Support

Admin Tools

#11433 Allow direct access for specific IP

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Saturday, 17 March 2012 04:30 CDT

user57539
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: 1.5.25
PHP version: (unknown)
MySQL version: (unknown)
Host: (optional, but it helps us help you)
Admin Tools version: Pro 2.2.0

Description of my issue:

Hi,
I need to allow a specific IP to have direct access to a specific directory (including .php files).

As far as I understand ".htaccess Maker> Server Protection> Exceptions" works for all IPs. Is this correct?

So far I have been able to access the directory by adding an exception in "Allow direct access, including .php files, to these directories", but from what I read in the ATP manual, this is obviously a security hole, because I have given access to anyone to access this directory.

If so, is there a way in ATP to allow direct access to a directory for a specific ip number? This would achieve my goal of being able to access this directory myself, and at the same time not decreasing the security of my site overall.

I guess the option "Custom .htaccess rules" could be the answer, but I am totally ignorant of how to write .htaccess rules, so before trying to do it myself and risk breaking something else, I want to be sure there is no other way to achieve this goal in ATP.

(BTW the reason I need this is because I am installing a non-joomla php utility in the same site which I need to be able to access).

Thanks.

nicholas
Akeeba Staff
Manager
Add an exception in the .htaccess maker so that the main .htaccess doesn't block access to that directory. Then create a .htaccess inside the directory in question similar to that:
order allow,deny
deny from all
allow from 1.2.3.4

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user57539
Thanks Nicholas,

It worked out beautifully. I only had to eliminate the first line: "order allow,deny" (I dont know why).

Best regards.

nicholas
Akeeba Staff
Manager
Yes, if your Apache configuration doesn't allow changing the rules order, it throws a 500 error unless you remove that first line. I forgot about it! I'm glad it's working properly now :)

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!