Support

Admin Tools

#15615 Security Exceptions

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Tuesday, 02 April 2013 08:08 CDT

user74046
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? No
Have I searched the tickets before posting? No
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: 2.5.9
PHP version: 5.3
MySQL version: (unknown)
Host:homehost
Admin Tools version: 2.5.3

Description of my issue:


Hi Nicolaos,

I installed Admin Tools Professional about 10 days ago, when my site was Hacked by something called "Bangladeshi Hacker". I searched what I should do with my joomla site hacked, and I discovered Admin Tools.

Congratulations for yor job, Nicolaos. Really impressive!!!! I can imagine how much wok you put on all this. Thank you very much.

But now I receive at least one or two emails of Security Exeptions per day. I installed Admin Tools on my other sites too, and I receive these emails on these other sites too.

Here is the default email I receive daily:


"Hello,

We would like to notify you that a security exception was detected on your site, xxxx, with the following details:

IP Address: 187.1.141.29 (IP Lookup: http://ip-lookup.net/index.php?ip=187.1.141.29)
Reason: Bad Behaviour (Required header 'Accept' missing)

If this kind of security exception repeats itself, please log in to your site's back-end and add this IP address to your Admin Tools's Web Application Firewall feature in order to completely block the misbehaving user.

Best regards, xxx "


The REASON is normally " Bad Behaviour (Required header 'Accept' missing)"

but sometimes I receive this REASON too: "Reason: Bad Behaviour (Header 'Pragma' without 'Cache-Control' prohibited for HTTP/1.1 requests)"



Why do I receive this daily? Does this mean that there ar e some hackers out there trying to hack me three times per day? Or should I ignore these emails?

Thank you very much Nikolaos.

nicholas
Akeeba Staff
Manager
First, thank you very much for your kind words!

The Bad Behaviour blocking reason comes from the integration with the third party Bad Behaviour library. Supposedly, this library blocks a lot of mischievous web requests. In practice, it blocks a lot of legitimate requests and does more harm than good on most sites. That's why it was removed from Admin Tools 2.5.3. I am not sure why you keep on receiving those emails. You shouldn't, as this feature is no longer there. Please remove the plugins/system/admintools directory and install Admin Tools Professional 2.5.3 again, without uninstalling anything in between. This should make these messages stop.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!