- New
Bot Query Guard Lite
0.00 €
Free PrestaShop 8.x/9.x query-string guard with monitor-only defaults, conservative hard limits, manual parameter blacklist and compact suspicious-pattern reporting.
Bot Query Guard Lite – Free PrestaShop Query String Protection
Bot Query Guard Lite is a lightweight application-layer guard for clearly unreasonable Front Office query-string patterns. It installs in monitor-only mode, performs normal request checks in memory and can reject suspicious requests only after the merchant explicitly enables blocking.
Start in monitor-only mode
Blocking is disabled by default so you can test category pages, pagination, sorting, search, faceted filters, language/currency selection, cart and checkout before enforcing any rule.
Apply conservative query limits
- Maximum raw query-string length.
- Maximum number of query parameters.
- Maximum decoded parameter value length.
- Maximum duplicate count for the same parameter name.
- Manual exact parameter blacklist with Back Office tag/select UI.
Keep normal requests lightweight
Normal requests use in-memory checks and do not write to the database. Only suspicious requests create or update a compact aggregated row for the Back Office summary and recent-pattern view.
Privacy-conscious local operation
The module does not require remote services, CAPTCHA, GeoIP, Cloudflare, AI or a mandatory cron. Request bodies and cookies are not stored by the module’s documented workflow.
LITE VS PRO
Start conservative and add finer controls only when needed
Lite provides monitor-first hard limits and a manual blacklist. Pro adds per-rule control, exact whitelists and extra protection for faceted and repeatedly encoded query values.
LITE
Bot Query Guard Lite
Free
Monitor-first query limits, manual parameter blacklist and aggregated suspicious-pattern reporting.
PRO Advanced
Bot Query Guard Pro
29.90 €
Per-rule toggles, exact whitelists, faceted-query and nested-encoding guards plus selectable block responses.
View ProFeatureLitePro
Monitor-only default✓✓
Global opt-in blocking✓✓
Query length limit✓✓
Parameter count limit✓✓
Parameter value length limit✓✓
Duplicate parameter limit✓✓
Manual exact parameter blacklist✓✓
Aggregated BO summary / recent patterns✓✓
7 / 14 / 30-day retention✓✓
Individual rule enable / disable—✓
Exact parameter whitelists—✓
Exact route/controller and path whitelists—✓
ps_facetedsearch-aware q token guard—✓
Nested percent-encoding depth rule—✓
Selectable HTTP 400 / 403 / 404 response—✓
What is intentionally not included in Lite?
Lite uses a fixed HTTP 400 response for blocked traffic and does not include per-rule switches, exact whitelists, the faceted-search token rule, nested-encoding depth protection or selectable 403/404 responses.
Upgrade in place
Lite and Pro use the same technical module name, database schema and core request inspector. Edition-only behavior is capability-gated, so Pro is intended to replace Lite rather than run beside it.
Compatibility and technical information
- Designed for PrestaShop 8.x and 9.x.
- Evaluates query strings on Front Office requests.
- No mandatory cron.
- No external API or remote security service is required.
Frequently asked questions
Does Lite block requests immediately after installation?
No. It installs in monitor-only mode. Blocking must be explicitly enabled.
Does it store every visitor query?
No. Normal requests do not create database writes; suspicious patterns are stored in compact aggregated form.
Can Lite return 403 or 404 for blocked traffic?
No. Lite uses HTTP 400. Selectable 400, 403 or 404 responses are a Pro feature.
Related resources
Explore more Security modules or visit the PrestaSuite documentation for installation and configuration guidance.
BOTQUERYGUARD-LITE
Specific References
Free PrestaShop 8.x/9.x query-string guard with monitor-only defaults, conservative hard limits, manual parameter blacklist and compact suspicious-pattern reporting.