Ansehen der Einsendungen im Backend - ausgef\\u00fchrt wird, bis hin zur \\u00dcbernahme der Admin-Sitzung (CVSS 8.7). Auf ChronoForms 8.0.53 aktualisieren.\",\"note_en\":\"Unauthenticated stored XSS (CVE-2026-58148, ChronoForms 8.x before 8.0.53): an anonymous visitor injects JavaScript via a form field that is stored unfiltered 
  and later executed - e.g. when viewing the submissions in the backend - up to takeover of the admin session (CVSS 8.7). Update to ChronoForms 8.0.53.\",\"advisory\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\",\"advisory_en\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"10.11.2\",\"above\":\"9.0.0\",\"severity\":\"high\",\"note\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthentifizierte Blind-SQL-Injection - der Autor-Filter filter_created_by (Frontend view=events) floss in skalarer Form ohne Integer-Cast in die Query (a.created_by IN ...); ein anonymer Besucher kann beliebige DB-Tabellen AUSLESEN (nichts \\u00e4ndern). Dringend auf 10.11.2 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthenticated blind SQL injection - the author filter filter_created_by (front-end view=events) flowed uncast (scalar form) into the query (a.created_by IN ...); an anonymous visitor can READ arbitrary DB tables (no writes). Update to 10.11.2 urgently. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"8.19.4\",\"above\":\"8.18.0\",\"severity\":\"high\",\"note\":\"DPCalendar Joomla-3-Linie (8.x), 8.18.0-8.19.3: dieselbe unauth Blind-SQL-Injection \\u00fcber den Autor-Filter filter_created_by (skalar, ohne Integer-Cast, nur lesend). In 8.19.4 (Joomla-3-Fix) behoben. Auf 8.19.4 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar Joomla 3 line (8.x), 8.18.0-8.19.3: same unauth blind SQL injection via the author filter filter_created_by (scalar, no integer cast, read-only). Fixed in 8.19.4 (Joomla 3 fix). Update to 8.19.4. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_phocadownload\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Phoca Download\",\"below\":\"6.1.3\",\"above\":\"6.0.0\",\"severity\":\"high\",\"note\":\"Authentifizierter Datei-Upload -> RCE (Versionen 6.0 bis 6.1.2): ein eingeloggter Nutzer mit Zugriff auf die Upload-Funktion kann eine ausf\\u00fchrbare Datei (z. B. .php) hochladen und ausf\\u00fchren. In 6.1.3 (Security-Release) behoben - auf 6.1.3 oder neuer aktualisieren. HTProtects PHP-Schild verhindert die Ausf\\u00fchrung einer hochgeladenen PHP-Datei in den Upload-Ordnern bereits.\",\"note_en\":\"Authenticated file upload -> RCE (versions 6.0 to 6.1.2): a logged-in user with access to the upload feature can upload 
  and run an executable file (e.g. .php). Fixed in 6.1.3 (security release) - update to 6.1.3 or newer. The HTProtect PHP shield already prevents execution of an uploaded PHP file in the upload folders.\",\"advisory\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\",\"advisory_en\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\"},{\"element\":\"com_acym\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing 6+\",\"below\":\"10.11.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Neuauflage (6+): CVE-2026-56292 unauthentifizierte SQL-Injection (6.0.0-10.11.0) - ein anonymer Angreifer liest beliebige DB-Tabellen inkl. Passwort-Hashes (CVSS 8.7). \\u00c4ltere L\\u00fccken: CVE-2023-28731 unauth Upload\\/RCE unter 8.3.0, CVE-2026-3614 Rechteausweitung 9.11.0-10.8.1. Dringend auf 10.11.1 aktualisieren.\",\"note_en\":\"AcyMailing new line (6+): CVE-2026-56292 unauthenticated SQL injection (6.0.0-10.11.0) - an anonymous attacker reads arbitrary DB tables incl. password hashes (CVSS 8.7). Older holes: CVE-2023-28731 unauth upload\\/RCE below 8.3.0, CVE-2026-3614 privilege escalation 9.11.0-10.8.1. Update to 10.11.1 urgently.\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_acymailing\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing Classic\",\"below\":\"4.9.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Classic (End-of-Life): \\u00e4ltere Versionen mit kritischen L\\u00fccken - unauthentifizierter Datei-Upload der 3.x-\\u00c4ra (RCE, z. B. 3.9.0) sowie Backend-SQL-Injection CVE-2015-7338 (in 4.9.5 behoben). Auf eine unterst\\u00fctzte AcyMailing-Version migrieren. (Die 5.x-Linie hat keine bekannte sehr kritische L\\u00fccke; CSV-Injection CVE-2018-9107 in 5.9.1-5.9.5 ist niedrig\\/client-seitig.)\",\"note_en\":\"AcyMailing Classic (end-of-life): older versions with critical holes - unauthenticated file upload of the 3.x era (RCE, e.g. 3.9.0) 
  and backend SQL injection CVE-2015-7338 (fixed in 4.9.5). Migrate to a supported AcyMailing version. (The 5.x line has no known very critical hole; CSV injection CVE-2018-9107 in 5.9.1-5.9.5 is low\\/client-side.)\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_igallery\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Ignite Gallery\",\"below\":\"5.4.1\",\"above\":\"5.0.0\",\"severity\":\"high\",\"note\":\"Ignite Gallery 5.0.0 bis 5.4.0: Stored XSS (hoch) durch fehlendes Output-Escaping beim Hochladen\\/Bearbeiten von Bildern, dazu SSRF (ungefilterte Video-URL) und eine Rechteausweitung beim Download geschuetzter\\/unveroeffentlichter Bilder. Ausnutzbar von Nutzern MIT Upload-\\/Bearbeitungsrecht (Frontend oder Backend). Auf 5.4.1 oder neuer aktualisieren.\",\"note_en\":\"Ignite Gallery 5.0.0 to 5.4.0: stored XSS (high) via missing output escaping when uploading\\/editing images, plus SSRF (unfiltered video URL) 
  and a privilege escalation when downloading restricted\\/unpublished images. Exploitable by users WITH upload\\/edit permission (frontend or backend). Update to 5.4.1 or newer.\",\"advisory\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\",\"advisory_en\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"4.0.8\",\"above\":\"4.0.0\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939 (4.x-Linie 4.0.0-4.0.7): das Event-Formular (task=submit.submit) pr\\u00fcft nur das CSRF-Token, keine Zugriffsrechte - anonymer Datei-Upload. Voller RCE nur auf Joomla 6 (Core blockt .php nicht mehr); auf Joomla <=5 mildert der Core-Filter, die Zugriffsl\\u00fccke bleibt. Dringend auf 4.0.8 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits.\",\"note_en\":\"CVE-2026-48939 (4.x line 4.0.0-4.0.7): the event form (task=submit.submit) checks only the CSRF token, no access rights - anonymous file upload. Full RCE only 
  on Joomla 6 (core no longer blocks .php); 
  on Joomla <=5 the core filter mitigates but the access flaw remains. Update to 4.0.8 urgently. The HTProtect file shield already prevents execution.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"3.9.15\",\"above\":\"3.2.1\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939, 3.x-Linie 3.2.1-3.9.14: dieselbe Zugriffsl\\u00fccke im Event-Formular (task=submit.submit, keine Rechtepr\\u00fcfung, anonymer Datei-Upload). In 3.9.15 (Security-Backport f\\u00fcr Joomla 3) behoben. Dringend auf 3.9.15 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits. (Voller RCE v. a. auf Joomla 6.)\",\"note_en\":\"CVE-2026-48939, 3.x line 3.2.1-3.9.14: same access-control flaw in the event form (task=submit.submit, no permission check, anonymous file upload). Fixed in 3.9.15 (security backport for Joomla 3). Update to 3.9.15 urgently. The HTProtect file shield already prevents execution. (Full RCE mainly 
  on Joomla 6.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_sppagebuilder\",\"type\":\"component\",\"folder\":\"\",\"name\":\"SP Page Builder\",\"below\":\"6.6.2\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Zero-Day (RCE) bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keine Zugriffs-\\/Login-\\/Token-Pr\\u00fcfung - jeder konnte ohne Login eine beliebige Datei hochladen und ausf\\u00fchren (Remote Code Execution). Wurde aktiv ausgenutzt. Dringend auf 6.6.2 aktualisieren. (HTProtects Mini-WAF blockt den unauthentifizierten Aufruf, das Dateischild verhindert zus\\u00e4tzlich die Ausf\\u00fchrung einer hoc\",\"note_en\":\"Zero-day (RCE) up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login\\/token check - anyone could upload 
  and execute an arbitrary file without logging in (remote code execution). Actively exploited. Update to 6.6.2 urgently. (HTProtect mini-WAF blocks the unauthenticated call, 
  and the file shield additionally prevents an uploaded PHP shell 
  from executing.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.6\",\"above\":\"3.5.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) bis 3.5.10: ein Front-End-Upload-Endpunkt (zum Hinzuf\\u00fcgen von Bildern) pr\\u00fcfte nur das CSRF-Token, aber keine Zugriffsrechte und keinen Dateityp - ein nicht eingeloggter Angreifer konnte eine beliebige Datei (z. B. PHP-Shell) in einen frei w\\u00e4hlbaren Ordner hochladen und ausf\\u00fchren (Remote Code Execution). Dringend auf 3.6.0 aktualisieren. (HTProtects generischer Upload-Sch\",\"note_en\":\"Critical flaw (RCE) up to 3.5.10: a front-end upload endpoint (for adding images) only verified the CSRF token but no access rights 
  and no file type - an unauthenticated attacker could upload an arbitrary file (e.g. a PHP shell) into a freely chosen folder 
  and execute it (remote code execution). Update to 3.6.0 urgently. (The HTProtect generic upload protection already blocks the unauthenticated u\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.4.10\",\"above\":\"3.2.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-4-Linie unter 3.4.10: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.4.10 (Backport) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Dateischild verh\",\"note_en\":\"Critical flaw (RCE) in the Joomla 4 line below 3.4.10: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder 
  and executable. Fixed in 3.4.10 (backport). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents execution.)\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-3-Linie unter 3.1.1: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.1.1 (Backport f\\u00fcr Joomla 3) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Date\",\"note_en\":\"Critical flaw (RCE) in the Joomla 3 line below 3.1.1: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder 
  and executable. Fixed in 3.1.1 (backport for Joomla 3). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents ex\",\"advisory\":\"\",\"advisory_en\":\"\"}],\"php_min\":\"8.1\",\"fetched\":\"2026-07-18 10:41:45\",\"fetched_ts\":1784364105,\"joomla_latest\":{\"3\":\"3.10.12\",\"4\":\"4.4.14\",\"5\":\"5.4.7\",\"6\":\"6.1.2\"},\"joomla_latest_ts\":1784315832,\"joomla_latest_try\":1784315832},\"htp_malware\":{\"schema\":1,\"version\":\"2026-07-14.66aa16\",\"sigs\":[{\"id\":\"backdoor-prepend-sshkey\",\"all\":[\"auto_prepend_file\",\"authorized_keys\"]},{\"id\":\"cred-stealer-ctfaudit\",\"any\":[\"x-ctf-audit\",\"jlib_audit_gid\"]},{\"id\":\"upload-shell-form\",\"all\":[\"move_uploaded_file\",\"check directory permissions\"]},{\"id\":\"sppb-iconfont-shell\",\"any\":[\"sppbwhoami\"]},{\"id\":\"remote-eval-loader\",\"all\":[\"eval(\\\"?>\\\"\"],\"any\":[\"fetchcontentfromurl\",\"file_get_contents(\\\"http\",\"file_get_contents(\'http\"]},{\"id\":\"seo-doorway-slot\",\"any\":[\"slot gacor\",\"situs slot gacor\"]},{\"id\":\"filemanager-backdoor-data\",\"all\":[\"<?php exit;?>{\",\"\\\"groupinfo\\\"\",\"\\\"sizemax\\\"\"]},{\"id\":\"encrypted-eval-openssl\",\"all\":[\"openssl_raw_data\",\"aes-256-cbc\"],\"not\":[\"openssl_decrypt\",\"openssl_encrypt\"]},{\"id\":\"0xnix-split-encrypted\",\"all\":[\"0xnix encrypted code\"]},{\"id\":\"upload-shell-devco1\",\"all\":[\"move_uploaded_file\",\"devco1\"]},{\"id\":\"upload-shell-uname-form\",\"all\":[\"move_uploaded_file\",\"php_uname\",\"multipart\\/form-data\"]},{\"id\":\"hacktool-adminer\",\"all\":[\"adminer_errors\",\"idf_unescape\"]},{\"id\":\"webshell-range-obfuscator\",\"all\":[\"\\\"r\\\".\\\"a\\\".\\\"n\\\".\\\"g\\\".\\\"e\\\"\",\"eval\"]},{\"id\":\"webshell-md5quad-gate\",\"all\":[\"md5(md5(md5(md5(\",\"eval\"]},{\"id\":\"remote-loader-stream-include\",\"any\":[\"include stream_get_meta_data\",\"require stream_get_meta_data\",\"include(stream_get_meta_data\",\"require(stream_get_meta_data\"]},{\"id\":\"webshell-dual-uploader\",\"all\":[\"remote_url\",\"name=\\\"_upl\\\"\",\"name=\\\"_remote\\\"\"]},{\"id\":\"webshell-comment-obfuscator\",\"all\":[\"-*\\/\\/\\/\",\"\\\"~\\\"\"]},{\"id\":\"eval-openssl-shell\",\"label\":\"eval(openssl_decrypt) webshell\",\"all\":[\"eval(openssl_decrypt(\"]},{\"id\":\"dropper-drivergenius-c2\",\"label\":\"Remote-fetch dropper (drivergenius C2)\",\"all\":[\"drivergenius.it.com\"]},{\"id\":\"dropper-backdate-disguise\",\"label\":\"Remote-fetch dropper (mtime-forge + disguise)\",\"all\":[\"getreferencefiletime\",\"generatefilename\"]},{\"id\":\"js-inject-fake-cleaned\",\"label\":\"JS injection w\\/ fake \\\"cleaned\\/safe\\\" comment\",\"all\":[\"artifacts of previous malicious infection\",\"dangerous code has been removed\"]},{\"id\":\"linkforge-seo-injector\",\"label\":\"LinkForge SEO backlink injector\",\"all\":[\"linkforge.cc\"]},{\"id\":\"seo-doorway-cloak\",\"label\":\"SEO cloaking doorway (Thai gambling, fake sitemap)\",\"all\":[\"output_sitemap_page\",\"is_from_google\",\"send_404_and_exit\"]},{\"id\":\"helix-ultimate-xss\",\"label\":\"Helix Ultimate mega-menu XSS campaign\",\"any\":[\"xss.report\",\"_hu_inject\",\"_huinject\",\"sessionstorage._hxd\"]},{\"id\":\"gsocket-c2\",\"label\":\"gsocket reverse-shell C2 marker\",\"any\":[\"gs_args\"]}],\"scan_ext\":[],\"ack\":[\"6608daed700e0afc330788b2a272ca8d\",\"67b5f9a00c7aabf34261c715aeeaadba\",\"9812b693256a0c306cc53368559c7a4b\",\"ec96a3bed6681af996fd37f0818cba6b\",\"abfe3b7513994ae6ac2f33129b5f6e7b\",\"fb2e76c5ebafc2b8ea82e0d35d45fa02\",\"2ec54ce00420cd41dfae5abedc9edcb7\",\"02c1a767857c55d31cae7277bc43bac2\",\"573a5e7374be2925911b552d485a28f3\",\"cdf24443c39d943f8750d4a4420e6581\",\"99af93b919c5b6bc14a82382c39010ec\",\"55e704bb88a8f9ab0d756976c527516b\",\"981b4f5e07bf9cd1249d60d659e4ef93\",\"87d978102ed075a8e58074a0d3595c30\",\"85648deb8324a11400ecaebcfd04ae16\",\"323707d28051b4cbf161420f5f1bb499\",\"19104a261abbdffe7cd1713949b286cf\",\"a72013015988ad7d978ce9841a9668dd\",\"a8af9b93d27c774601e1d8a902145bd7\",\"82c8de717e67a620ca503a1a01a7d909\",\"a8192a3cf6279862054cb3092dad82bf\",\"eae8beb708347cfe54bf87506b572f41\",\"5db6f4cdd20dfee86e05110a2276d748\",\"872e97edc1d4247d2ed86d35f468ff88\",\"da9c67c9b7be2d5a7eb9113d76119abc\",\"d0c5a881e845f93a72e1450259de0d33\",\"ea531694f501221b61a324d3754da603\",\"b8333a512d949684c91c9dd907f9cb0c\",\"2c57aea21d161fe5761ffab0abff8228\",\"93117860cd06939707a4ff1797bebb40\",\"7f58961ebcc0db81b16c2d16072fb084\"],\"community\":0,\"fp\":[{\"all\":[\"easycalccheckplus\"],\"only\":[\"rce\"],\"id\":\"ecc-plus-doc-rce\"},{\"all\":[\"phpoffice\\\\phpspreadsheet\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpspreadsheet-lib\"},{\"any\":[\"cp_errordocument\",\"status-reason\"],\"not\":[\"<!--#exec\",\"<?\"],\"only\":[\"shtml\"],\"id\":\"plesk-error-shtml\"},{\"all\":[\"gumlet\",\"data:\\/\\/application\\/octet-stream\"],\"only\":[\"wrapper\"],\"id\":\"gumlet-imageresize-datawrapper\"},{\"all\":[\"data:\\/\\/image\",\"exif_read_data\"],\"only\":[\"wrapper\"],\"id\":\"exif-data-wrapper\"},{\"all\":[\"phpoffice\\\\phpword\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpword-lib\"},{\"all\":[\"box\\\\spout\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"box-spout-lib\"},{\"all\":[\"sarciszewski\\\\phpfuture\"],\"only\":[\"wrapper\"],\"id\":\"php-future-lib\"},{\"all\":[\"baformsmodelform\"],\"only\":[\"feed:upload-shell-uname-form\"],\"id\":\"fp-baforms-model\"},{\"all\":[\"quixnxt\"],\"only\":[\"goto\"],\"id\":\"fp-quix-goto\"},{\"all\":[\"varexporter\"],\"only\":[\"goto\"],\"id\":\"fp-symfony-varexporter-goto\"},{\"all\":[\"valorapps.com\"],\"only\":[\"idxbuild\"],\"id\":\"fp-easyfolderlisting-changelog\"},{\"all\":[\"matomo.org\"],\"only\":[\"rce\"],\"id\":\"fp-matomo-rce\"},{\"all\":[\"namespace tracy\"],\"only\":[\"phtml\"],\"id\":\"fp-tracy-phtml\"}],\"seo\":{\"weights\":[],\"keywords\":[],\"sigs\":[]},\"recall\":[],\"fetched\":\"2026-07-18 09:11:48\",\"fetched_ts\":1784358708},\"htp_incidents\":{\".htaccess|changed\":1784287304,\"images\\/.htaccess|changed\":1784287304,\"media\\/.htaccess|changed\":1784288226}}'

  WHERE `type` = 'component' 
  AND `element` = 'com_htprotect'

Explain

id	select_type	table	partitions	type	possible_keys	key	key_len	ref	rows	filtered	Extra
1	UPDATE	bly_extensions	NULL	range	element_clientid,element_folder_clientid,extension	element_clientid	402	const	1	100.00	Using where

Profil (Profile)

Status	Duration
starting	0.42 ms
checking permissions	0.00 ms
Opening tables	0.00 ms
init	0.01 ms
System lock	0.02 ms
updating	0.08 ms
end	0.00 ms
query end	0.00 ms
closing tables	0.00 ms
freeing items	0.01 ms
cleaning up	0.01 ms

Call Stack

#	Aufrufer	Datei und Zeilennummer
9	JDatabaseDriverMysqli->execute()	JROOT/administrator/components/com_htprotect/core/config.php:428
8	HtpConfig::save()	JROOT/administrator/components/com_htprotect/core/config.php:375
7	HtpConfig::saveKeys()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:2507
6	PlgSystemHtprotectwatch->htpRun()	JROOT/plugins/system/htprotectwatch/htprotectwatch.php:242
5	PlgSystemHtprotectwatch->onAfterRespond()	JROOT/libraries/joomla/event/event.php:70
4	JEvent->update()	JROOT/libraries/joomla/event/dispatcher.php:160
3	JEventDispatcher->trigger()	JROOT/libraries/src/Application/BaseApplication.php:108
2	Joomla\CMS\Application\BaseApplication->triggerEvent()	JROOT/libraries/src/Application/CMSApplication.php:247
1	Joomla\CMS\Application\CMSApplication->execute()	JROOT/index.php:49

[Die „xdebug.file_link_format“-Anweisung der php.ini hinzufügen, um Links zu den Dateien zu erzeugen]

35 verwendete Abfragetypen, sortiert nach Häufigkeit ihrer Ausführung

SELECT-Tabellen:

9 × SELECT `params` 
  FROM `bly_extensions`

3 × SELECT c.id, c.asset_id, c.access, c.alias, c.checked_out, c.checked_out_time,     c.created_time, c.created_user_id, c.description, c.extension, c.hits, c.language, c.level,     c.lft, c.metadata, c.metadesc, c.metakey, c.modified_time, c.note, c.params, c.parent_id,     c.path, c.published, c.rgt, c.title, c.modified_user_id, c.version, 
  CASE WHEN CHAR_LENGTH(c.alias) != 0 THEN CONCAT_WS(':', c.id, c.alias) ELSE c.id END as slug 
  FROM `bly_categories` AS `s` 
  INNER JOIN `bly_categories` AS `c` 
  ON (s.lft < c.lft 
  AND c.lft < s.rgt 
  AND c.language IN ('de-DE','*')) OR (c.lft <= s.lft 
  AND s.rgt <= c.rgt)

2 × SELECT `extension_id` AS `id`,`element` AS `option`,`params`,`enabled` 
  FROM `bly_extensions`

2 × SELECT `id`,`name`,`rules`,`parent_id` 
  FROM `bly_assets`

2 × SELECT `rules` 
  FROM `bly_assets`

2 × SELECT DISTINCT `user_id` 
  FROM `bly_user_usergroup_map`

1 × SELECT `data` 
  FROM `bly_session`

1 × SELECT `session_id` 
  FROM `bly_session`

1 × SELECT id, rules 
  FROM `bly_viewlevels

1 × SELECT b.id 
  FROM bly_usergroups AS a 
  LEFT JOIN bly_usergroups AS b 
  ON b.lft <= a.lft 
  AND b.rgt >= a.rgt

1 × SELECT `folder` AS `type`,`element` AS `name`,`params` AS `params`,`extension_id` AS `id` 
  FROM bly_extensions

```
1 × SELECT * 
  FROM bly_languages
```

1 × SELECT `element`,`name`,`client_id`,`extension_id` 
  FROM `bly_extensions`

1 × SELECT m.id, m.menutype, m.title, m.alias, m.note, m.path AS route, m.link, m.type, m.level, m.language,`m`.`browserNav`, m.access, m.params, m.home, m.img, m.template_style_id, m.component_id, m.parent_id,e.element as component 
  FROM bly_menu AS m 
  LEFT JOIN bly_extensions AS e 
  ON m.component_id = e.extension_id

1 × SELECT id, home, template, s.params 
  FROM bly_template_styles as s 
  LEFT JOIN bly_extensions as e 
  ON e.element=s.template 
  AND e.type='template' 
  AND e.client_id=s.client_id

1 × SELECT a.id, a.asset_id, a.title, a.alias, a.introtext, a.fulltext, a.state, a.catid, a.created, a.created_by, a.created_by_alias, 
  CASE WHEN a.modified = '0000-00-00 00:00:00' THEN a.created ELSE a.modified END as modified, a.modified_by, a.checked_out, a.checked_out_time, a.publish_up, a.publish_down, a.images, a.urls, a.attribs, a.version, a.ordering, a.metakey, a.metadesc, a.access, a.hits, a.metadata, a.featured, a.language, a.xreference,c.title AS category_title, c.alias AS category_alias, c.access AS category_access,u.name AS author,parent.title as parent_title, parent.id as parent_id, parent.path as parent_route, parent.alias as parent_alias,ROUND(v.rating_sum / v.rating_count, 0) AS rating, v.rating_count as rating_count 
  FROM bly_content AS a 
  INNER JOIN bly_categories AS c 
  on c.id = a.catid 
  LEFT JOIN bly_users AS u 
  on u.id = a.created_by 
  LEFT JOIN bly_categories as parent 
  ON parent.id = c.parent_id 
  LEFT JOIN bly_content_rating AS v 
  ON a.id = v.content_id

1 × SELECT `m`.`tag_id`,`t`.* 
  FROM `bly_contentitem_tag_map` AS m  
  INNER JOIN `bly_tags` AS t  
  ON `m`.`tag_id` = `t`.`id`

1 × SELECT DISTINCT a.id, a.title, a.name, a.checked_out, a.checked_out_time, a.note, a.state, a.access, a.created_time, a.created_user_id, a.ordering, a.language, a.fieldparams, a.params, a.type, a.default_value, a.context, a.group_id, a.label, a.description, a.required,l.title AS language_title, l.image AS language_image,uc.name AS editor,ag.title AS access_level,ua.name AS author_name,g.title AS group_title, g.access as group_access, g.state AS group_state, g.note as group_note 
  FROM bly_fields AS a 
  LEFT JOIN `bly_languages` AS l 
  ON l.lang_code = a.language 
  LEFT JOIN bly_users AS uc 
  ON uc.id=a.checked_out 
  LEFT JOIN bly_viewlevels AS ag 
  ON ag.id = a.access 
  LEFT JOIN bly_users AS ua 
  ON ua.id = a.created_user_id 
  LEFT JOIN bly_fields_groups AS g 
  ON g.id = a.group_id 
  LEFT JOIN `bly_fields_categories` AS fc 
  ON fc.field_id = a.id

1 × SELECT m.id, m.title, m.module, m.position, m.content, m.showtitle, m.params, mm.menuid 
  FROM bly_modules AS m 
  LEFT JOIN bly_modules_menu AS mm 
  ON mm.moduleid = m.id 
  LEFT JOIN bly_extensions AS e 
  ON e.element = m.module 
  AND e.client_id = m.client_id

1 × SELECT `c2`.`language`,`c2`.`id` 
  FROM `bly_menu` AS `c` 
  INNER JOIN `bly_associations` AS `a` 
  ON a.id = c.`id` 
  AND a.context='com_menus.item' 
  INNER JOIN `bly_associations` AS `a2` 
  ON `a`.`key` = `a2`.`key` 
  INNER JOIN `bly_menu` AS `c2` 
  ON a2.id = c2.`id`

1 × SELECT `c2`.`language`,CONCAT_WS(':', `c2`.`id`, `c2`.`alias`) AS `id`,CONCAT_WS(':', ca.id, ca.alias) AS `catid` 
  FROM `bly_content` AS `c` 
  INNER JOIN `bly_associations` AS `a` 
  ON a.id = c.`id` 
  AND a.context='com_content.item' 
  INNER JOIN `bly_associations` AS `a2` 
  ON `a`.`key` = `a2`.`key` 
  INNER JOIN `bly_content` AS `c2` 
  ON a2.id = c2.`id` 
  INNER JOIN `bly_categories` AS `ca` 
  ON `c2`.`catid` = ca.id 
  AND ca.extension = 'com_content'

1 × SELECT COUNT(*) 
  FROM `bly_extensions`

1 × SELECT `id`,`username`,`email`,`password`,`block`,`lastvisitDate` 
  FROM `bly_users`

1 × SELECT `template`,`client_id` 
  FROM `bly_template_styles`

1 × SELECT MIN(`ordering`) 
  FROM `bly_extensions`

1 × SELECT `ordering` 
  FROM `bly_extensions`

1 × SELECT `element`,`type`,`folder`,`client_id`,`manifest_cache`,`enabled` 
  FROM `bly_extensions

1 × SELECT `id`,`username`,`name`,`email`,`registerDate`,`lastvisitDate`,`block` 
  FROM `bly_users`

1 × SELECT `id`,`name`,`types`,`area`,`plugins`,`params` 
  FROM `bly_wf_profiles`

Andere Tabellen:

2 × UPDATE `bly_extensions` 
  SET `params` = '{\"htp_shield\":{\"site_path\":\"\",\"sef_rules\":1,\"api_router\":1,\"api_mode\":\"route\",\"fastcgi_auth\":1,\"apache_options\":1,\"follow_symlink\":0,\"force_https\":1,\"www_mode\":0,\"canonical_host\":\"\",\"h_frame\":1,\"h_nosniff\":1,\"h_referrer\":\"strict-origin-when-cross-origin\",\"h_poweredby\":1,\"h_hsts\":0,\"h_hsts_sub\":0,\"h_coop\":0,\"h_permissions\":0,\"f_query\":1,\"f_rfi\":1,\"f_methods\":1,\"f_wpnoise\":1,\"htaccess_external\":0,\"guard_dismissed\":0,\"x_shield\":1,\"x_sigs_off\":[],\"defs_version\":\"2026-07-15.9ac386\",\"mal_whitelist\":[],\"u_harden\":1,\"u_dirs\":[\"images\",\"media\"],\"emergency_lock\":0,\"notify_email\":\"mail@website-bereinigung.de\",\"notify_reminder_days\":14,\"unsub_secret\":\"a3ovOtDuiJ2JWUICnSikGA7204m_W0KkrPOvl88kIDU\",\"unsub_base\":\"https:\\/\\/belezy.eu\\/\",\"site_fp\":\"9d003c1a41c42c108fbc877300d68eac557ccaac\",\"swarm_contrib_id\":\"\",\"swarm_acked\":[],\"watch_manifest\":{\".htaccess\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"images\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\",\"media\\/.htaccess\":\"998f8d52d81e8b7a7faabc4ff91d5706f3644c26\"},\"core_manifest\":{\"index.php\":\"b1c33443a827fd25d6e033d14bdba8e6f9df6ad1\",\"administrator\\/index.php\":\"7078c5d7b2181900c509c93302f324e2dae228bf\"},\"core_jversion\":\"3.10.11\",\"accounts_watch\":1,\"account_baseline\":{\"374\":{\"id\":374,\"username\":\"hberdel\",\"email\":\"info@belezy.eu\",\"phash\":\"4e4fa5fb0131a9781fca0d873c22f53c2ad8a248\",\"block\":0,\"lastvisit\":\"2026-06-24 12:03:38\",\"pneeds\":0},\"461\":{\"id\":461,\"username\":\"Loose\",\"email\":\"info@wm-loose.de\",\"phash\":\"efabda101d354010a79343bd47474e6e3fc8676d\",\"block\":0,\"lastvisit\":\"2023-02-28 14:32:15\",\"pneeds\":0},\"162201\":{\"id\":162201,\"username\":\"pascall\",\"email\":\"mail@website-bereinigung.de\",\"phash\":\"a77d1a74e85312c45348eeec7605887016661d17\",\"block\":0,\"lastvisit\":\"2026-06-24 15:56:20\",\"pneeds\":0}},\"admin_whitelist\":[],\"seo_watch\":1,\"compat_guard\":1,\"seo_cloaking_auto\":0,\"seo_whitelist\":[],\"seo_topic_ack\":[],\"seo_baseline\":{\"title\":\"ProvenceFerien - Startseite\",\"out_domains\":{\"xdebug.org\":1},\"shingles\":{\"2773276488\":1,\"694934048\":1,\"2276828720\":1,\"1014845744\":1,\"2164272920\":1,\"654648592\":1,\"3252768728\":1,\"2703306816\":1,\"4206898064\":1,\"3965176784\":1,\"324970472\":1,\"3140698272\":1,\"2596003040\":1,\"2737171944\":1,\"95016752\":1,\"1222032616\":1,\"3967628640\":1,\"2144334616\":1,\"1571366176\":1,\"2296853872\":1,\"2149620600\":1,\"1121698424\":1,\"1523411896\":1,\"2049945696\":1,\"2144915136\":1,\"2204935488\":1,\"723865528\":1,\"3725506112\":1,\"1945954912\":1,\"4263363480\":1,\"1309988440\":1,\"1421026616\":1,\"3426863704\":1,\"1030014896\":1,\"912520336\":1,\"2088853496\":1,\"3979502160\":1,\"4116536448\":1,\"2863093792\":1,\"3037412432\":1,\"3620898072\":1,\"2314148544\":1,\"37976\":1,\"2414448336\":1,\"3977858536\":1,\"11385216\":1,\"1409844200\":1,\"1751197192\":1,\"1518609656\":1,\"1130239024\":1,\"716131384\":1,\"1236659328\":1,\"3001742640\":1,\"3903950424\":1,\"2657582952\":1,\"1545708136\":1,\"3170111184\":1,\"4275824384\":1,\"1476852648\":1,\"3518915328\":1,\"2973823744\":1,\"332369504\":1,\"581432120\":1,\"1827905688\":1,\"2062886848\":1,\"2311799488\":1,\"4179887752\":1,\"183707264\":1,\"821579528\":1,\"1552434376\":1,\"3369362064\":1,\"3578063520\":1,\"3682544776\":1,\"365264784\":1,\"2968954048\":1,\"1708211424\":1,\"3133635568\":1,\"1298729048\":1,\"2599037872\":1,\"4081499304\":1,\"187337984\":1,\"362962264\":1,\"2094558736\":1,\"2787016200\":1,\"658564976\":1,\"3893519200\":1,\"2014934032\":1,\"2807223808\":1,\"1971365808\":1,\"1492481664\":1,\"3208575176\":1,\"4132949216\":1,\"1552018832\":1,\"344452216\":1,\"2539551096\":1,\"1882892912\":1,\"547683160\":1,\"1431046296\":1,\"2240553192\":1,\"1993946344\":1,\"2704876872\":1,\"1558974800\":1,\"883158256\":1,\"1213187168\":1,\"3879781728\":1,\"3735037840\":1,\"829495128\":1,\"1020533640\":1,\"2306348504\":1,\"1441885712\":1,\"1365789064\":1,\"3510447536\":1,\"3648057168\":1,\"28501736\":1,\"2051798112\":1,\"4075032544\":1,\"3189454464\":1,\"555083136\":1,\"1550852192\":1,\"1246339560\":1,\"1354898128\":1,\"2981285080\":1,\"815862896\":1,\"703426624\":1,\"305723808\":1,\"249961104\":1,\"3008275536\":1,\"1743788824\":1,\"4265276576\":1,\"3557110600\":1,\"4041208904\":1,\"1327249520\":1,\"1607673584\":1,\"4007425464\":1,\"1175775032\":1,\"2276517544\":1,\"1205991320\":1,\"1113485296\":1,\"315353232\":1,\"2500630616\":1,\"4221532808\":1,\"1980425792\":1,\"2693581640\":1,\"3968187688\":1,\"2974680912\":1,\"3741881144\":1,\"3462925544\":1,\"2964742568\":1,\"3711292792\":1,\"479869424\":1,\"973742744\":1,\"351015224\":1,\"3738520704\":1,\"3335574944\":1,\"1248024752\":1,\"1534907152\":1,\"4101744904\":1,\"433360288\":1,\"2791891896\":1,\"3626748360\":1,\"3196827536\":1,\"1559046784\":1,\"7730296\":1,\"1458451704\":1,\"2911589176\":1,\"454621680\":1,\"179928728\":1,\"1982037912\":1,\"916874840\":1,\"1548123496\":1,\"3846924096\":1,\"4123225216\":1,\"670221008\":1,\"2571777288\":1,\"3627078176\":1,\"293222816\":1,\"281163600\":1,\"2508087208\":1,\"3770727200\":1,\"3556748072\":1,\"3381116688\":1,\"3107900104\":1,\"2034508136\":1,\"1977429088\":1,\"2703274016\":1,\"4139311008\":1,\"4261163824\":1,\"3539583040\":1,\"3792461240\":1,\"2691280184\":1,\"1856123928\":1,\"376102376\":1,\"2521452248\":1,\"3357431832\":1,\"971320240\":1,\"1808893192\":1,\"2709313920\":1,\"444641888\":1,\"2043081592\":1,\"1854799872\":1,\"2071995072\":1,\"1818046032\":1,\"4043405808\":1,\"2965571680\":1,\"1618392856\":1,\"1253472664\":1,\"1925217168\":1,\"933003528\":1,\"2230427152\":1,\"1208455864\":1,\"2025534160\":1,\"1408784776\":1,\"2685059296\":1,\"3489792648\":1,\"1615724560\":1,\"80777296\":1,\"466411848\":1,\"2846665840\":1,\"1911606592\":1,\"2696697384\":1,\"2804037960\":1,\"4138023008\":1,\"1630734352\":1,\"1587613576\":1,\"1950652592\":1,\"2777296976\":1,\"2255302400\":1,\"2621186584\":1,\"36106456\":1,\"2243664024\":1,\"3186220248\":1,\"3286361792\":1,\"4109595712\":1,\"335870296\":1,\"947878136\":1,\"885775072\":1,\"2836090264\":1,\"3195444184\":1,\"1373515616\":1,\"2703441304\":1,\"2999798000\":1,\"4124423392\":1,\"1153004272\":1,\"796890520\":1,\"1247028480\":1,\"958748368\":1,\"1744512424\":1,\"647816080\":1,\"1300060200\":1,\"1148044208\":1,\"3431685056\":1,\"3679148440\":1,\"1466140040\":1,\"1735424048\":1,\"1298914320\":1,\"3451668792\":1,\"3485632672\":1,\"3040222736\":1,\"3818565424\":1,\"428036792\":1,\"2710735120\":1,\"1002378832\":1,\"347500504\":1,\"2570151984\":1,\"2776089360\":1,\"2607914576\":1,\"3758066944\":1,\"897055968\":1,\"237439056\":1,\"3134172856\":1,\"2464987728\":1,\"4214313248\":1,\"48098040\":1,\"2694091560\":1,\"1636308368\":1,\"334606008\":1,\"2144818552\":1,\"3130333816\":1,\"3591606896\":1,\"1894249248\":1,\"4188555200\":1,\"245520800\":1,\"1682089672\":1,\"9149544\":1,\"1372800744\":1,\"2964205104\":1,\"2728041256\":1,\"143834200\":1,\"1108585200\":1,\"2736916224\":1,\"2448768504\":1,\"2365893624\":1,\"2284709784\":1,\"802473640\":1,\"3772932312\":1,\"361847392\":1,\"1137970600\":1,\"1232831160\":1,\"144058216\":1,\"1646278032\":1,\"992984272\":1,\"3634194248\":1,\"3773773072\":1,\"4070217592\":1,\"3903737168\":1,\"431558624\":1,\"2195069352\":1,\"669332312\":1,\"3004089080\":1,\"3885706904\":1,\"2109380128\":1,\"3757583592\":1,\"2545468000\":1,\"3698566936\":1,\"183215536\":1,\"801931600\":1,\"1734328536\":1,\"2074309544\":1,\"2801752600\":1,\"548482512\":1,\"3129297296\":1,\"3367049600\":1,\"1792562160\":1,\"3633067472\":1,\"963883040\":1,\"1263046008\":1,\"539208032\":1,\"3362402488\":1,\"3069180952\":1,\"1120040384\":1,\"2840905640\":1,\"2078889728\":1,\"2274655504\":1,\"111197728\":1,\"2673020880\":1,\"125198544\":1,\"591729768\":1,\"4239283240\":1,\"2427366776\":1,\"56992680\":1,\"2801660040\":1,\"3593402112\":1,\"147956928\":1,\"1693971840\":1,\"3868138536\":1,\"320203224\":1,\"224045520\":1,\"39887024\":1,\"21699200\":1,\"1739726536\":1,\"142599880\":1,\"3747452816\":1,\"597727768\":1,\"4150626032\":1,\"2011179320\":1,\"1296426808\":1,\"1468108424\":1,\"965466024\":1,\"928231432\":1,\"1273095288\":1,\"13803176\":1,\"3529821320\":1,\"1822362464\":1,\"1602423200\":1,\"3045750632\":1,\"2746789680\":1,\"472550200\":1,\"3722023320\":1,\"2292319968\":1,\"4163832904\":1,\"2617823040\":1,\"1372429176\":1,\"4096226856\":1,\"400511176\":1,\"548872256\":1,\"466639536\":1,\"911090304\":1,\"3430473600\":1,\"4207759072\":1,\"1789941360\":1,\"4083465160\":1,\"777022376\":1,\"4197280096\":1,\"2424302952\":1,\"3615809224\":1,\"3578502824\":1,\"3707729224\":1,\"1558907592\":1,\"2213017096\":1,\"2360544800\":1,\"3955810424\":1,\"272558192\":1,\"1226552648\":1,\"1731302080\":1,\"1881370576\":1,\"2468291352\":1,\"1337371936\":1,\"2193969840\":1,\"1225233672\":1,\"1935561680\":1,\"4061168168\":1,\"603145208\":1,\"552122232\":1,\"3303788176\":1,\"1655746256\":1,\"1805588320\":1,\"1404709120\":1,\"2489808104\":1,\"3633200272\":1,\"1764116024\":1,\"612888888\":1,\"65828896\":1,\"3760394392\":1,\"2609229016\":1,\"3563655328\":1,\"3530396248\":1,\"1503893184\":1,\"4086958072\":1,\"1190305512\":1,\"806165960\":1,\"2330645552\":1,\"2565860128\":1,\"4245224744\":1,\"4290332968\":1,\"3816809680\":1,\"1731756096\":1,\"1958936056\":1,\"3260819152\":1,\"580197864\":1,\"987543272\":1,\"855783312\":1,\"2977809568\":1,\"2304156000\":1,\"4292843744\":1,\"102433336\":1,\"3382348056\":1,\"1583874176\":1,\"4030843888\":1,\"2806962832\":1,\"1027675616\":1,\"1368990104\":1,\"2968221928\":1,\"4108864432\":1,\"573687992\":1,\"3543193024\":1,\"915365216\":1,\"2398957320\":1,\"905451816\":1,\"3645704632\":1,\"2402616856\":1,\"3895858936\":1,\"2778828512\":1,\"2244131928\":1,\"3656171680\":1,\"2332508616\":1,\"2983233488\":1,\"4071616712\":1,\"277607960\":1,\"1584636592\":1,\"1691365664\":1,\"2256249280\":1,\"1087202040\":1,\"1274958032\":1,\"2610280200\":1,\"2416624344\":1,\"628806296\":1,\"348750888\":1,\"1093229552\":1,\"1032561952\":1,\"2424530240\":1,\"1220979848\":1,\"1628441040\":1,\"2646915792\":1,\"374883024\":1,\"2142571840\":1,\"18039456\":1,\"51483176\":1,\"3246251144\":1,\"2282816104\":1,\"538583928\":1,\"528013376\":1,\"2991483680\":1,\"3905412016\":1,\"189579960\":1,\"451549632\":1,\"672548352\":1,\"1333121952\":1,\"144147328\":1,\"2561248448\":1,\"2358573544\":1,\"2107445648\":1,\"1689309576\":1,\"19222088\":1,\"4011024600\":1,\"2984760960\":1,\"3229899560\":1},\"redirect_to\":\"\",\"ts\":1784353506},\"seo_overview_ts\":1784353505,\"seo_overview_finding\":[],\"core_overview_ts\":1784129158,\"core_overview_finding\":[],\"plugin_initialized\":1,\"quickicon_initialized\":1,\"autosecure\":0,\"autosecure_last\":0,\"tmp_autoclean\":0,\"tmp_keep\":[],\"autoupdate_notify\":0,\"autoupdate_ext\":0,\"autoupdate_all\":0,\"autoupdate_manual\":0,\"autoupdate_mail_success\":0,\"autoupdate_include\":[],\"autoupdate_keep\":2,\"autoupdate_interval\":86400,\"autoupdate_schedule\":\"weekly\",\"autoupdate_hour\":21,\"autoupdate_weekday\":5,\"autoupdate_grace\":0,\"autoupdate_malscan\":1,\"s_php\":1,\"s_types\":1,\"s_ext\":\"7z,avif,bmp,br,css,csv,doc,docx,eot,gif,gz,htm,html,ico,ics,jp2,jpe,jpeg,jpg,js,json,m4a,m4v,map,mjs,mov,mp3,mp4,mpeg,mpg,odp,ods,odt,oga,ogg,ogv,opus,otf,pdf,png,ppt,pptx,rar,rtf,svg,svgz,tif,tiff,ttf,txt,vtt,wasm,wav,webm,webmanifest,webp,woff,woff2,xls,xlsx,xml,xsl,zip\",\"s_files\":[\"administrator\\/components\\/com_akeeba\\/restore.php\",\"administrator\\/components\\/com_akeebabackup\\/restore.php\",\"joomla-connector.php\"],\"s_dirs_php\":[\"plugins\\/system\\/bfnetwork\"],\"s_dirs_static\":[],\"allow_paths\":[],\"s_dotfiles\":1,\"s_wellknown\":1,\"s_sensitive\":1,\"s_manifests\":0,\"s_sysdirs\":1,\"s_sysdirs_list\":[\"administrator\\/cache\",\"administrator\\/logs\",\"cache\",\"cli\",\"log\",\"logs\",\"tmp\"],\"p_compress\":1,\"p_precomp\":1,\"p_expires\":1,\"p_etag\":0,\"custom_top\":\"\",\"custom_bottom\":\"\",\"file_sha1\":\"d6ae8843a6d6ef4af52f939bac04a3af639003e0\",\"last_written\":\"2026-07-15 17:25:57\",\"last_test\":{\"checks\":[{\"label\":\"Startseite erreichbar\",\"url\":\"https:\\/\\/belezy.eu\\/\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"Backend erreichbar (401 = Passwortschutz aktiv)\",\"url\":\"https:\\/\\/belezy.eu\\/administrator\\/index.php\",\"status\":200,\"ok\":true,\"note\":\"\"},{\"label\":\"PHP-Schild aktiv (Test-Aufruf wird mit 403 abgewiesen)\",\"url\":\"https:\\/\\/belezy.eu\\/htpx-canary-567e3eb1.php\\/htp\",\"status\":403,\"ok\":true,\"note\":\"\"},{\"label\":\"configuration.php gesperrt\",\"url\":\"https:\\/\\/belezy.eu\\/configuration.php\",\"status\":403,\"ok\":true,\"note\":\"\"}],\"regression\":false,\"reason\":\"\",\"time\":\"2026-07-15 17:25:57\"},\"guard_dir\":\"\",\"htaccess_cap\":[]},\"htp_defs\":{\"schema\":1,\"version\":\"2026-07-17.e7aa4b\",\"signatures\":[{\"id\":\"jce-profiles-import\",\"label\":\"JCE Profil-Import (CVE-2026-48907)\",\"label_en\":\"JCE profile import (CVE-2026-48907)\",\"desc\":\"Unauthentifizierter Profil-Import im JCE-Editor - Beginn der aktuellen RCE-Kette (schaltet PHP-Uploads frei). Kein legitimer Frontend-Aufruf.\",\"desc_en\":\"Unauthenticated profile import in the JCE editor - start of the current RCE chain (enables PHP uploads). No legitimate frontend call.\",\"default\":1,\"qs\":\"option=com_jce.*task=profiles\\\\.import\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-rpc-upload\",\"label\":\"JCE Webshell-Upload via plugin.rpc (CVE-2026-48907)\",\"label_en\":\"JCE webshell upload via plugin.rpc (CVE-2026-48907)\",\"desc\":\"Datei-Upload \\u00fcber den JCE-Dateibrowser (plugin.rpc, method=upload). Greift nur im Frontend; eingeloggte Autoren (legitimer Editor-Upload) bleiben unber\\u00fchrt.\",\"desc_en\":\"File upload via the JCE file browser (plugin.rpc, method=upload). Applies only 
  on the frontend; logged-in authors (legitimate editor upload) are unaffected.\",\"default\":1,\"qs\":\"option=com_jce.*task=plugin\\\\.rpc.*method=upload\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"jce-imgmanager\",\"label\":\"JCE Image Manager (Alt-Exploit)\",\"label_en\":\"JCE Image Manager (legacy exploit)\",\"desc\":\"Klassischer unauthentifizierter Datei-Upload \\u00fcber den JCE-Bildmanager (sehr alte JCE-Versionen).\",\"desc_en\":\"Classic unauthenticated file upload via the JCE image manager (very old JCE versions).\",\"default\":1,\"qs\":\"option=com_jce.*plugin=imgmanager.*method=form\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":0,\"trigger\":null},{\"id\":\"novarain-nrframework\",\"label\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"label_en\":\"Novarain \\/ Tassos Framework (com_ajax include)\",\"desc\":\"CVE-2026-21627: unauthentifizierte PHP-Datei-Einbindung \\u00fcber plg_system_nrframework via com_ajax (task=include).\",\"desc_en\":\"CVE-2026-21627: unauthenticated PHP file inclusion via plg_system_nrframework through com_ajax (task=include).\",\"default\":1,\"qs\":\"option=com_ajax.*nrframework.*task=include\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"astroid-ajax\",\"label\":\"Astroid Framework (AJAX-Endpunkt)\",\"label_en\":\"Astroid Framework (AJAX endpoint)\",\"desc\":\"CVE-2026-21628: ungepr\\u00fcfter Astroid-AJAX-Endpunkt (Upload\\/Installation). Coarse-Match auf com_ajax + astroid.\",\"desc_en\":\"CVE-2026-21628: unchecked Astroid AJAX endpoint (upload\\/installation). Coarse match 
  on com_ajax + astroid.\",\"default\":1,\"qs\":\"option=com_ajax.*(plugin|template|view)=astroid\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"helix3-ajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Handler (Datei schreiben\\/l\\u00f6schen)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax handler (file write\\/delete)\",\"desc\":\"Helix3 < 3.1.1: der Ajax-Handler onAjaxHelix3 pr\\u00fcfte weder Login noch Rechte. Trifft gezielt die gef\\u00e4hrlichen Unauth-Aktionen im POST-Body: save (Layout-JSON ins aktive Template schreiben), remove (Datei l\\u00f6schen via Path-Traversal), import (Template-Style-Settings \\u00fcberschreiben) sowie upload_image\\/remove_image\\/updateFonts. Legitime Gast-Aktionen (voting, load) und eingeloggte Template-Nutzung \",\"desc_en\":\"Helix3 < 3.1.1: the onAjaxHelix3 ajax handler checked neither login nor permission. Targets the dangerous unauth POST-body actions: save (write layout JSON into the active template), remove (delete a file via path traversal), import (overwrite template style settings) plus upload_image\\/remove_image\\/updateFonts. Legitimate guest actions (voting, load) 
  and logged-in template use are unaffected. Fix:\",\"default\":1,\"qs\":\"data(?:\\\\[|%5b)action(?:\\\\]|%5d)=(?:save|remove|import|updatefonts)|action=(?:upload_image|remove_image)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helix3-comajax\",\"label\":\"Helix3 (JoomShaper): unauth. com_ajax-Dispatcher (Datei-Write\\/Delete, Style-Injektion)\",\"label_en\":\"Helix3 (JoomShaper): unauth com_ajax dispatcher (file write\\/delete, style injection)\",\"desc\":\"Helix3 < 3.1.1: der Front-Dispatcher (option=com_ajax mit plugin=helix3) rief onAjaxHelix3 VOR jeder Token-\\/Rechtepr\\u00fcfung auf - unauthentifiziert save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (Datei-Schreiben, Path-Traversal-L\\u00f6schen, Template-Style-Injektion, Stored XSS). Blockt jeden GAST-Aufruf dieses Dispatchers im Frontend (Defense-in-Depth, f\\u00e4ngt auch laufende Scans) - erg\\u00e4nzt d\",\"desc_en\":\"Helix3 < 3.1.1: the front-end dispatcher (option=com_ajax with plugin=helix3) invoked onAjaxHelix3 BEFORE any token\\/permission check - unauthenticated save\\/import\\/remove\\/resetLayout\\/updateFonts\\/fontVariants (file write, path-traversal delete, template style injection, stored XSS). Blocks every GUEST call of this dispatcher 
  on the front end (defense in depth, also catches ongoing scans) - complemen\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helix3\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"helixultimate-comajax\",\"label\":\"Helix Ultimate (JoomShaper): unauth. com_ajax-Dispatcher (Men\\u00fc-Write\\/Datei\\/Export)\",\"label_en\":\"Helix Ultimate (JoomShaper): unauth com_ajax dispatcher (menu write\\/file\\/export)\",\"desc\":\"Helix Ultimate < 2.2.7: der com_ajax-Handler onAjaxHelixultimate (option=com_ajax mit plugin=helixultimate, Action im task-Param) lief VOR jeder Login-\\/Rechtepr\\u00fcfung - ein anonymer Angreifer konnte in die Men\\u00fc-Einstellungen schreiben (Stored XSS bis in die Admin-Sitzung), Dateien per Path-Traversal beliebig l\\u00f6schen, einen Open Redirect ausl\\u00f6sen und das Template ungesch\\u00fctzt exportieren. Blockt\",\"desc_en\":\"Helix Ultimate < 2.2.7: the com_ajax handler onAjaxHelixultimate (option=com_ajax with plugin=helixultimate, action in the task param) ran BEFORE any login\\/permission check - an anonymous attacker could write into the menu settings (stored XSS reaching the admin session), delete files anywhere via path traversal, trigger an open redirect 
  and export the template unprotected. Blocks every GUEST call\",\"default\":1,\"qs\":\"(?=.*option=com_ajax)(?=.*plugin=helixultimate\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_ajax\"},{\"id\":\"comajax-include\",\"label\":\"com_ajax: Datei-Einbindung (generisch)\",\"label_en\":\"com_ajax: file inclusion (generic)\",\"desc\":\"F\\u00e4ngt unbekannte LFI-L\\u00fccken derselben Klasse ab: com_ajax mit task=include\\/require. Frontend.\",\"desc_en\":\"Catches unknown LFI holes of the same class: com_ajax with task=include\\/require. Frontend.\",\"default\":1,\"qs\":\"option=com_ajax.*task=(include|require)(_once)?\",\"uri\":null,\"frontend_only\":1,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"sppagebuilder-uploadicon\",\"label\":\"SP Page Builder: unauthentifizierter Icon-Upload (RCE)\",\"label_en\":\"SP Page Builder: unauthenticated icon upload (RCE)\",\"desc\":\"Zero-Day in SP Page Builder bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keinerlei Zugriffs-\\/Login-Pr\\u00fcfung - unauthentifizierter Datei-Upload nach \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Nur Mini-WAF (G\\u00e4ste), da eingeloggte Builder den Endpunkt legitim nutzen.\",\"desc_en\":\"Zero-day in SP Page Builder up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login check - unauthenticated file upload to \\/media\\/com_sppagebuilder\\/assets\\/iconfont\\/ - RCE. Mini-WAF only (guests), since logged-in builders use the endpoint legitimately.\",\"default\":1,\"qs\":\"option=com_sppagebuilder.*task=asset\\\\.uploadCustomIcon\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":null},{\"id\":\"dpcalendar-createdby-sqli\",\"label\":\"DPCalendar: unauth. SQL-Injection (Autor-Filter)\",\"label_en\":\"DPCalendar: unauth SQL injection (author filter)\",\"desc\":\"DPCalendar Blind-SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): der Frontend-Autor-Filter filter_created_by (option=com_dpcalendar, view=events) floss in skalarer Form ungecastet in a.created_by IN (...) - anonymes Auslesen beliebiger DB-Tabellen (nur lesend). Blockt Gast-Anfragen, deren filter_created_by kein reiner Integer ist (legitim = Autor-IDs\\/Ziffern) -> FP-frei. Fix 10.11.2 \\/ 8.19.4.\",\"desc_en\":\"DPCalendar blind SQLi (Joomla 4.4-6 < 10.11.2, J3 < 8.19.4): the front-end author filter filter_created_by (option=com_dpcalendar, view=events) flowed uncast into a.created_by IN (...) in its scalar form - anonymous read of arbitrary DB tables (read-only). Blocks guest requests whose filter_created_by is not a pure integer (legit = author IDs\\/digits) -> FP-free. Fix 10.11.2 \\/ 8.19.4.\",\"default\":1,\"qs\":\"(?=.*option=com_dpcalendar)(?=.*filter_created_by=[0-9,]*[^0-9,&])\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_dpcalendar\"},{\"id\":\"acym-entityselect-sqli\",\"label\":\"AcyMailing: unauth. SQL-Injection (Entity-Select Spaltenliste)\",\"label_en\":\"AcyMailing: unauth SQL injection (entity-select column list)\",\"desc\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): der Frontend-Endpunkt EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) nahm die Request-Parameter columns\\/join_table ungeprueft in die SELECT-Spaltenliste von UserClass::getMatchingElements auf - ein anonymer Besucher konnte per Subquery beliebige DB-Tabellen (inkl. Passwort-Hashes) auslesen. Blockt GAST-Aufrufe dieses Tasks\",\"desc_en\":\"CVE-2026-56292 (AcyMailing 6.0.0-10.11.0): the front-end endpoint EntitySelectController::loadEntityFront (option=com_acym, task=loadEntityFront) placed the request parameters columns\\/join_table unchecked into the SELECT column list of UserClass::getMatchingElements - an anonymous visitor could read arbitrary DB tables (incl. password hashes) via a subquery. Blocks GUEST calls of this task whose c\",\"default\":1,\"qs\":\"(?=.*option=com_acym)(?=.*task=loadEntityFront)(?=.*(?:columns|join_table|join)=[^&]*(?:\\\\(|%28|%2528|\\\\s|%20|\\\\+))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_acym\"},{\"id\":\"quix-article-sqli\",\"label\":\"Quix Page Builder: unauth. SQL-Injection (Einzel-Artikel-AJAX)\",\"label_en\":\"Quix Page Builder: unauth SQL injection (single-article AJAX)\",\"desc\":\"Quix (ThemeXpert, Free UND Pro) bis 6.2.0, inkl. der 5.x-Reihe: der oeffentliche AJAX-Endpunkt (option=com_quix, task=ajax, element=joomla-article) ruft QuixJoomlaArticleElement::getAjax() ohne Login-\\/Token-\\/Lizenz-Pruefung; die Artikel-ID kommt base64-kodiert im data-Parameter und wird in articleExist() UNGECASTET in die DB-Query konkateniert -> unauthentifizierte, fehler-basierte SQL-Injection (\",\"desc_en\":\"Quix (ThemeXpert, Free 
  AND Pro) up to 6.2.0, incl. the 5.x line: the public AJAX endpoint (option=com_quix, task=ajax, element=joomla-article) calls QuixJoomlaArticleElement::getAjax() with no login\\/token\\/license check; the article id arrives base64-encoded in the data parameter 
  and is concatenated UNCAST into the DB query in articleExist() -> unauthenticated error-based SQL injection (CVSS 8.7). \",\"default\":1,\"qs\":\"(?=.*option=com_quix)(?=.*task=ajax\\\\b)(?=.*element=joomla-article\\\\b)\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_quix\"},{\"id\":\"joomcck-tags-sqli\",\"label\":\"JoomCCK: unauth. SQL-Injection (Tag-Verwaltung)\",\"label_en\":\"JoomCCK: unauth SQL injection (tag management)\",\"desc\":\"CVE-2026-49048 (JoomCCK 6.x vor 6.4.1): der Front-End-Task tags.save\\/tags.delete (option=com_joomcck) lief OHNE Token-\\/Login-\\/Rechte-Pruefung und schob den Request-Parameter tag (getString) roh - mit Double-Quote-Ausbruch - in ZWEI aufeinanderfolgende SQL-Statements (Existenz-SELECT + UPDATE). Ein anonymer Besucher konnte die Datenbank auslesen und veraendern (stacked\\/error-based SQLi). Blockt jed\",\"desc_en\":\"CVE-2026-49048 (JoomCCK 6.x before 6.4.1): the front-end task tags.save\\/tags.delete (option=com_joomcck) ran with NO token\\/login\\/permission check 
  and concatenated the request parameter tag (getString) raw - with a double-quote breakout - into TWO consecutive SQL statements (existence SELECT + UPDATE). An anonymous visitor could read 
  and modify the database (stacked\\/error-based SQLi). Blocks every \",\"default\":1,\"qs\":\"(?=.*option=com_joomcck)(?=.*task=tags\\\\.(?:save|delete))\",\"uri\":null,\"frontend_only\":1,\"scope\":\"guest\",\"waf_only\":1,\"trigger\":\"com_joomcck\"},{\"id\":\"traversal-encoded\",\"label\":\"Pfad-Klettern (kodierte Varianten)\",\"label_en\":\"Path traversal (encoded variants)\",\"desc\":\"Erg\\u00e4nzt den Standard-Filter um Umgehungstricks: ....\\/\\/ , doppelte Kodierung (%252e), %c0%ae, %2e%2e%5c.\",\"desc_en\":\"Extends the standard filter with bypass tricks: ....\\/\\/ , double encoding (%252e), %c0%ae, %2e%2e%5c.\",\"default\":1,\"qs\":\"(\\\\.{3,}\\/|%252e|%c0%a[ef]|%2e%2e%5c|\\\\.\\\\.%5c)\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-wrapper-uri\",\"label\":\"PHP-Stream-Wrapper im Pfad\",\"label_en\":\"PHP stream wrapper in the path\",\"desc\":\"Blockiert php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ u. a. direkt im angefragten Pfad.\",\"desc_en\":\"Blocks php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ , expect:\\/\\/ etc. directly in the requested path.\",\"default\":1,\"qs\":null,\"uri\":\"(?:php|phar|data|expect|glob|zlib|zip):\\/\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"api-config-leak\",\"label\":\"Joomla-API Konfigurations-Leak\",\"label_en\":\"Joomla API configuration leak\",\"desc\":\"CVE-2023-23752: sch\\u00fctzt den Endpunkt \\/api\\/...\\/v1\\/config\\/application auch ohne komplette API-Sperre.\",\"desc_en\":\"CVE-2023-23752: protects the \\/api\\/...\\/v1\\/config\\/application endpoint even without a complete API block.\",\"default\":1,\"qs\":null,\"uri\":\"^api\\/index\\\\.php\\/v[0-9]+\\/config\",\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"php-object-injection\",\"label\":\"PHP Object Injection (serialisierte Payload)\",\"label_en\":\"PHP object injection (serialised payload)\",\"desc\":\"Serialisiertes PHP-Objekt in einem Parameter (O:\\/C:<L\\u00e4nge>:) - typischer Einstieg f\\u00fcr Object-Injection\\/POP-Ketten. Kommt in normalen Anfragen nicht vor.\",\"desc_en\":\"Serialised PHP object in a parameter (O:\\/C:<length>:) - typical entry point for object injection\\/POP chains. Does not occur in normal requests.\",\"default\":1,\"qs\":\"(?<![a-z0-9])[oc]:[0-9]{1,4}:\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"stream-wrapper-param\",\"label\":\"PHP-Stream-Wrapper in Parameter\",\"label_en\":\"PHP stream wrapper in a parameter\",\"desc\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ u. a. als Parameterwert - LFI\\/RCE-Vektor. Erg\\u00e4nzt die Pfad-Variante (php-wrapper-uri).\",\"desc_en\":\"php:\\/\\/ , phar:\\/\\/ , data:\\/\\/ etc. as a parameter value - LFI\\/RCE vector. Complements the path variant (php-wrapper-uri).\",\"default\":1,\"qs\":\"(php|phar|data|expect|glob|zlib|zip):\\/{2}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null},{\"id\":\"param-traversal\",\"label\":\"Pfad-Klettern im Parameter\",\"label_en\":\"Path traversal in a parameter\",\"desc\":\"Mehrfaches ..\\/ als Parameterwert - generisches Directory-Traversal\\/LFI in beliebigen Komponenten.\",\"desc_en\":\"Repeated ..\\/ as a parameter value - generic directory traversal\\/LFI in any component.\",\"default\":1,\"qs\":\"=(\\\\.\\\\.\\/){2,}\",\"uri\":null,\"frontend_only\":0,\"scope\":\"all\",\"waf_only\":0,\"trigger\":null}],\"vuln_extensions\":[{\"element\":\"nrframework\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Novarain \\/ Tassos Framework\",\"below\":\"6.0.38\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21627: unauthentifizierte PHP-Einbindung via com_ajax. Auf 6.0.38 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21627: unauthenticated PHP inclusion via com_ajax. Update to 6.0.38 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-tassos-framework-novarain-framework-sicherheitsluecke\"},{\"element\":\"astroid\",\"type\":\"library\",\"folder\":\"\",\"name\":\"Astroid Framework\",\"below\":\"3.3.11\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-21628: unauthentifizierter Datei-Upload via AJAX-Endpunkt (Dropper in \\/images\\/). Auf 3.3.13 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-21628: unauthenticated file upload via AJAX endpoint (dropper in \\/images\\/). Update to 3.3.13 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/joomla-astroid-framework-sicherheitsluecke-vulnerability\"},{\"element\":\"helix3\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix3 (JoomShaper)\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Unauthentifizierter com_ajax-Handler (onAjaxHelix3) ohne Login-\\/Rechtepr\\u00fcfung: Angreifer k\\u00f6nnen Dateien ins aktive Template schreiben oder per Path-Traversal l\\u00f6schen (save\\/remove\\/import). Auf Helix3 3.1.1 oder neuer aktualisieren.\",\"note_en\":\"Unauthenticated com_ajax handler (onAjaxHelix3) with no login or permission check: attackers can write files into the active template or delete files via path traversal (save\\/remove\\/import). Update to Helix3 3.1.1 or newer.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix3\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix3\"},{\"element\":\"helixultimate\",\"type\":\"plugin\",\"folder\":\"system\",\"name\":\"Helix Ultimate (JoomShaper)\",\"below\":\"2.2.7\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische unauth. L\\u00fccke in ALLEN Versionen < 2.2.7: der com_ajax-Handler onAjaxHelixultimate lief VOR jeder Rechtepr\\u00fcfung - anonym in die Men\\u00fcs schreiben (Stored XSS in den Admin), Path-Traversal-L\\u00f6schen, Open Redirect, Template-Export. Auf 2.2.7 updaten (Plugin UND Template). HTProtects Mini-WAF blockt den Aufruf bereits. NICHT mit Helix3 verwechseln.\",\"note_en\":\"Critical unauth flaw in ALL versions below 2.2.7: the com_ajax handler onAjaxHelixultimate ran before any permission check - anonymous menu writes (stored XSS reaching the admin), path-traversal delete, open redirect, template export. Update to 2.2.7 (plugin 
  AND template). HTProtect mini-WAF already blocks the call. Not to be confused with Helix3.\",\"advisory\":\"https:\\/\\/htprotect.org\\/helix-ultimate\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/helix-ultimate\"},{\"element\":\"com_baforms\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Balbooa Forms\",\"below\":\"2.4.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver Zero-Day (RCE), ALLE Versionen bis 2.4.0: der Upload-Endpoint form.uploadAttachmentFile pr\\u00fcft weder Login\\/Token noch Dateityp - ein anonymer Angreifer kann eine PHP-Datei hochladen und ausf\\u00fchren. NOCH KEIN Patch. Sofortma\\u00dfnahme: Upload-Formulare depublizieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active zero-day (RCE), ALL versions up to 2.4.0: the upload endpoint form.uploadAttachmentFile checks neither login\\/token nor file type - an anonymous attacker can upload 
  and run a PHP file. NO patch yet. Interim: unpublish forms with upload fields. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/htprotect.org\\/balbooa-forms\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/balbooa-forms\"},{\"element\":\"com_jce\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JCE Editor\",\"below\":\"2.9.99.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"CVE-2026-48907: unauthentifizierter Webshell-Upload (profiles.import + plugin.rpc). Dringend auf JCE 2.9.99.6 oder neuer aktualisieren.\",\"note_en\":\"CVE-2026-48907: unauthenticated webshell upload (profiles.import + plugin.rpc). Urgently update to JCE 2.9.99.6 or newer.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/jce-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/jce-sicherheitsluecke-joomla\"},{\"element\":\"com_rsfiles\",\"type\":\"component\",\"folder\":\"\",\"name\":\"RSFiles!\",\"below\":\"1.17.12\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Aktiver unauthentifizierter Datei-Upload -> RCE, ALLE Versionen bis 1.17.11: der Frontend-Upload (task=rsfiles.upload) pr\\u00fcft weder Login\\/Token noch Dateiendung - ein anonymer Angreifer l\\u00e4dt eine .php nach \\/downloads bzw. \\/briefcase und f\\u00fchrt sie aus. Dringend auf 1.17.12 aktualisieren. HTProtects Gast-Upload-Schutz blockt den ausf\\u00fchrbaren Upload bereits.\",\"note_en\":\"Active unauthenticated file upload -> RCE, ALL versions up to 1.17.11: the front-end upload (task=rsfiles.upload) checks neither login\\/token nor file extension - an anonymous attacker uploads a .php into \\/downloads or \\/briefcase 
  and executes it. Update to 1.17.12 urgently. The HTProtect guest-upload filter already blocks the executable upload.\",\"advisory\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\",\"advisory_en\":\"https:\\/\\/www.rsjoomla.com\\/blog\\/view\\/644-unauthenticated-file-upload-fixed-in-rsfiles-version-11712-update-now.html\"},{\"element\":\"com_edocman\",\"type\":\"component\",\"folder\":\"\",\"name\":\"EDocman\",\"below\":\"3.9\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (alle Versionen bis 3.8): ein anonymer Besucher schleust ueber einen Filter-Parameter eines oeffentlichen Frontend-Endpunkts SQL in eine ungequotete DB-Abfrage ein und kann die Datenbank auslesen (bis hin zu Zugangsdaten). Der genaue Vektor ist bewusst nicht veroeffentlicht. Dringend auf EDocman 3.9.0 aktualisieren.\",\"note_en\":\"Unauthenticated SQL injection (all versions up to 3.8): an anonymous visitor injects SQL through a filter parameter of a public front-end endpoint into an unquoted DB query 
  and can read the database (up to credentials). The exact vector is deliberately undisclosed. Update to EDocman 3.9.0 urgently.\",\"advisory\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\",\"advisory_en\":\"https:\\/\\/joomdonation.com\\/forum\\/edocman\\/82813-edocman-3-9-0-security-release---important-update-recommended.html\"},{\"element\":\"com_foranalytics\",\"type\":\"component\",\"folder\":\"\",\"name\":\"4Analytics\",\"below\":\"5.0.2\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Zwei unauthentifizierte Sicherheitsluecken (CVE-2026-57833 + CVE-2026-58077) in ALLEN Versionen vor 5.0.2 - ein anonymer Angreifer braucht keinen Login. Hersteller Weeblr stuft beide als kritisch ein; technische Details sind 7 Tage embargoed. Dringend auf 4Analytics 5.0.2 aktualisieren (laeuft auf Joomla 3-6).\",\"note_en\":\"Two unauthenticated security flaws (CVE-2026-57833 + CVE-2026-58077) in ALL versions before 5.0.2 - an anonymous attacker needs no login. Vendor Weeblr rates both critical; technical details are under a 7-day embargo. Update to 4Analytics 5.0.2 urgently (runs 
  on Joomla 3-6).\",\"advisory\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\",\"advisory_en\":\"https:\\/\\/weeblr.com\\/blog\\/critical-vulnerabilities-2026-07-15\"},{\"element\":\"com_quix\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Quix\",\"below\":\"6.2.1\",\"above\":\"\",\"severity\":\"high\",\"note\":\"Unauthentifizierte SQL-Injection (Free UND Pro, alle Versionen vor 6.2.1 \\u2013 auch die 5.x-Reihe): ein anonymer Besucher kann die gesamte Datenbank auslesen (CVSS 8.7). HTProtects Mini-WAF blockt den Angriff bereits aktiv. Auf Quix 6.2.1 aktualisieren (Free erh\\u00e4lt 6.2.1 ebenfalls \\u00fcber die Update-Funktion).\",\"note_en\":\"Unauthenticated SQL injection (Free 
  AND Pro, all versions below 6.2.1 \\u2013 including the 5.x line): an anonymous visitor can read the entire database (CVSS 8.7). HTProtect\'s mini-WAF already actively blocks the attack. Update to Quix 6.2.1 (Free receives 6.2.1 too via the update function).\",\"advisory\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\",\"advisory_en\":\"https:\\/\\/mysites.guru\\/blog\\/quix-sql-injection-disclosure\\/\"},{\"element\":\"com_joomcck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"JoomCCK\",\"below\":\"6.4.1\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Unauthentifizierte SQL-Injection (CVE-2026-49048, JoomCCK 6.x vor 6.4.1): der Front-End-Task \\u201eTag speichern\\/l\\u00f6schen\\\" pr\\u00fcfte weder Login noch Token und \\u00fcbernahm den Parameter \\u201etag\\\" ungefiltert in zwei SQL-Abfragen - ein anonymer Besucher konnte die Datenbank auslesen und ver\\u00e4ndern. HTProtects Mini-WAF blockt den unautorisierten Gast-Aufruf bereits aktiv. Dringend auf JoomCCK 6.4.1 aktualisi\",\"note_en\":\"Unauthenticated SQL injection (CVE-2026-49048, JoomCCK 6.x before 6.4.1): the front-end \\\"save\\/delete tag\\\" task checked neither login nor token 
  and took the \\\"tag\\\" parameter unfiltered into two SQL queries - an anonymous visitor could read 
  and modify the database. HTProtect\'s mini-WAF already actively blocks the unauthorized guest call. Update to JoomCCK 6.4.1 urgently.\",\"advisory\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\",\"advisory_en\":\"https:\\/\\/github.com\\/JoomCoder-com\\/JoomCCK\\/releases#release-6.4.1\"},{\"element\":\"com_chronoforms8\",\"type\":\"component\",\"folder\":\"\",\"name\":\"ChronoForms\",\"below\":\"8.0.53\",\"above\":\"8.0.0\",\"severity\":\"high\",\"note\":\"Unauthentifizierte gespeicherte XSS (CVE-2026-58148, ChronoForms 8.x vor 8.0.53): ein anonymer Besucher schleust \\u00fcber ein Formular-Feld JavaScript ein, das ungefiltert gespeichert und sp\\u00e4ter - z. B. beim Ansehen der Einsendungen im Backend - ausgef\\u00fchrt wird, bis hin zur \\u00dcbernahme der Admin-Sitzung (CVSS 8.7). Auf ChronoForms 8.0.53 aktualisieren.\",\"note_en\":\"Unauthenticated stored XSS (CVE-2026-58148, ChronoForms 8.x before 8.0.53): an anonymous visitor injects JavaScript via a form field that is stored unfiltered 
  and later executed - e.g. when viewing the submissions in the backend - up to takeover of the admin session (CVSS 8.7). Update to ChronoForms 8.0.53.\",\"advisory\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\",\"advisory_en\":\"https:\\/\\/www.cve.org\\/CVERecord?id=CVE-2026-58148\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"10.11.2\",\"above\":\"9.0.0\",\"severity\":\"high\",\"note\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthentifizierte Blind-SQL-Injection - der Autor-Filter filter_created_by (Frontend view=events) floss in skalarer Form ohne Integer-Cast in die Query (a.created_by IN ...); ein anonymer Besucher kann beliebige DB-Tabellen AUSLESEN (nichts \\u00e4ndern). Dringend auf 10.11.2 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar (Joomla 4.4-6, 9.0.0-10.11.1): unauthenticated blind SQL injection - the author filter filter_created_by (front-end view=events) flowed uncast (scalar form) into the query (a.created_by IN ...); an anonymous visitor can READ arbitrary DB tables (no writes). Update to 10.11.2 urgently. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_dpcalendar\",\"type\":\"component\",\"folder\":\"\",\"name\":\"DPCalendar\",\"below\":\"8.19.4\",\"above\":\"8.18.0\",\"severity\":\"high\",\"note\":\"DPCalendar Joomla-3-Linie (8.x), 8.18.0-8.19.3: dieselbe unauth Blind-SQL-Injection \\u00fcber den Autor-Filter filter_created_by (skalar, ohne Integer-Cast, nur lesend). In 8.19.4 (Joomla-3-Fix) behoben. Auf 8.19.4 aktualisieren. HTProtects Mini-WAF blockt die Injektion bereits.\",\"note_en\":\"DPCalendar Joomla 3 line (8.x), 8.18.0-8.19.3: same unauth blind SQL injection via the author filter filter_created_by (scalar, no integer cast, read-only). Fixed in 8.19.4 (Joomla 3 fix). Update to 8.19.4. HTProtect mini-WAF already blocks the injection.\",\"advisory\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\",\"advisory_en\":\"https:\\/\\/joomla.digital-peak.com\\/blog\\/2026-security-issue-in-dpcalendar\"},{\"element\":\"com_phocadownload\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Phoca Download\",\"below\":\"6.1.3\",\"above\":\"6.0.0\",\"severity\":\"high\",\"note\":\"Authentifizierter Datei-Upload -> RCE (Versionen 6.0 bis 6.1.2): ein eingeloggter Nutzer mit Zugriff auf die Upload-Funktion kann eine ausf\\u00fchrbare Datei (z. B. .php) hochladen und ausf\\u00fchren. In 6.1.3 (Security-Release) behoben - auf 6.1.3 oder neuer aktualisieren. HTProtects PHP-Schild verhindert die Ausf\\u00fchrung einer hochgeladenen PHP-Datei in den Upload-Ordnern bereits.\",\"note_en\":\"Authenticated file upload -> RCE (versions 6.0 to 6.1.2): a logged-in user with access to the upload feature can upload 
  and run an executable file (e.g. .php). Fixed in 6.1.3 (security release) - update to 6.1.3 or newer. The HTProtect PHP shield already prevents execution of an uploaded PHP file in the upload folders.\",\"advisory\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\",\"advisory_en\":\"https:\\/\\/www.phoca.cz\\/news\\/1481-phoca-download-version-6-1-3-released-security-release\"},{\"element\":\"com_acym\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing 6+\",\"below\":\"10.11.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Neuauflage (6+): CVE-2026-56292 unauthentifizierte SQL-Injection (6.0.0-10.11.0) - ein anonymer Angreifer liest beliebige DB-Tabellen inkl. Passwort-Hashes (CVSS 8.7). \\u00c4ltere L\\u00fccken: CVE-2023-28731 unauth Upload\\/RCE unter 8.3.0, CVE-2026-3614 Rechteausweitung 9.11.0-10.8.1. Dringend auf 10.11.1 aktualisieren.\",\"note_en\":\"AcyMailing new line (6+): CVE-2026-56292 unauthenticated SQL injection (6.0.0-10.11.0) - an anonymous attacker reads arbitrary DB tables incl. password hashes (CVSS 8.7). Older holes: CVE-2023-28731 unauth upload\\/RCE below 8.3.0, CVE-2026-3614 privilege escalation 9.11.0-10.8.1. Update to 10.11.1 urgently.\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_acymailing\",\"type\":\"component\",\"folder\":\"\",\"name\":\"AcyMailing Classic\",\"below\":\"4.9.5\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"AcyMailing Classic (End-of-Life): \\u00e4ltere Versionen mit kritischen L\\u00fccken - unauthentifizierter Datei-Upload der 3.x-\\u00c4ra (RCE, z. B. 3.9.0) sowie Backend-SQL-Injection CVE-2015-7338 (in 4.9.5 behoben). Auf eine unterst\\u00fctzte AcyMailing-Version migrieren. (Die 5.x-Linie hat keine bekannte sehr kritische L\\u00fccke; CSV-Injection CVE-2018-9107 in 5.9.1-5.9.5 ist niedrig\\/client-seitig.)\",\"note_en\":\"AcyMailing Classic (end-of-life): older versions with critical holes - unauthenticated file upload of the 3.x era (RCE, e.g. 3.9.0) 
  and backend SQL injection CVE-2015-7338 (fixed in 4.9.5). Migrate to a supported AcyMailing version. (The 5.x line has no known very critical hole; CSV injection CVE-2018-9107 in 5.9.1-5.9.5 is low\\/client-side.)\",\"advisory\":\"https:\\/\\/htprotect.org\\/acymailing\",\"advisory_en\":\"https:\\/\\/htprotect.org\\/en\\/acymailing\"},{\"element\":\"com_igallery\",\"type\":\"component\",\"folder\":\"\",\"name\":\"Ignite Gallery\",\"below\":\"5.4.1\",\"above\":\"5.0.0\",\"severity\":\"high\",\"note\":\"Ignite Gallery 5.0.0 bis 5.4.0: Stored XSS (hoch) durch fehlendes Output-Escaping beim Hochladen\\/Bearbeiten von Bildern, dazu SSRF (ungefilterte Video-URL) und eine Rechteausweitung beim Download geschuetzter\\/unveroeffentlichter Bilder. Ausnutzbar von Nutzern MIT Upload-\\/Bearbeitungsrecht (Frontend oder Backend). Auf 5.4.1 oder neuer aktualisieren.\",\"note_en\":\"Ignite Gallery 5.0.0 to 5.4.0: stored XSS (high) via missing output escaping when uploading\\/editing images, plus SSRF (unfiltered video URL) 
  and a privilege escalation when downloading restricted\\/unpublished images. Exploitable by users WITH upload\\/edit permission (frontend or backend). Update to 5.4.1 or newer.\",\"advisory\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\",\"advisory_en\":\"https:\\/\\/www.ignitegallery.com\\/documentation\\/changelog\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"4.0.8\",\"above\":\"4.0.0\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939 (4.x-Linie 4.0.0-4.0.7): das Event-Formular (task=submit.submit) pr\\u00fcft nur das CSRF-Token, keine Zugriffsrechte - anonymer Datei-Upload. Voller RCE nur auf Joomla 6 (Core blockt .php nicht mehr); auf Joomla <=5 mildert der Core-Filter, die Zugriffsl\\u00fccke bleibt. Dringend auf 4.0.8 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits.\",\"note_en\":\"CVE-2026-48939 (4.x line 4.0.0-4.0.7): the event form (task=submit.submit) checks only the CSRF token, no access rights - anonymous file upload. Full RCE only 
  on Joomla 6 (core no longer blocks .php); 
  on Joomla <=5 the core filter mitigates but the access flaw remains. Update to 4.0.8 urgently. The HTProtect file shield already prevents execution.\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_icagenda\",\"type\":\"component\",\"folder\":\"\",\"name\":\"iCagenda\",\"below\":\"3.9.15\",\"above\":\"3.2.1\",\"severity\":\"critical\",\"note\":\"CVE-2026-48939, 3.x-Linie 3.2.1-3.9.14: dieselbe Zugriffsl\\u00fccke im Event-Formular (task=submit.submit, keine Rechtepr\\u00fcfung, anonymer Datei-Upload). In 3.9.15 (Security-Backport f\\u00fcr Joomla 3) behoben. Dringend auf 3.9.15 aktualisieren. HTProtects Dateischild verhindert die Ausf\\u00fchrung bereits. (Voller RCE v. a. auf Joomla 6.)\",\"note_en\":\"CVE-2026-48939, 3.x line 3.2.1-3.9.14: same access-control flaw in the event form (task=submit.submit, no permission check, anonymous file upload). Fixed in 3.9.15 (security backport for Joomla 3). Update to 3.9.15 urgently. The HTProtect file shield already prevents execution. (Full RCE mainly 
  on Joomla 6.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/icagenda-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/icagenda-sicherheitsluecke-joomla\"},{\"element\":\"com_sppagebuilder\",\"type\":\"component\",\"folder\":\"\",\"name\":\"SP Page Builder\",\"below\":\"6.6.2\",\"above\":\"6.0.0\",\"severity\":\"critical\",\"note\":\"Zero-Day (RCE) bis 6.6.1: der asset-Controller (task=asset.uploadCustomIcon) hatte keine Zugriffs-\\/Login-\\/Token-Pr\\u00fcfung - jeder konnte ohne Login eine beliebige Datei hochladen und ausf\\u00fchren (Remote Code Execution). Wurde aktiv ausgenutzt. Dringend auf 6.6.2 aktualisieren. (HTProtects Mini-WAF blockt den unauthentifizierten Aufruf, das Dateischild verhindert zus\\u00e4tzlich die Ausf\\u00fchrung einer hoc\",\"note_en\":\"Zero-day (RCE) up to 6.6.1: the asset controller (task=asset.uploadCustomIcon) had no access\\/login\\/token check - anyone could upload 
  and execute an arbitrary file without logging in (remote code execution). Actively exploited. Update to 6.6.2 urgently. (HTProtect mini-WAF blocks the unauthenticated call, 
  and the file shield additionally prevents an uploaded PHP shell 
  from executing.)\",\"advisory\":\"https:\\/\\/website-bereinigung.de\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\",\"advisory_en\":\"https:\\/\\/website-bereinigung.de\\/en\\/blog\\/sp-page-builder-sicherheitsluecke-joomla\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.6\",\"above\":\"3.5.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) bis 3.5.10: ein Front-End-Upload-Endpunkt (zum Hinzuf\\u00fcgen von Bildern) pr\\u00fcfte nur das CSRF-Token, aber keine Zugriffsrechte und keinen Dateityp - ein nicht eingeloggter Angreifer konnte eine beliebige Datei (z. B. PHP-Shell) in einen frei w\\u00e4hlbaren Ordner hochladen und ausf\\u00fchren (Remote Code Execution). Dringend auf 3.6.0 aktualisieren. (HTProtects generischer Upload-Sch\",\"note_en\":\"Critical flaw (RCE) up to 3.5.10: a front-end upload endpoint (for adding images) only verified the CSRF token but no access rights 
  and no file type - an unauthenticated attacker could upload an arbitrary file (e.g. a PHP shell) into a freely chosen folder 
  and execute it (remote code execution). Update to 3.6.0 urgently. (The HTProtect generic upload protection already blocks the unauthenticated u\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.4.10\",\"above\":\"3.2.0\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-4-Linie unter 3.4.10: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.4.10 (Backport) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Dateischild verh\",\"note_en\":\"Critical flaw (RCE) in the Joomla 4 line below 3.4.10: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder 
  and executable. Fixed in 3.4.10 (backport). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents execution.)\",\"advisory\":\"\",\"advisory_en\":\"\"},{\"element\":\"com_pagebuilderck\",\"type\":\"component\",\"folder\":\"\",\"name\":\"PageBuilder CK\",\"below\":\"3.1.1\",\"above\":\"\",\"severity\":\"critical\",\"note\":\"Kritische L\\u00fccke (RCE) in der Joomla-3-Linie unter 3.1.1: unauthentifizierter Datei-Upload \\u00fcber einen Front-End-Endpunkt (nur CSRF-Token, keine Zugriffs-\\/Typpr\\u00fcfung) - beliebige Datei in frei w\\u00e4hlbaren Ordner hochladbar und ausf\\u00fchrbar. In 3.1.1 (Backport f\\u00fcr Joomla 3) behoben. Dringend aktualisieren. (HTProtects generischer Upload-Schutz blockt den unauthentifizierten Upload bereits; das Date\",\"note_en\":\"Critical flaw (RCE) in the Joomla 3 line below 3.1.1: unauthenticated file upload via a front-end endpoint (CSRF token only, no access\\/type check) - arbitrary file uploadable into a freely chosen folder 
  and executable. Fixed in 3.1.1 (backport for Joomla 3). Update urgently. (The HTProtect generic upload protection already blocks the unauthenticated upload; the file shield additionally prevents ex\",\"advisory\":\"\",\"advisory_en\":\"\"}],\"php_min\":\"8.1\",\"fetched\":\"2026-07-18 10:41:45\",\"fetched_ts\":1784364105,\"joomla_latest\":{\"3\":\"3.10.12\",\"4\":\"4.4.14\",\"5\":\"5.4.7\",\"6\":\"6.1.2\"},\"joomla_latest_ts\":1784315832,\"joomla_latest_try\":1784315832},\"htp_malware\":{\"schema\":1,\"version\":\"2026-07-14.66aa16\",\"sigs\":[{\"id\":\"backdoor-prepend-sshkey\",\"all\":[\"auto_prepend_file\",\"authorized_keys\"]},{\"id\":\"cred-stealer-ctfaudit\",\"any\":[\"x-ctf-audit\",\"jlib_audit_gid\"]},{\"id\":\"upload-shell-form\",\"all\":[\"move_uploaded_file\",\"check directory permissions\"]},{\"id\":\"sppb-iconfont-shell\",\"any\":[\"sppbwhoami\"]},{\"id\":\"remote-eval-loader\",\"all\":[\"eval(\\\"?>\\\"\"],\"any\":[\"fetchcontentfromurl\",\"file_get_contents(\\\"http\",\"file_get_contents(\'http\"]},{\"id\":\"seo-doorway-slot\",\"any\":[\"slot gacor\",\"situs slot gacor\"]},{\"id\":\"filemanager-backdoor-data\",\"all\":[\"<?php exit;?>{\",\"\\\"groupinfo\\\"\",\"\\\"sizemax\\\"\"]},{\"id\":\"encrypted-eval-openssl\",\"all\":[\"openssl_raw_data\",\"aes-256-cbc\"],\"not\":[\"openssl_decrypt\",\"openssl_encrypt\"]},{\"id\":\"0xnix-split-encrypted\",\"all\":[\"0xnix encrypted code\"]},{\"id\":\"upload-shell-devco1\",\"all\":[\"move_uploaded_file\",\"devco1\"]},{\"id\":\"upload-shell-uname-form\",\"all\":[\"move_uploaded_file\",\"php_uname\",\"multipart\\/form-data\"]},{\"id\":\"hacktool-adminer\",\"all\":[\"adminer_errors\",\"idf_unescape\"]},{\"id\":\"webshell-range-obfuscator\",\"all\":[\"\\\"r\\\".\\\"a\\\".\\\"n\\\".\\\"g\\\".\\\"e\\\"\",\"eval\"]},{\"id\":\"webshell-md5quad-gate\",\"all\":[\"md5(md5(md5(md5(\",\"eval\"]},{\"id\":\"remote-loader-stream-include\",\"any\":[\"include stream_get_meta_data\",\"require stream_get_meta_data\",\"include(stream_get_meta_data\",\"require(stream_get_meta_data\"]},{\"id\":\"webshell-dual-uploader\",\"all\":[\"remote_url\",\"name=\\\"_upl\\\"\",\"name=\\\"_remote\\\"\"]},{\"id\":\"webshell-comment-obfuscator\",\"all\":[\"-*\\/\\/\\/\",\"\\\"~\\\"\"]},{\"id\":\"eval-openssl-shell\",\"label\":\"eval(openssl_decrypt) webshell\",\"all\":[\"eval(openssl_decrypt(\"]},{\"id\":\"dropper-drivergenius-c2\",\"label\":\"Remote-fetch dropper (drivergenius C2)\",\"all\":[\"drivergenius.it.com\"]},{\"id\":\"dropper-backdate-disguise\",\"label\":\"Remote-fetch dropper (mtime-forge + disguise)\",\"all\":[\"getreferencefiletime\",\"generatefilename\"]},{\"id\":\"js-inject-fake-cleaned\",\"label\":\"JS injection w\\/ fake \\\"cleaned\\/safe\\\" comment\",\"all\":[\"artifacts of previous malicious infection\",\"dangerous code has been removed\"]},{\"id\":\"linkforge-seo-injector\",\"label\":\"LinkForge SEO backlink injector\",\"all\":[\"linkforge.cc\"]},{\"id\":\"seo-doorway-cloak\",\"label\":\"SEO cloaking doorway (Thai gambling, fake sitemap)\",\"all\":[\"output_sitemap_page\",\"is_from_google\",\"send_404_and_exit\"]},{\"id\":\"helix-ultimate-xss\",\"label\":\"Helix Ultimate mega-menu XSS campaign\",\"any\":[\"xss.report\",\"_hu_inject\",\"_huinject\",\"sessionstorage._hxd\"]},{\"id\":\"gsocket-c2\",\"label\":\"gsocket reverse-shell C2 marker\",\"any\":[\"gs_args\"]}],\"scan_ext\":[],\"ack\":[\"6608daed700e0afc330788b2a272ca8d\",\"67b5f9a00c7aabf34261c715aeeaadba\",\"9812b693256a0c306cc53368559c7a4b\",\"ec96a3bed6681af996fd37f0818cba6b\",\"abfe3b7513994ae6ac2f33129b5f6e7b\",\"fb2e76c5ebafc2b8ea82e0d35d45fa02\",\"2ec54ce00420cd41dfae5abedc9edcb7\",\"02c1a767857c55d31cae7277bc43bac2\",\"573a5e7374be2925911b552d485a28f3\",\"cdf24443c39d943f8750d4a4420e6581\",\"99af93b919c5b6bc14a82382c39010ec\",\"55e704bb88a8f9ab0d756976c527516b\",\"981b4f5e07bf9cd1249d60d659e4ef93\",\"87d978102ed075a8e58074a0d3595c30\",\"85648deb8324a11400ecaebcfd04ae16\",\"323707d28051b4cbf161420f5f1bb499\",\"19104a261abbdffe7cd1713949b286cf\",\"a72013015988ad7d978ce9841a9668dd\",\"a8af9b93d27c774601e1d8a902145bd7\",\"82c8de717e67a620ca503a1a01a7d909\",\"a8192a3cf6279862054cb3092dad82bf\",\"eae8beb708347cfe54bf87506b572f41\",\"5db6f4cdd20dfee86e05110a2276d748\",\"872e97edc1d4247d2ed86d35f468ff88\",\"da9c67c9b7be2d5a7eb9113d76119abc\",\"d0c5a881e845f93a72e1450259de0d33\",\"ea531694f501221b61a324d3754da603\",\"b8333a512d949684c91c9dd907f9cb0c\",\"2c57aea21d161fe5761ffab0abff8228\",\"93117860cd06939707a4ff1797bebb40\",\"7f58961ebcc0db81b16c2d16072fb084\"],\"community\":0,\"fp\":[{\"all\":[\"easycalccheckplus\"],\"only\":[\"rce\"],\"id\":\"ecc-plus-doc-rce\"},{\"all\":[\"phpoffice\\\\phpspreadsheet\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpspreadsheet-lib\"},{\"any\":[\"cp_errordocument\",\"status-reason\"],\"not\":[\"<!--#exec\",\"<?\"],\"only\":[\"shtml\"],\"id\":\"plesk-error-shtml\"},{\"all\":[\"gumlet\",\"data:\\/\\/application\\/octet-stream\"],\"only\":[\"wrapper\"],\"id\":\"gumlet-imageresize-datawrapper\"},{\"all\":[\"data:\\/\\/image\",\"exif_read_data\"],\"only\":[\"wrapper\"],\"id\":\"exif-data-wrapper\"},{\"all\":[\"phpoffice\\\\phpword\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"phpword-lib\"},{\"all\":[\"box\\\\spout\"],\"only\":[\"mixedcase\",\"wrapper\"],\"id\":\"box-spout-lib\"},{\"all\":[\"sarciszewski\\\\phpfuture\"],\"only\":[\"wrapper\"],\"id\":\"php-future-lib\"},{\"all\":[\"baformsmodelform\"],\"only\":[\"feed:upload-shell-uname-form\"],\"id\":\"fp-baforms-model\"},{\"all\":[\"quixnxt\"],\"only\":[\"goto\"],\"id\":\"fp-quix-goto\"},{\"all\":[\"varexporter\"],\"only\":[\"goto\"],\"id\":\"fp-symfony-varexporter-goto\"},{\"all\":[\"valorapps.com\"],\"only\":[\"idxbuild\"],\"id\":\"fp-easyfolderlisting-changelog\"},{\"all\":[\"matomo.org\"],\"only\":[\"rce\"],\"id\":\"fp-matomo-rce\"},{\"all\":[\"namespace tracy\"],\"only\":[\"phtml\"],\"id\":\"fp-tracy-phtml\"}],\"seo\":{\"weights\":[],\"keywords\":[],\"sigs\":[]},\"recall\":[],\"fetched\":\"2026-07-18 09:11:48\",\"fetched_ts\":1784358708},\"htp_incidents\":{\".htaccess|changed\":1784287304,\"images\\/.htaccess|changed\":1784287304,\"media\\/.htaccess|changed\":1784288226}}'

1 × INSERT INTO `bly_session` (`session_id`,`guest`,`time`,`userid`,`username`,`client_id`) 
  VALUES  (X'6f34306131636661763439306a6136696c6236386a37346f3330', 1, 1784374929, 0, '', 0

1 × UPDATE `bly_extensions` 
  SET `params` = '{\"mediaversion\":\"be08a26c60c6c2f28c01f4c79f610bdf\"}'

1 × SHOW FULL COLUMNS 
  FROM `bly_content

1 × UPDATE bly_content 
  SET `hits` = (`hits` + 1)

1 × UPDATE `bly_session` 
  SET `data` = 'joomla|s:840:\"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\";'  , `time` = 1784374930

FREIZEITPARK

Joomla!-Debug-Konsole

Sitzung

Profil zum Laufzeitverhalten

Zeit

Speicher

Speichernutzung

Datenbankabfragen

50 ausgeführte Abfragen 99.93 ms

15 Duplikate gefunden!

35 verwendete Abfragetypen, sortiert nach Häufigkeit ihrer Ausführung

SELECT-Tabellen:

Andere Tabellen: