Support

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: 2.5.6
PHP version: 5.3.13
MySQL version: 5.1.61-log
Host: (optional, but it helps us help you)
Admin Tools version: 2.3.2

Description of my issue:

This is not an issue, but only a suggestion. I had a problem with sending an email to a friend from the email icon at the top of my articles - it triggered the firewall's '"template=" in url' exception.

I found your recommendation in this thread here and have fixed the problem.

I know the answer was in the documentation, but for dumbies like me, it's a big ask to plough through and digest the implictions of every single setting in the configuration when you first install. Some things get missed and forgotten.

I am wondering would it be reasonable to ask you to have the system default for "Allow site templates" set to yes in the WAF configuration? - You're the experts, and I'm sure you have your reasons for setting it to No, so I leave this in your capable hands.

Thanks again for the great support in the forums, and the superb product.

I appreciate your genuine concerns for security. Yet it is surprising to hear that the email to a friend feature is used very infrequently. It is an option in K2 as well as Joomla articles. I would have expected web developers to be using every means possible to increase social interactivity. Especially if they are publishing expert articles of high quality. I went to have a look at www.alistapart.com to see what they are doing. At the bottom of their articles, they have icons for sharing via Facebook, Del.icio.us and Twitter, but no email-a-friend. Is email-a-friend becoming old hat? Is that because emailing is becoming a less popular means of communication particularly between young people?

I can't help but think the ideal is to have all sharing options available for users, including email a friend. (Many of the Baby Boomer generation are more accustomed to, and may at times prefer emailing as opposed to other online social forms of sharing; and the Baby Boomer generation still have the dominant numbers.) So the question arises, would it be possible in Admin Tools to be able to enable site template options only for the default or published template, and would that be a safe option? Of course, even if it is possible, I can anticipate that you are not likely to invest much time and effort into securing a feature that you say is not used much.

Still, it is an interesting question with interesting answers. Thank you for taking the time and effort to respond.