
- New

Advanced PrestaShop 8.x/9.x query-string protection with per-rule controls, exact whitelists, faceted-search and nested-encoding guards, plus selectable block responses. Purchasing is not enabled yet.
Purchase status: Purchasing Bot Query Guard Pro is not enabled yet. This page describes the Pro protection and whitelist workflow.
Bot Query Guard Pro keeps the monitor-first, lightweight checks from Lite and adds finer controls for stores that need to protect unusual query patterns without broadly blocking legitimate storefront behavior. Pro adds per-rule switches, exact whitelists and additional guards for faceted-search and repeatedly encoded values.
Pro allows the merchant to enable or disable rules individually instead of relying only on one global behavior. This makes it easier to tune protection around the active theme, search, filters and custom Front Office routes.
When ps_facetedsearch is enabled, Pro can limit the number of filter separators in a non-whitelisted q value. It can also detect values that remain percent-encoded through more decoding layers than the configured depth.
Instead of Lite’s fixed HTTP 400 response, Pro can return HTTP 400, 403 or 404 when a request is blocked.
Pro keeps Lite’s conservative limits and reporting, then adds precise exceptions and additional rule types for more controlled enforcement.
Monitor-first query limits, manual parameter blacklist and aggregated suspicious-pattern reporting.
View LitePer-rule toggles, exact whitelists, faceted-query and nested-encoding guards plus selectable block responses.
No. The documented safe default remains monitor-only until blocking is explicitly enabled.
No. Parameter whitelists do not bypass the global raw query-length or total parameter-count checks.
No. The module returns the configured blocked HTTP response; it does not redirect blocked traffic.
Explore more Security modules or visit the PrestaSuite documentation for installation and configuration guidance.