What is a "404 Shield" security exception. I haven't seen this until after I updated AdminTools to version 5.0.0.
Thanks!
Thanks!
Don White
#29158 404 Shield
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by trlbldr on Saturday, 10 February 2018 00:02 CST
Friday, 09 February 2018 07:45 CST
tampe125
Akeeba Staff
Hello,
404 Shield is a new feature that will block suspicious "Page not found" requests: for example someone trying to access the page wp-admin on your site.
Now, wp-admin is the administration area of WordPress; since your site is a Joomla one, it means that the visitor was trying to do something nasty (most likely it's a bot trying to bruteforce your access details).
This means that we have to threat it as a security exception and if he is raising too many suspicious 404 errors, he will be banned as usual.
404 Shield is a new feature that will block suspicious "Page not found" requests: for example someone trying to access the page wp-admin on your site.
Now, wp-admin is the administration area of WordPress; since your site is a Joomla one, it means that the visitor was trying to do something nasty (most likely it's a bot trying to bruteforce your access details).
This means that we have to threat it as a security exception and if he is raising too many suspicious 404 errors, he will be banned as usual.
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Saturday, 10 February 2018 00:02 CST
trlbldr
Davide,
Thanks. Two of my sites have been hit with over 60 such 404 Shield attacks since the capability to identify WP-Admin attempts was introduced by AdminTools. Not complaining; it's best to know what's being attempted.
Cheers.
Thanks. Two of my sites have been hit with over 60 such 404 Shield attacks since the capability to identify WP-Admin attempts was introduced by AdminTools. Not complaining; it's best to know what's being attempted.
Cheers.
Don White