Support

Admin Tools

#14342 new super user can't access backend

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Tuesday, 11 December 2012 01:18 CST

user40075

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)?y
Have I searched the tickets before posting?y
Have I read the documentation before posting (which pages?)?y
PHP version:latest
MySQL version: latest
Host: Rochen
Admin Tools version: current

Description of my issue:

 

Hi Nikko!

 

I finally hired a tech but the tech can't get into the back end with his new super user credentials.

He is redirected to the front home page.

Backend protection is off.  I never did activate the password protection.

I figured perhaps if I whitelist him that would fix it, although I am not sure.

Looking at the headers on his email, he is with siteground and his email is cloaked.

I supposed he has an IP range, but I don't want to whitelist a range!

What do you suggest?

 

Much thanks,

 

Lowtech

 

nicholas
Akeeba Staff
Manager

Turn off the whitelist and blacklist feature of Admin Tools while he's helping you. When he's done, enable them again.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user40075

Bingo!

 

He's in.

 

But, one question.

I understood that when Backend Protection is OFF, people can see the login page.

But they can't.

(I don't object to people not being able to see the login page, but I thought that was controlled by AdminTools.)

 

Best,

 

Lowtech

user40075

PS.

 

By the way, the Tech got in because I whitelisted him, not because I turned off the whitelist or blacklist features.

 

Where do you turn off the whitelist and blacklist features of admintools? I must have skipped school that day and I can't find an option or discussion in the PDF. : )

 

Best,

 

Lowtech

nicholas
Akeeba Staff
Manager

The Back-end protection in .htaccess Maker has an entirely different scope than the one you mistakenly it has. All .htaccess Maker settings are designed to prevent access to arbitrary files in your site's directories. The back-end protection prevents random users from accessing random PHP and media files inside your site's administrator directory. This protects you from fingerprinting attacks (people trying to do recon and understand which software and what version of it you're using) as well as prevent otherwise successful attacks (if a hacker uploads / writes a hacking script in a directory of your site he will not be able to execute it, therefore your site is saved).

Regarding your other question, you can turn on and off the white and blacklists in Admin Tools, Web Application Firewall, Configure WAF. These options are towards the very top of the page.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!