Thank you schlumpfi

One question, how to determine whitelist commands for a website?
to determine an whitelist command, mh, thats not so difficult...
if theres is an existing whitelist (our support forum), than u can use it by copy&paste...
if not, theres a little bit work needed...
the best way is....to all scripts, on which ctxtra works on, an install guide is available (webmenu Anleitungen), some unfortunately not in english...
so, the best way is, u do an request to our support if theres is a new script which do u use. so i can check the script, write an little install guide and i post it on our webside.
the best way to determine all whitelist commands is, that u do an request to our support (this forum) with all your given information... scriptname, version, etc...
or... u can check all links on ur website, some would be blocked, some not, ...
the blocked attack will be shown with all information (querystring) in the adminpanel of ctxtra under "worm-attack". copy and paste the command which is blocked. (but this is not an good way)
best regards....