Support

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: (2.5.7)
PHP version: (5.3.6)
MySQL version: (5.1.65 )
Host: (vodien.com)
Admin Tools version: (2.4.1 latest)

Description of my issue:

Problem 1)
I constantly see this "admin query string" in the security exception log whenever I navigate around in the backend.
http://mydomain.com/administrator/index.php?option=com_installer&view=update&task=update.ajax

I believe this is caused by the com_installer attempting to look for updates, which should be a legit request thus I don't understand why it's appearing as a security exception. I have tried to create a WAF exception rule for com_installer and view update but the log still continues to display that admin query string from my IP address.

Since the site is offline and I'm the only one accessing the website, I'm pretty sure this is a bug especially when I'm able to reproduce it by going to Extension Manager->Update->Find Updates.

Problem 2)
The time shown in the log seems to be wrong. In Joomla I have set my timezone to Singapore but the time for the events in the security exception log seems to show the US time instead. For example, it's 6pm now but the log says 10am.

Hmm, I was mistaken about being able to reproduce problem 1 by going to Extension Manager->Update->Find Updates.

The exact reproduction step should be simply by going back to Control Panel in the backend where the Joomla extension update quick icon would trigger the security exception. Everytime I go back to the Control Panel, this event is logged.

Ouch... that's kinda sad. But after reading your reply, I did some testing and realize that it has nothing to do with the secret key. I could be wrong though, since I'm still abit confused why sometimes the secret key disappears from the url.

But if I were to disable HTTPS from the backend and use simply HTTP, there is no security exception and the quick icon will show me that "All Extensions are up to date". But if I were to use HTTPS, it will trigger a security exception and then the quick icon will show me "Unknown Extensions Update Status".

If I disable the quick icon module for Joomla, then no security exception will be logged.

Ah, good find there. Yes, I had a $live_site that's using non-https in the configuration. I removed the value and now there's no more security exception being logged even when in HTTPS mode.

Thanks for the help, problem is resolved I guess xD.