Support

Hi,

We have Admin Tools Pro installed on a site. The Super Admin logs in using the secret key. Then they start to work in the backend. In particular, deleting articles and categories and they get blacklisted. We don't have the allow only whitelisted admins feature enabled as we have dynamic IP addresses.

They have tried clearing their browser cache, logging in and working, but same thing after deleting a few articles they get blacklisted again.

I have attached a copy of the security log showing their ip address.

Is there something setup incorrectly in settings that would be causing this?

Thank you.

First, let's disable the two WAF Blacklist rules. They are to protect against a vulnerability in an older version of Joomla!, your version does not need them.

One of the exceptions looks like a session timeout. They paused too long and the session expired. You can extend the session lifetime in the Joomla! Global Config screen.

There are a couple of other things that could be causing exceptions, but let's see if killing the WAF Blacklist rules solves the problem.

Hi,

Thank you for your quick response. When you say "let's disable the two WAF Blacklist rules" do you mean go to WAF Blacklist and unpublish/delete the 2 things in there? Will I then need to re-make the .htaccess file?

Thank you.

Yes to unpublish the two blacklist rules.

No to regenerating the .htaccess file.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.