What it does for your store
- Notifications in your Telegram group Every significant change arrives in a Telegram group with your administrators, who made it, from what IP, in which store and at what time.
- Keep an eye on your payment details. Mark changes to IBAN, PayPal, Stripe, Redsys, Bizum, or API keys as critical, and you can request to be notified only of those.
- Detects changes made outside. Compares the store to a saved footprint, so you can also see changes made directly in the database, without going through the dashboard.
- Modules and employees under control. It notifies you of each module installed, uninstalled, activated or deactivated and of each addition, change or removal of employees, with the SuperAdmins highlighted.
- Access from new IPs: Notifies you when an employee enters the back-office from an IP they haven't used before, without repeating the notification for those they already know.
- You know it's still monitoring. A daily cron beat confirms that the module is still active, and if someone uninstalls it, the group receives an alert.
Read also on our blog
-
Essential PrestaShop modules (and the ones you don't need) Almost every PrestaShop store needs modules for the same things: search, security and error monitoring, SEO, legal texts, checkout and cache Read article → -
PrestaShop hacks: skimmers, diverted payments and backdoors we have seen Fake card forms at checkout, payments that end up in someone else's account, backdoors hidden in modules nobody uses. Without saying whose s Read article → -
Errors in your online store: how to find out before your customers do Most stores find out about a fault from an angry customer. We go over what is worth monitoring, where to look when something fails and how t Read article →
Security alert module via Telegram
Price:
€0.00
€0.00
Advanced security audit and real-time Telegram alerts. Protect your PrestaShop store by detecting SQL injections or unauthorized changes to payment accounts (IBAN, Stripe, PayPal), employee modifications, access from unknown IPs, and installations of suspicious modules. Intelligent monitoring system using Snapshots that works even if the attacker directly alters the database.
Installation, updates and support
Module without support but you can contact us
Why did we create this module?
In response to the increase in hacks that change payment methods, we have decided to make this module free for the community.
Has your store been hacked, or do you want to prevent it?
Detects critical database alterations directly or through SQL injections that other modules miss. Receive automatic alerts in your Telegram admin group internally, without external configuration.
✓ Compatible with PrestaShop 1.7.6 through 9.2
Advanced Detection Technology (Snapshot)
Unlike most security modules that rely on PrestaShop event hooks (which are not 100% reliable in the face of configuration changes or direct module actions), RKR Security Alert uses a "Fingerprint" (Snapshot)-based approach .
The module internally stores a secure state of your configuration, installed modules, and employees. With each load of the admin panel, it compares the state in record time to detect discrepancies.
Critical advantage: If an attacker alters your payment details (such as changing your IBAN, PayPal, Stripe, or Redsys/Bizum keys) by executing direct SQL code or exploiting another vulnerability, the change will still be detected. Because you don't rely on the PrestaShop interface to trigger the alert, you're protected against invisible manipulations.
What does the module monitor? (Configurable with switches)
- ✓ Changes to Global Configuration: Keys added, modified, or deleted. Highlighted in 🔴 Critical are changes related to payment gateways (IBAN, PayPal, Stripe, API keys...).
- ✓ "Minimal Noise" mode: Filters and silences the rest of the settings to alert you only when sensitive payment method parameters are altered.
- ✓ Module Audit: Notifications about installations, uninstallations, activations or deactivations of extensions.
- ✓ Employee and Admin Control: Detailed alerts on new user registrations, profile modifications (email, status) and staff terminations (highlighting SuperAdmin accounts).
- ✓ IP Access Control: Immediate notification if an employee accesses the Back-Office from an unregistered IP address. The system self-regulates and remembers previously encountered IPs.
* Always active: Daily Heartbeat self-diagnostics and immediate alert in case of an attempt to uninstall the security module itself. Each alert includes the user, IP address, affected store, and history.
Easy Installation and Setup
1. Create the Bot on Telegram:
Talk to @BotFather -> run /newbot -> save your token. Create a Telegram group with your administrators, add the newly created bot, and extract the group's numeric ID (chat_id) using tools like @RawDataBot .
2. Configure the Module:
Upload the .zip package from your Modules tab in PrestaShop. Paste the Token and Chat ID into the settings panel, define your preferences, and click "Send test message." The initial snapshot will override the pre-existing state and only send alerts from the moment of activation.
3. Full automation using Cron Task (Recommended):
Copy the secure URL generated in your module's settings and add it to your hosting's cron job. Running in the background (e.g., every hour), it will continuously audit changes without requiring a user to log into the control panel.
0 9 * * * curl -s " https://TUTIENDA.com/index.php?fc=module&module=securityalert&controller=heartbeat&secret=XXXX " > /dev/null
Technical Considerations
- Crash protection: The module never breaks the back-office load. If the Telegram API or a query fails, it is safely saved in the debug logs to avoid disrupting the store's sales flow.
- Intelligent performance management: Applies checks with controlled minimum wait intervals (default 60 seconds) avoiding overloading your server's database.
- Proxy Networks / Cloudflare: Make sure your server's reverse proxy module is properly configured to capture the employee's real IP address instead of the content delivery network (CDN) IP address.
-
Brand
| Version | 2.2.0 |
|---|---|
| Compatibility | PrestaShop 1.7.6 – 9.2 |
| Languages included | Spanish (Telegram panel and notifications) |
| Modify the core | No: no overrides |
| Own tables | None |
| Scheduled tasks | Optional and recommended: the daily heartbeat by cron, which also checks for changes without opening the panel |
| Requirements | A Telegram bot (token of @BotFather) and a group with your administrators (their chat ID) |
| Documentation | README in Spanish included in the module |
v2.2.0
- New: Monitors configuration and payment data, modules, employees, and access from new IPs, and alerts via Telegram, with daily cron updates.
You might also like
4 other products in the same category
Connectif connection limiter
€242.00
€200.00
+ VAT = €242.00
Free translation locator module and translator with Google extension
Blog
€48.40
€40.00
+ VAT = €48.40
También podría interesarte
€80.95
€66.90
+ VAT = €80.95
€80.95
€66.90
+ VAT = €80.95
€80.95
€66.90
+ VAT = €80.95
€84.69
€69.99
+ VAT = €84.69
€120.99
€99.99
+ VAT = €120.99
€80.95
€66.90
+ VAT = €80.95
€80.95
€66.90
+ VAT = €80.95
€302.50
€250.00
+ VAT = €302.50
€181.50
€150.00
+ VAT = €181.50
Questions and answers
-
¿Necesito contratar algún servicio externo para recibir las alertas?
0-
No. Solo necesitas un bot de Telegram, que creas gratis con @BotFather, y un grupo con tus administradores. Pegas el token y el chat_id en la configuración del módulo y pulsas «Enviar mensaje de prueba» para comprobar que llega.
-
-
¿Detecta cambios hechos directamente en la base de datos, sin pasar por el back-office?
0-
Sí. El módulo no depende de los hooks de PrestaShop: guarda una huella (snapshot) de la configuración, los módulos instalados y los empleados, y la compara con el estado actual. Si alguien cambia tu IBAN o las claves de PayPal, Stripe o Redsys con una consulta SQL directa, el cambio se detecta igual.
-
-
¿Me va a llenar el grupo de avisos por cada ajuste que toque?
0-
No tiene por qué. Cada vigilancia (configuración, módulos, empleados, accesos por IP) se activa con su interruptor, y el modo «Mínimo ruido» silencia el resto de la configuración para avisarte solo cuando cambian los parámetros de los métodos de pago.
-
-
¿Hace falta configurar una tarea cron?
0-
Es lo recomendado. Sin cron, la comprobación se hace cuando alguien carga el back-office. Con la URL segura que te da la configuración en el cron de tu hosting (por ejemplo, cada hora), la auditoría corre en segundo plano aunque nadie entre al panel.
-
-
¿Puede ralentizar o bloquear mi back-office?
0-
Está hecho para no hacerlo. Las comprobaciones respetan un intervalo mínimo (60 segundos por defecto) y, si Telegram o una consulta fallan, el error se guarda en los logs de depuración sin cortar la carga del back-office.
-
-
Uso Cloudflare o un proxy. ¿Verá bien la IP de mis empleados?
0-
Solo si el servidor está configurado para pasar la IP real. Revisa el módulo de proxy inverso de tu servidor; si no, el aviso de acceso desde IP nueva mostrará la IP de la CDN en lugar de la del empleado.
-
-
¿Con qué versiones de PrestaShop funciona?
0-
Con PrestaShop 1.7.6 hasta 9.2.
-
