Support

Admin Tools

#12156 Firewall lose all its settings

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Saturday, 12 May 2012 09:29 CDT

user57128
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: 1.5.26
PHP version: 5.2.17
MySQL version: 5.1.61
Host: Bluehost
Admin Tools version: 2.2.5

Description of my issue:

Since I installed Admin Tools 2.2.5, the firewall settings are lost every two or three days. I notice it when I stop receiving my notification mails, so I look into firewall settings an they are blank.

I tried uninstalling and reinstalling admin Tools (using the joomla uninstaller. is there any manual uninstalling that you recommend?). The admin tool pluging is the first one in the list. My IP is not in the white list or exception list.

Do you have any suggestion?, I don't know how to troubleshoot this.

Thanks in advance.

nicholas
Akeeba Staff
Manager
There is no feature in Admin Tools which could cause that. The settings being reset means that someone or something is clearing your #__admintools_storage table every few days. If it's not you or your host restoring an older backup or doing some kind of database action which could do that, you have to start worrying. If I were a clever hacker infiltrating your site I would set up a small piece of code and/or a CRON job to reset the settings of all known security extensions, including Admin Tools.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user57128
Hi Nicholas. Following the ticket #12182 (that has the same case as me), my firewall settings were just deleted, and this is that contains right now the admintools_storage table:

{"timestamp_session_optimize":1336426604,"timestamp_session_clean":1336423003,"timestamp_cache_clean":1336423003,"timestamp_cache_expire":1336423004,"timestamp_clean_temp":1336426604,"latestjversion":"{\"installed\":{\"version\":\"1.5.26\",\"package\":\"http:\\\/\\\/joomlacode.org\\\/gf\\\/download\\\/frsrelease\\\/16890\\\/73390\\\/Joomla_1.5.26-Stable-Full_Package.zip\"},\"current\":{\"version\":\"1.5.26\",\"package\":\"http:\\\/\\\/joomlacode.org\\\/gf\\\/download\\\/frsrelease\\\/16890\\\/73390\\\/Joomla_1.5.26-Stable-Full_Package.zip\"},\"sts\":{\"version\":\"\",\"package\":\"\"},\"lts\":{\"version\":\"\",\"package\":\"\"}}","lastjupdatecheck":1336426250}

user57128
And this is the dump of the table (with another prefix, of course):

-- phpMyAdmin SQL Dump
-- version 3.4.10.2
-- http://www.phpmyadmin.net
--
-- Servidor: localhost
-- Tiempo de generación: 07-05-2012 a las 09:41:29
-- Versión del servidor: 5.1.61
-- Versión de PHP: 5.2.17

SET SQL_MODE="NO_AUTO_VALUE_ON_ZERO";
SET time_zone = "+00:00";


/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
/*!40101 SET NAMES utf8 */;


DROP TABLE IF EXISTS `xxxx_admintools_storage`;
CREATE TABLE IF NOT EXISTS `xxxx_admintools_storage` (
`key` varchar(255) NOT NULL,
`value` longtext NOT NULL,
PRIMARY KEY (`key`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

--
-- Volcado de datos para la tabla `xxxx_admintools_storage`
--

INSERT INTO `xxxx_admintools_storage` (`key`, `value`) VALUES
('cparams', '{"timestamp_session_optimize":1336426604,"timestamp_session_clean":1336423003,"timestamp_cache_clean":1336423003,"timestamp_cache_expire":1336423004,"timestamp_clean_temp":1336426604,"latestjversion":"{\\"installed\\":{\\"version\\":\\"1.5.26\\",\\"package\\":\\"http:\\\\\\/\\\\\\/joomlacode.org\\\\\\/gf\\\\\\/download\\\\\\/frsrelease\\\\\\/16890\\\\\\/73390\\\\\\/Joomla_1.5.26-Stable-Full_Package.zip\\"},\\"current\\":{\\"version\\":\\"1.5.26\\",\\"package\\":\\"http:\\\\\\/\\\\\\/joomlacode.org\\\\\\/gf\\\\\\/download\\\\\\/frsrelease\\\\\\/16890\\\\\\/73390\\\\\\/Joomla_1.5.26-Stable-Full_Package.zip\\"},\\"sts\\":{\\"version\\":\\"\\",\\"package\\":\\"\\"},\\"lts\\":{\\"version\\":\\"\\",\\"package\\":\\"\\"}}","lastjupdatecheck":1336426250}');

/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;

nicholas
Akeeba Staff
Manager
I still can't replicate it. I was suspecting that maybe, somehow, the automation options in the System - Admin Tools plugin would cause this issue but no. It seems that for some odd reason the storage table is reset before the automation options store any data. Let's try confirming that.

Go to Extensions, Plugins Manager, find the Admin Tools plugin and disable all of its automation options, e.g. session optimiser, session cleaner etc. Also disable the "System - Admin Tools Update Email" and "System - Joomla! Update Email" plugins.

Is the settings reset still occurring?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user57128
Thanks for your reply. I just made what you suggested to, so I'll wait and let you know if it's reset again.

I wanted to let you know something bizarre: before accesing the administrator page, I could acces the back-end login page without the secret URL. I wrote it again with the secret URL, ad I could access the back-end login page again. I entered and checked the firewall settings, and they were already reset.

So, it's strange cause I could access the back-end login page with the secret URL, but the firewall settings were blank!!

After setting up the firewall again, I lose the access to back-end page without secret URL (as it should be).

I read something similar happened to the person form ticket 12215:

"Also, it might be worth you knowing that when I looked in the firewall for the first time upon discovering I had access via standard URL, the secret was gone. ie: blank field. ironically, I could still access the administrator page with the secret URL, even though there wasn't one there."

nicholas
Akeeba Staff
Manager
Please note that the "secret URL" you mention is not a secret URL. It's the good ol' URL with a secret URL parameter. Let me explain this. The regular login page is http://www.example.com/administrator. When you assign the secret word foobar you must enter the URL http://www.example.com/administrator?foobar to access the login page. However, if you go to a site which does not have Admin Tools installed, you can also use the http://www.example.com/administrator?foobar URL to log in. Why? Because the ?foobar part of the URL only defines a URL parameter. Plain Joomla! does not care about most URL parameters. You can tuck in anything you like and Joomla! will happily... ignore it. This situation only changes when you install Admin Tools Pro and enter a secret URL parameter. In this case, if the URL parameter is not present then Admin Tools will not let you see the login page. The opposite (including the URL parameter when not necessary) will NOT cause an inability to see the login page. So, what you describe is just the matter of not having entered a secret URL parameter in the configuration, as the configuration was blank. What you describe is not strange and not out of the ordinary. In fact, quite to the contrary, it is exactly what the expected behaviour is.

So, what is the problem you would like me to help you with?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user57128
Thanks for the explanation.

I'll continue checking wheter the firewall is reset or not with the directions you gave. When reset,it happened the same day or next day,so we´ll maybe have an answer tomorrow

nicholas
Akeeba Staff
Manager
Yes, please do. I really want to be able to replicate this issue so that I can understand why it happens. Right now it's the only release blocker that's left.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user57128
Nicholas, thanks for your help to troubleshoot this problem.

I wanted to let you know that the suggestions you gave me ("Go to Extensions, Plugins Manager, find the Admin Tools plugin and disable all of its automation options, e.g. session optimiser, session cleaner etc. Also disable the "System - Admin Tools Update Email" and "System - Joomla! Update Email" plugins") worked.

The firewall has not been reset again since I disabled the automation options in Admin tools plugin.

I had already disabled (before you suggested it) the "System - Admin Tools Update Email" and "System - Joomla! Update Email" plugins and the problem was still happening, so it looks like that worked was disabling automation options in "Admin Tools pluging2.

Thanks again. Please let me know if you need to make more tests to narrow the possible cause of the problem.

nicholas
Akeeba Staff
Manager
Thank you for your feedback, it's actually very helpful! Even though I can't replicate this issue, I have a very good idea why it might happen. I have applied a workaround in the latest dev release, rev8DE2547. Please download it, install it on top of your existing copy of Admin Tools, then enable the automation options. Please tell me if that fixes the settings reset issue.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user57128
Sorry for the delay. I just installed the rev8DE2547 version and enabled the automation options.

I'll let you know if it fixes the settings reset issue

Thanks.

user57128
Workaround made in rev8DE2547 has fixed the issue. Now it's working perfect. WAF parameters are not being deleted anymore.

Thank you very much!!

nicholas
Akeeba Staff
Manager
Awesome! Thank you for your feedback. I will be releasing a new version very soon.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!