Support

Admin Tools

#11371 How to add an exception to WAF?

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Tuesday, 06 March 2012 06:48 CST

grisha
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: (unknown)1.7.3
PHP version: (unknown)5.2.17
MySQL version: (unknown)5.1.60-community-log
Host: (optional, but it helps us help you)
Admin Tools version: (unknown)2.2.0

Description of my issue:
Hello!
I've just installed JCE and it doesn't show in New Article page. From what I understood, I should add an exception to WAP with com_jce parameter. The problem is...I have no idea how to do it. I need a step by step guide to know what to do.
What I do is that I go to WAF Exceptions, then put a check mark on a left, just below "What's this? Click to find out." Then in component box I write com_jce and I leave blank fields for view and query parameter. Then I press publish and get an error "Please, first make a selection from the list".

grisha
I think its OK now...Though it's strange. Probably just choosing JCE in Global Configuration alone wasn't enough. Because after I went to My Profile and chose JCE there, then once I tried to create a new Joomla article I got JCE.

As per WAF exceptions...Just to be on a safe side...What is confusing is this:
It says there "No exceptions defined" . So its fine! BUT...
There's a WARNING in the Admin Tools manual. It says:

You can not leave all three options blank. That would match all components, all views and all query strings or, in other words, EVERY PAGE you access. This would imply that WAF would be effectively turned off. Admin Tools detects an attempt to do that and won't allow you to perform such a change.

But in my case all 3 are blank and at the same time it says "No exceptions defined" .
How come?

nicholas
Akeeba Staff
Manager
In order to add an exception, you have to first click on the New button. What you were doing all along was not creating a new exception, but trying to apply a filter. In the list view, all edit boxes and combos above the list are used to filter the list. You have to use the Edit or Add buttons to edit or add, respectively, items on the list. This is a general Joomla! UI convention followed by all core and third party components, including my own components :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

grisha
OK, what happens is that I pressed NEW button and added an exception com_jce to Components and then clicked SAVE. On the next page what I see is that I see that exception added to Components, but what I don't understand is that below VIEW and QUERY PARAMETER, it says (All), (All). What exactly ALL means? Does it mean that everything is open because ALL is an exception? Doesn't that render WAF open to everything?
And what more thing...What role buttons PUBLISH and UNPUBLISH play if there're NEW AND DELETE buttons present?

nicholas
Akeeba Staff
Manager
OK, now that makes sense. Each exception applies to a particular combination of component, view and query parameter. You have (correctly!) created an exception which applies to the com_jce component, all of its views and for all of its query parameter combinations. Hence, when you see (all) in the list, it's normal. I have to somehow let you know that leaving that field blank imposes no restriction, ergo "(all)". So, no, it doesn't open WAF to anything, because all of the conditions have to be true at the same time for the exception to kick in. Therefore, you have only added an exception for com_jce.

The publish and unpublish icons shouldn't be there. I can see a delete button, so I don't understand what you mean?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

grisha
Okay, finally I'm starting to understand. Each component has its views and queries.
Therefore, views and queries are per component. I simply didn't have an idea about views and queries. So when we choose to add a certain component to an exception in WAF, then we ALSO add ALL of its views and queries.
Then how you can explain what's written in Admin Tools manual.
On p. 40 there's a warning. Even if no exceptions defined, I still see all 3 fields blank??? I don't get it...

nicholas
Akeeba Staff
Manager
The screen reads "No exceptions defined". Ergo, you have defined no exceptions yet. As I said, you have to click on the New button (top row, second from the right, between the Edit and Back buttons).

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

grisha
Well, since JCE works fine, why would I need a WAF exception now?

I think since everything works fine, this ticket could be closed.

Thanks for your help!

nicholas
Akeeba Staff
Manager
Yup, no need to create a WAF exception in that case. I'm closing the ticket as per your request.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!