Support

Admin Tools

#21355 Fatal Error: Class 'FOFModel'

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Thursday, 30 October 2014 16:55 CDT

[email protected]
 As of the 3.2 release of admintools I began getting "Fatal error: Class 'FOFModel' not found in /homepages/21/d162309257/htdocs/newembassy/tmp/install_54528f6044783/pkg_jcksuite/packages/install_54528f83109fc/plg_jckeditor/install.php on line 281" errors on all my Joomla sites, whether it was 2.5 or 3.0.
I followed the directions and downgraded to the 3.1 version until the 3.3.1 was released.
But now I get the previous mentioned error when I try to install or upgrade various components (JCK editor above), my live sites actually look screwy. I remedied most of the backend issues by fixing permissions and repairing DB, but still get the aforementioned error.
I've been using your products since they were first released and love them, but don't have the time to keep removing them, plus I need security on these sites to keep the hackers out.
Help

nicholas
Akeeba Staff
Manager
I don't understand why you are asking us for support with a third party editor extension (JCKEditor). We have not written its installation script (the install.php file in its package) which is giving your problems.

After a cursory examination of the issue, the problem seems to be a TERRIBLE BUG AND SECURITY MALPRACTICE perpetrated by the JCKEditor install.php file, lines 272-33. The problem comes from this part of their code:

		// Load the FoF library
		if(!defined('FOF_INCLUDED')) {
			include_once JPATH_LIBRARIES.'/fof/include.php';
		}

		// Load the .htaccess Maker configuration
		if(!class_exists('AdmintoolsModelStorage')) {
			include_once JPATH_ADMINISTRATOR.'/components/com_admintools/models/storage.php';
		}
		$model = FOFModel::getTmpInstance('Htmaker','AdmintoolsModel');


For starters, the JoomlaCK editor is trying to SILENTLY AND OPAQUELY add file blocking exceptions in Admin Tools .htaccess Maker. We STRONGLY advise AGAINST this practice because it can degrade your site's security WITHOUT asking for your consent.

Moreover, the JCKEditor developer has introduced a MAJOR bug by using the FOF (F-oh-F) prefix instead of F0F (F-zero-F) used by our software since the last 9 months or so.

Finally, their detection of a .htaccess Maker generated .htaccess file is silly and just plain wrong. Someone using the security optimised .htaccess from Joomla!'s documentation (which is derived from my Master .htaccess) or my Master .htaccess (which is the precursor to Admin Tools' .htaccess Maker) will also face the same installation issue.

Please contact the developer of JCKEditor and ask them to fix their broken installation script. I have discovered one security malpractice and two major bugs in it by spending all of two minutes reading it. That's some seriously sloppy coding.

My advice: Do not use that editor. Its developer has no problem trying to silently undermine the security of your site without your express consent and breaks your site in the process. This is completely unacceptable.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!