Enterprise Security

3-layer SQL protection, server-side credit deduction, and draft-only write operations keep your store safe.

Security is built into every layer of Project Shadow. AI-generated SQL queries pass through three independent validation layers before touching your database. Credits are deducted server-side so they can't be manipulated. All write operations create drafts, never publish directly. Your customer data never leaves your server.

Capabilities

• 3-Layer SQL Guard: AI prompt instructions, plugin-side validator (30+ forbidden tables), and server-side ChatbotSqlGuard.
• Server-Side Credits: Credit deduction happens on the server in a database transaction. Cannot be bypassed or manipulated.
• Draft-Only Writes: Orders are created as AI-generated drafts. Products and posts are saved as drafts. Nothing publishes without review.
• Data Stays Local: SQL queries run on your WordPress database. Customer data never leaves your server.
• Query Validation: UNION blocked, LIMIT enforced, max 2 subqueries, 30+ system tables protected, publish filter injected.
• Encrypted Tokens: OAuth tokens and API keys stored with AES-256 encryption at rest.

How It Works

1. AI Generates SQL: WooBrain creates a SQL query based on your natural language question.
2. Plugin Validates: The plugin-side validator checks for forbidden tables, injection patterns, and enforces limits.
3. Server Validates: ChatbotSqlGuard on the server performs a second independent validation pass.
4. Safe Execution: Only validated queries execute against your local database. Results are formatted and returned.