Support

Admin Tools

#12038 Issue when setting Admin Pswd and using FormMaker

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Thursday, 19 April 2012 10:26 CDT

user53908
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? No
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: (2.5.4)
PHP version: (5.2.17)
MySQL version: (5.1.56)
Host: (Siteground)
Admin Tools version: (2.2.5)

Description of my issue:
Running into an issue with FormMaker when setting the Password Protect Administrator. After reading the Admin Tools documentation in how to narrow down errors and add what is found into the Exceptions section, which seemed to work fine when just enabling the "Back-end Protection". But running into a issue when you enable the Password Protect Administrator with Back-end Protection disabled.

Basically, what happens is when you try to submit the form using the FormMaker it brings up the Authentication Required to log in when just Password Protect Admin is enabled.

Is there something else that I should try to narrow down what may be causing the issue or is it fine to just enable the "Back-End Protection"? If you have any suggestions, I would greatly appreciate.





nicholas
Akeeba Staff
Manager
I believe you need to read this troubleshooting article.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user53908
I appreciate the help and assistance. Contacted FormMaker to see what can be done.

Wanted to make sure that I read the information correctly in the documentation. By having the Admin Password in place, then I shouldn't need to enable Back-end Protection setting as well within the htaccess section or is that not correct both should be set.

Thank you for both great extensions that you guys have built and the support.

nicholas
Akeeba Staff
Manager
You are right that if you have the administrator password protection then the back-end protection setting in the .htaccess is redundant, based on the notion that if it's password protected it can't be accessed. However, that is half the truth. The authentication used for the back-end password employs no encryption. This makes the username and password susceptible to man in the middle attacks. This could mean that a potential hacker may end up being able to access your site's administrator directory. Therefore I consider using the back-end protection a sane practice. There is no such thing as too much security :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!