This system plugin protects your /administrator/ folder for uninvited guests. It checks if a specific token is set in the http request. If the token in the reqeust matchs the token in the plugin parameters, the backend login is shown. Ohterwise a redirect to the frontend will happend. The redirect url can also be configured. Example plugin setup 1: token: 1234 http://www.mysite.com/administrator/index.php --> redirect to http://www.mysite.com http://www.mysite.com/administrator/index.php?token=1212 --> redirect to http://www.mysite.com http://www.mysite.com/administrator/index.php?token=1234 --> show admin login exapmle plugin setup 2: token: 1234 url: http://www.google.com http://www.mysite.com/administrator/index.php --> redirect to http://www.google.com http://www.mysite.com/administrator/index.php?token=1212 --> redirect to http://www.google.com http://www.mysite.com/administrator/index.php?token=1234 --> show admin form Diffrence to kSecure and jSecure: 1. non commercial 2. no registration needed to download 3. no entries in php session needed 4. login post request is also inspected !