But it needs SSH, and does it block sql injections as FWS do?

FWS need script as low as shared host to run and don't required ssh or installation, just can be edited by its admin panel.

FWS fit who has shared host.