Support

Admin Tools

#18710 image gallery conflict with Admin Tools?

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Wednesday, 08 January 2014 02:21 CST

Tuesday, 07 January 2014 01:25 CST

user19329
 Hi Nicholas,

I'm just migrated a Yoo-nano site to Rochen for a new client. Discovered a gallery does not show images. Googling suggested to the installation of Admin tools. I had not set up Htaccess Maker yet.

I did clone the site. After exploring the Widgetkit to page in question lost even the links in the gallery images. I changed changed to Widgetkit settings back to match the clone but no improvement.

This eveing I did set up Htaccess Maker per what I'd seen, adding cache to "Front-end directories where file type exceptions are allowed" area. No change.

Here's page in live site:"Live" page
& here's clone page (I don't recall whether I made the clone before or after setting up Admin Tools):
clone page

The .htaccess file is attached.

Please review. I'll be grateful for any suggestions.

Best,
Scott

Tuesday, 07 January 2014 02:08 CST

nicholas
Nothing is being blocked on http://www.pawsingoodcare.com/index.php/2013-07-11-19-52-11. On http://www.pawsingoodcare.com/test/index.php/2013-07-11-19-52-11 you can see that WidgetKit is idiotically trying to create URLs pointing inside the private, non web accessible cache folder, e.g. http://www.pawsingoodcare.com/test/cache/widgetkit/gallery/1/maya-1c2bdade00.jpg If you want to keep on using the badly written WidgetKit and slightly screw your site's security you can add cache/widgetkit to the "Front-end directories where file type exceptions are allowed" list in the .htaccess Maker page.

I STRONGLY advise AGAINST using WidgetKit or anything from Yoo. We have notified them of the security screw ups in Zoo and WidgetKit since early 2011. Three years later they have not responded and they keep on maintaining the same screw ups in their code, something that only takes 15 minutes by a junior developer to fix. As a result I STRONGLY advise AGAINST using their software. It's broken by design and they won't fix it. If you value your site's security, stay away from their software.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Tuesday, 07 January 2014 13:08 CST

user19329
Thank you Nicholas,

I have implemented your suggestion until I find another template for her to use.

I am not a designer though I can build sites. From a security perspective can you suggest other template families to avoid or even better for me, a couple of good ones to look at?

Thanks again for your excellent work. You helped me with a security issue a few years ago on another site. Have had no security issues there since.

Best wishes for a healthy, happy and prosperous year.
Scott

Tuesday, 07 January 2014 14:27 CST

nicholas
All templates have their challenges, but at least the other developers are much more responsive with fixes. If you choose a RocketTheme template remember to NOT activate its Gzipper feature (it requires you to allow execution of arbitrary PHP files from all over the place - bad idea).

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Tuesday, 07 January 2014 14:35 CST

user19329
Thanks, Nicholas.

I use a RocketTheme template for another client. I haven't activated their Gzipper feature as I remember you mentioning it as problematic before.

Would like to Gzip though.

Best,
Scott

Tuesday, 07 January 2014 14:37 CST

nicholas
.htaccess Maker takes care of that, with the Compress static resource feature. Bonus: it is absolutely secure (unlike PHP based solutions) and 20 to 50 times faster!!! Normally it's hard to setup as it requires knowing the .htaccess syntax, but it' stead easy when you have Admin Tools Pro :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Tuesday, 07 January 2014 14:39 CST

user19329
Awesome! Thanks for the tip. Will use this.

Best,
Scott

Wednesday, 08 January 2014 02:21 CST

nicholas
You're welcome, Scott!

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!