Support

 Hi,
I have been having this issue for a while, Admin login is blocked it directs me to the main website instead of login page.
I have been using this troubleshooting https://www.akeebabackup.com/documentation/troubleshooter/atwafissues.html . The problem with this is we don’t have fixed IP address so every time the IP changes I had to go and update. Everytime the Website owner wants to make a change they will contact me n provide me their IP address and I’ll update it. And this is frustrating the owner :( and can’t be a solution as I may no longer support them.
At the moment I rename the main.php file. I won’t be protected if I leave it renamed right?
Is there another way, permanent solution without affecting the protection?

Thanks
Serki

Serki,

You are correct, when main.php is renamed, Admin Tools is disabled. That is only a temporary solution to allow you to log in and correct a problem.

The problem is in Web Application Firewall, Configure WAF, on the first tab, the Secret URL parameter field. There is a value in it now. It was put there by the First Run Wizard to help you. When that field has a value in it, the URL to the administrator login is changed. You need to call that screen in the format:

www.mysite.com/administrator/index.php?secret

Where "secret" is the value in the Secret URL parameter field. You can set up a bookmark with that value in it and it becomes a pretty transparent security measure for the client. If the bad guys can't find the admin login page, they can't attack it.

To disable the feature simply clear the Secret URL parameter field.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.