Mandatory information about my setup:
Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes - troubleshooter & WAF section of docs
Joomla! version: 2.5.4
PHP version: 5.2.17
MySQL version: 5.5.21-55
Host: Hostgator
Admin Tools version: Admin Tools Professional 2.2.5
Description of my issue:
Hi Nicholas,
The WAF, on at least a few of my sites, is sometimes blocking people who are viewing events created in JEvents. The reason is always "template= in URL" but I'm confused about this for two reasons:
So, I'm basically wondering (a) why AdminTools is using the reason "template= in URL" to block URLs with template=component in them, and (b) if you think it's actually working as it should since these URLs seem suspicious.
Thanks!
Chris
Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes - troubleshooter & WAF section of docs
Joomla! version: 2.5.4
PHP version: 5.2.17
MySQL version: 5.5.21-55
Host: Hostgator
Admin Tools version: Admin Tools Professional 2.2.5
Description of my issue:
Hi Nicholas,
The WAF, on at least a few of my sites, is sometimes blocking people who are viewing events created in JEvents. The reason is always "template= in URL" but I'm confused about this for two reasons:
- The URLs look like this: upcoming-events/icals.icalevent/-?template=component&evid=31&icf=1 . In WAF Configuration, I see that "component" is one of the allowed words by default in the "List of allowed tmpl= keywords" section, so I can't figure out why these URLs are being blocked.
- The URLs being blocked actually do seem suspicious to me, so perhaps the system is correct in blocking them. For example, this one was blocked - http://jrculinaryteamcanada.ca/upcoming-events/icals.icalevent/-?template=component&evid=48&icf=1 - and going to it causes a "ics" file to be downloaded. On the site's events themselves, like this one - http://jrculinaryteamcanada.ca/upcoming-events/icalrepeat.detail/2012/05/28/48/-/ika-100-rules-hot-run-prep-7-00am-10ppl-pdr-jj-s - there is no option top create an .ics file. Others, like you see in the attached screen capture, bring up an error that says "The template for this display is not available. Please contact a Site administrator" and again, I can't seem to reach these URLs by simply browsing the site.
So, I'm basically wondering (a) why AdminTools is using the reason "template= in URL" to block URLs with template=component in them, and (b) if you think it's actually working as it should since these URLs seem suspicious.
Thanks!
Chris
