AWAF documentation

Practical guides for installing, integrating, tuning filters, and operating AWAF.

Install into /antibot/, include AWAF in PHP, and run the first checks.

Compatibility, PHP, SQLite, and write permissions.

config.ini map: modes, proxy, captcha, logs, and updates.

YouTube instructions and AWAF resources.

Short answers about setup, modes, logs, CMS, and limits.

AWAF site structure: Markdown docs, components, routes, assets, and Astro build behavior.

Preferred .htaccess auto_prepend_file method and fallback options.

Preferred .htaccess auto_prepend_file method plus entry-point fallback.

Preferred .htaccess auto_prepend_file; config.core.php as MODX fallback.

auto_prepend_file plus wp-admin, AJAX, REST, and callback checks.

auto_prepend_file plus admin, cron, update.php, and JSON/API checks.

auto_prepend_file plus administrator, component endpoint, and extension checks.

Real IP, protocol, nginx, and Cloudflare.

Allow and block lists for IP, URL, User-Agent, and ASN.

Fingerprint, ASN, FPS, HTTP checks, and BLOCK/CAPTCHA actions.

AWAF Tags, fingerprint, and referrer forwarding.

RayID, blocking reasons, debug, and rotation.

Update safely without replacing config.ini, lists/, or logs/.

Common setup, proxy, captcha, and unblocking issues.

AWAF GitHub repository: source install, update history, and the dev branch.