Support

Admin Tools

#25506 Impossible to user reset or remind joomla features

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by dlb on Tuesday, 05 July 2016 08:43 CDT

toonetcreation
 Hello,

I'm using admin tools on my website but I cannot user password reset and login remind from joomla, the system send me this error (see attached file).

I suppose there is a WAF exception to add, but I don't knwo what?

I have tried :

com_users
remind

same problem.

Do you know why?

Thanks
Laurent

dlb
Laurent,

In Web Application Firewall, Configure WAF, on the Joomla! Feature Hardening Options tab, please set "Disable editing backend users' properties" to No. Does that solve the problem?


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

toonetcreation
this option was already to NO.
so problem is the same :-/

dlb
Please disable the plugin System - Admin Tools and test again. Disabling that plugin will turn off Admin Tools' Web Application Firewall. I want to see if WAF is blocking the reset. After you test, enable the plugin again. We do not want that disabled for a long period of time.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

toonetcreation
yes works fine when System - Admin Tools plugin is disabled.

dlb
In Web Application Firewall there is a Security Exceptions Log. Please trigger your error then go to the log and the reason for the error should be at the top of the page. Please copy and paste it here so I can see why the request is being blocked.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

toonetcreation
here is the log :

Bouclier CSRF http://www.lapeyrouse-fossat.fr/connexion.html?task=remind.remind

dlb
What is the setting for "CSRF/Anti-spam form protection (CSRFShield)" in your WAF Configuration?


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

toonetcreation
see attached file.

dlb
Please try the Basic setting. The Advanced setting is a little too aggressive for some applications.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

toonetcreation
Ok works fine now.

Thank you
laurent

dlb
You are welcome!


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!