Admin Tools

#23534 Not being asked for secret URL param

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by on Saturday, 21 November 2015 17:20 CST

Thursday, 22 October 2015 07:21 CDT

arcascomputing

In light of the upcoming security release for 3.4.5 I've been installing AdminTools on our sites and using the Wizard to get them up and running with this as additional pre-emptive protection.

One thing however is that the wizard generated a password for the admin secret key (the first field in the wizard's setup) and I made a note of this for each site and saved the config, however on the sites I've tried it on I'm being allowed straight through to the admin page without this string.

Am I missing a step? Do I need to manually go through the .htaccess maker to enable this?

web design edinburgh - https://www.arcas.co.uk

Thursday, 22 October 2015 07:51 CDT

tampe125

Hello Simon,

could you please try with another browser or using the private mode? Do you still can access to your backend without a popup asking for a password?

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Thursday, 22 October 2015 07:56 CDT

arcascomputing

Hi Davide

Yeah I tried using Firefox (normally I use Chrome) in case it was a caching issue or a cookie had already been set which was bypassing the secret url string but was still able to go directly to the administrator area and login from there. Not sure if it's worth you giving it a go?

AS an example - http://www.magentahr.com/administrator

web design edinburgh - https://www.arcas.co.uk

Thursday, 22 October 2015 08:19 CDT

tampe125

mhm... it seems that the Secret Param is not saved when saved from the Wizard.
I'll fix it right now, in the meantime you can set up the password in the old way, directly in the WAF Configuration Page

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Saturday, 21 November 2015 17:20 CST

System Task

system

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Edited by on 2015-11-21 17:20 CST

Support