Support

Admin Tools

#10102 Bad behaviour blocking web users

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Monday, 21 November 2011 07:14 CST

user45005
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? yes
Have I searched the forum before posting? yes
Have I read the documentation before posting (which pages?)? yes
Joomla! version: 1.7.3
PHP version: (unknown)
MySQL version: (unknown)
Host: (optional, but it helps us help you)
Admin Tools version: 2.1.11


Description of my issue: I have been having issues with bad behaviour on my site. I have disabled the Enable Bad Behaviour filter, Strict Mode and Bad Behaviour integration. But for some reason people are still getting the bad behaviour filter stuff.
Is there somewhere i need to disable it apart from the WAF.

My web users are complaining about this filters and its driving me crazy. Can you please advise as per what to do. I am thinking of disabling the whole plugin if this is not fixed.

Thanks.

nicholas
Akeeba Staff
Manager
You just have to uncheck the "Enable Bad Behaviour integration" checkbox and save. I know that this method works, I use it on this site too. It is possible, however, that something went wrong during the installation of Admin Tools Professional, one table is missing or corrupt and any setting you save does not take any effect. When you save your settings, do you see them when re-entering the editor page?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user45005
I have disabled it and it still behaves funny. I also had the same issue with Allow site templates. I allow site templates but it blocks google bot from my site. Do i have to reinstall it again??

It seems that some of the functions are not working as it should.

Thanks

user45005
When i save changes, it take effort. I dont get any error messages.

nicholas
Akeeba Staff
Manager
I am perfectly sure that your settings are not saved. The best thing to do at this point is to uninstall the component and then re-install Admin Tools 2.1.11 and re-configure it.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user45005
Ok I will do that and report back. Thanks

nicholas
Akeeba Staff
Manager
Any news on that? Did the re-installation work for you?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user45005
I reinstalled the the admin tools. It stopped alerting the bad behaviour stuff, but the template in url issues is still there. It's still blocking google bot and Hwdvideoshare upload menu. Whenever a user tried to upload videos, it triggers template in url exceptions issues at the backend. I have enabled Allow site templates = yes, but still getting the issues.

How can i disable this template issues stuff?

Thanks

nicholas
Akeeba Staff
Manager
Regarding the "template in URL" issue, did you try disabling that option in the WAF Configuration page? Did you read the documentation? If I don't know what you've tried, I can't help you :(

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user45005
I did disabled it in WAF. I read the documentation, and kept getting the template issue problems. Expecially with using hwdvideoshare and most importantly goggle bot. I will past my settings here for you:

Block tp=1 module debugging = yes
Block tmpl=foo system template switch = yes
List of allowed tmpl= keywords = component, system
Block template=foo site template switch = yes
Allow site templates = yes

Those are my settings in WAF

nicholas
Akeeba Staff
Manager
So, you actually did the opposite of what you had to do ;) The "Block template=foo site template switch" should be set to No. When it is set to "Yes" it is enabled, and those URLs are blocked. Set it to No and these requests will pass the firewall.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user45005
Its working now. Thanks. So does this have any security implications?

New settings is now:

Block tp=1 module debugging = yes
Block tmpl=foo system template switch = yes
List of allowed tmpl= keywords = component, system
Block template=foo site template switch = no
Allow site templates = yes

Thanks.

nicholas
Akeeba Staff
Manager
Perfect!

the security implication is insignificant. The template=something switch can't be used to hack your site. It is usually being used as a means to identify if a site is running Joomla!. I mean, if you append template=foobar in a URL, the site will switch back to the default template, i.e. Atomic on Joomla! 1.7 and Milkyway on 1.5. Just try http://www.joomla.org/?template=foobar to see what I mean.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user45005
Right. Thanks for the reply.

nicholas
Akeeba Staff
Manager
You're welcome! If you have any more issues, post back here. It is likely that we may have to tweak settings a bit if you still get GoogleBot's IP banned on your site.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!