Support

Admin Tools

#21834 .htaccess backend protection no more backed #2

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by tampe125 on Friday, 09 January 2015 10:04 CST

Friday, 09 January 2015 09:02 CST

redmarakeebapro
We encounter the same problem as this post:
https://www.akeebabackup.com/support/admin-tools/21797-htaccess-backend-protection-no-more-backend.html

Could you provide a workaround for this? We can't change this on the server on short notice but we would like to be able to use the password protect option.

Seems like adding the line from a previous version:
RewriteCond %{REQUEST_URI} /component/|(/[^.]*|\.(php|html?|feed|pdf|raw|ini|zip|json|file|vcf))$ [NC]
solves the problem but of course this line gets overwritten when recreating the htaccess.

Looking forward to your response!

Friday, 09 January 2015 09:10 CST

tampe125
Hello Redmar,

adding that line is not the correct or "final" solution.
Please install the latest dev release and try again, it should fix your issue.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 09 January 2015 09:21 CST

redmarakeebapro
Hello Davide,

First of all; thank you for your quick reply!

After installing the dev release when I try to go to Components -> AdminTools I get logged off... Any idea why?

Friday, 09 January 2015 09:25 CST

tampe125
Are you logging in using a Super User?
If you try to login again can you access the component?
Can you please to directly access the log url? The address is www.yoursite.com/administrator/index.php?option=com_admintools&view=logs
Can you see any security exception triggered by your IP?

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 09 January 2015 09:35 CST

redmarakeebapro
I was logged in as Super User, no security exceptions in the log. The strange thing is I tried a few more times and now it worked. The password protection works again as well!

2 more questions:
1. Would you advice me to install the Dev release on my other sites as well or wait until the next update?
2. Is it advisable to create a new htaccess file each time after updating AdminTools to a new version?

Friday, 09 January 2015 09:54 CST

tampe125
  1. A new version is scheduled for the next week, so if you can wait I'd suggest you to wait for the stable release
  2. Usually it's not necessary, since that code is very stable. You should check the release notes and then regenerate it if required.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 09 January 2015 09:58 CST

redmarakeebapro
Hi Davide,
In that case I'll wait until the next version release. Might be a suggestion to include a post installation tip for users to regenerate the htaccess file after significant changes in this file. I didn't update the htaccess files since a long time;)

You can now close this ticket; I would like to compliment you on your quick and adequate response!

Friday, 09 January 2015 10:04 CST

tampe125
Thank you very much!

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!