Support

Admin Tools

#13129 WAF causing issue on Pop up Link

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Thursday, 02 August 2012 01:51 CDT

user44310
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: 2.5.6
PHP version: 5.3.13
MySQL version: (unknown)
Host: Rochen
Admin Tools version: 2.3.0

Description of my issue:
I am using Gavick's template Bikestore... at PearlJewelryDirect.com... as you can see its pretty much just installed. No other components installed at this point other then what comes with the template - ie. K2, Virtuemart... and I installed the latest version of your component... all are the newest versions of each... At the top is a link called My Cart... which pops up the Virtuemart Cart... It worked when I installed the site/template... it worked after installing Admin Tools Pro... it worked after doing .htaaccess Maker... however, once I went into the WAF - Configure WAF and clicked save... instead of popping up with the cart... it now pops up with the site in the box as you can see... I turned the WAF off by renaming the one plugin file main.php and it worked... then when I put the main.php file back again... it didnt work.

nicholas
Akeeba Staff
Manager
First go to Admin Tools, Web Application Firewall, Configure WAF. Make sure "Log security exceptions" is set to Yes; if it's not, set it to Yes and click on Save. Now try reproducing your issue. Immediately after that, please go to Admin Tools, Web Application Firewall, Security Exceptions Log and go to the last page. The last log entry should have the date and time of when the issue occurred. Please copy the Reason and Target URL here so that I can help you.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user44310
wow, you gotta be kidding me... what GREAT support - how fast is this... kudo's to you... anyways - here is what I got:
Reason: tmpl= in URL
Target URL: http://www.pearljewelrydirect.com/index.php?tmpl=cart

nicholas
Akeeba Staff
Manager
OK, that makes sense. Please go to Admin Tools, Web Application Firewall, Configure WAF and find the "List of allowed tmpl= keywords" setting. By default it reads
component,raw
Append cart to the list so that it now reads
component,raw,cart
then click on Save & Close. That should fix the problem.

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user44310
The default actually had: component,system,raw and I added cart - is that ok?
It did fix it though... thanks a bunch!

nicholas
Akeeba Staff
Manager
Yes, that's OK :) You're welcome!

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!