Hallo, i have installalled admin tools, and looks all like working. But if to want work with our applikation hotel portal, i cannot open dashboard when swhoing this link, blocked than http://rennrad.reisen/index.php?option=com_jomres&Itemid=244&lang=en&task=dashboard&thisProperty=94&tmpl=jomres
#23899 Backend Dashbord Popup or new page
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by on Wednesday, 13 January 2016 17:20 CST
Monday, 14 December 2015 04:41 CST
user88469
Monday, 14 December 2015 04:45 CST
tampe125
Akeeba Staff
Hello Klaus,
Try to visit such URL once again and the immediately look inside Admin Tools logs.
What's the security exception logged? What's the reason?
I suspect the problem is caused by the use of the variable tmpl, if you have enabled the feature Block tmpl=foo system template switch inside WAF configuration you will trigger a security exception.
Please set its value to No, more info in this page of the configuration.
Try to visit such URL once again and the immediately look inside Admin Tools logs.
What's the security exception logged? What's the reason?
I suspect the problem is caused by the use of the variable tmpl, if you have enabled the feature Block tmpl=foo system template switch inside WAF configuration you will trigger a security exception.
Please set its value to No, more info in this page of the configuration.
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Monday, 14 December 2015 05:00 CST
user88469
Hallo, from one point of view this may be right, but joomla does have many attacks like having tmpl in url all night as this one, trying to come trough not existing template http://rennrad.reisen/decomponent/mailto/?tmpl=component&template=esportblau_master_v1mo&link=e83dfd52dfd5dd28ae318508ced9bc73bea969a9
Monday, 14 December 2015 10:56 CST
tampe125
Akeeba Staff
If you don't want to allow everything, you can add the jomres keyword in the field List of allowed tmpl= keywords . That should do the trick.
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Wednesday, 13 January 2016 17:20 CST
System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.