Support

Admin Tools

#27712 Exceptions - Can I disable the exceptions feature in Admin Tools?

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by on Friday, 09 June 2017 17:17 CDT

Wednesday, 10 May 2017 02:21 CDT

Sonderup
 Hello,

Per default Admin Tools protects non-core PHP files from being accessed directly by generating a 403 (forbidden) response.

My question is, is it possible to globally disable the access forbidden protection feature in Admin Tools, so that all PHP files in all folder can be accessed directly as if Admin Tools is not installed?

Brgds Mikkel Olsen
Edited by Sonderup on 2017-05-10 02:22 CDT

Wednesday, 10 May 2017 03:20 CDT

nicholas
The feature you are looking for is in the .htaccess Maker, namely the Front-end Protection and the Back-end Protection. You can turn them off but it's not advisable. You can just add exceptions, either for a specific file or for an entire directory. Please refer to the documentation regarding the options you have. It's a good idea reading the documentation anyway since it explains how each feature works and why it's there. When trying to fend off hackers, knowledge is your most powerful weapon.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 10 May 2017 04:36 CDT

Sonderup
Hello Nicholas :)

Thank you for the quick reply!

Yes, I´m aware of the exeptions feature, and how to allow access to specific files and/or folders.

What I´m looking for is to somehow allow access to all folders and files, as if Admin Tools was not installed.
In this particular case we basically only want to use Admin Tools for excluding bots and crawlers.

Best regards
Mikkel Olsen

Wednesday, 10 May 2017 06:12 CDT

nicholas
I am afraid I have to repeat myself. The feature you are looking for is in the .htaccess Maker feature of Admin Tools. The feature you are asking about DOES NOT do what you think it does. Security exceptions logging is what you want to keep. It's part of the Web Application Firewall of Admin Tools. What you want to disable is under the .htaccess Maker, namely the Front-end Protection and the Back-end Protection features. As I already told you you can turn them off and regenerate the .htaccess file.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 10 May 2017 07:26 CDT

Sonderup
Yes, that is perfectly understandable :)

We do not underestimate the value of protecting against direct access to PHP files.

This particular case is a bit out of the ordinary and so is this request.

I thank you for your time :)



Wednesday, 10 May 2017 12:04 CDT

nicholas
You're welcome!

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 09 June 2017 17:17 CDT

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
Edited by on 2017-06-09 17:17 CDT

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!