Support

 I use admin tools on my site to help protect me from all the bad stuff out there. I am consistently seeing errors generated with this kind of URL:

www.jdevtech.com/component/mailto/?tmpl=component&template=client&link=90f0ce9cf086119c1a26db71a0b15ba0c2965f44

which causes a template in URL error in admin tools. Is there something on my site that may be causing this to happen? I also see these errors in Google webmaster tools.

Can you shed any light on this?

My Site is: www.jdevtech.com

Thanks.
Bill S.

Bill,

In WAF Configuration, on the Visual Fingerprinting Protection tab, make sure that "List of allowed tmpl= keywords" includes "component" and that "Allow site templates" is set to "yes".

Thanks. I did this and we will see. The "allow templates" was set to No.

Regards,
Bill S.

Bill,

Let me know if that fixes it.

So far so good. I will check it tomorrow and let you know. Thanks again.

Good Day.

I just checked Webmaster Tools and had one not found error msg:

component/mailto/?tmpl=component&template=client&link=9c5db0debc7160065706aca084285ad0b861ccf5

Just wanted to let you know.

I don't recognize that particular string. Some of these are "normal" attacks. When a hacker attempts to exploit a vulnerability in Joomla! or an extension, you'll get strings like that. You see "JCE" in lots of those, it is an attempt to exploit an old JCE editor bug (from the Joomla! 1.5 days). The hacker just sets up a script to attack every website it can find looking for one that still has that bug. It doesn't matter if you have JCE installed or not, the script just tries and moves on. If the string the script is trying triggers Admin Tools to block it, then you'll see it in the security log.

What we don't want is for Admin Tools to block legitimate parts of your website. I think we have that fixed with the "Allow site templates" change.

Thanks Dale.

I am not sure that all of these can be prevented and I appreciate your response.

Regards,
Bill S.