Admin Tools

#26604 Administrator secret URL parameter - Logout

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by on Monday, 26 December 2016 17:17 CST

Thursday, 24 November 2016 21:53 CST

joomleb

Hi guys,
Enabling the "Administrator secret URL parameter" to "blabla" (for ex.)

- When I type: mysite.com/administrator I'm redirected to mysite.com page
- When I'm logged in my administrator and click "Logout" I'm simply redirected to the mysite.com/administrator/index.php?blabla

I think is not correct, should be and would be better be redirect again to main mysite.com don't showing the "hide" administrator URL (just one example: in case I forget opened the browser tab)

Thanks in advance for support

Friday, 25 November 2016 01:23 CST

nicholas

It is correct. If we sent you to /administrator instead of /administrator?blabla you would be triggering a security exception for your own IP address. That would get your own IP blocked. I believe you don't really want to get locked out of your site :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 25 November 2016 09:44 CST

joomleb

Hi Nicholas, thanks for reply.
Anyway I suggest: "should be and would be better be redirect again to main mysite.com", not to mysite.com/administrator causing the locked out :)

Saturday, 26 November 2016 11:32 CST

nicholas

That was the original behavior of this feature but it was confusing a lot of clients. At some point having this reported as a bug grew too old so we changed it to get you back to the back-end login page - exactly like how Joomla! works.

Nicholas K. Dionysopoulos

Lead Developer and Director

Monday, 26 December 2016 17:17 CST

System Task

system

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Edited by on 2016-12-26 17:17 CST

Support