Support

I (need to) use SEF-friendly URLs & Chronoforms.
Chronoforms Ajax calls are treated as an exeption by Admin Tools (SQLiShield).
When I make a WAF exception to avoid this, this exception does not work.

In your documentation I read that I have to place the SEF plugin before the Admin Tools plugin. If I reorder this (Admin Tools plugin after SEF plugin) and then open the Components > Admin Tools configuration the Admin Tools plugin is placed before the SEF plugin again (in fact Admin Tools always becomes the first plugin all the time).

So I can't find a way to place the SEF plugin before the Admin Tools plugin. It seems that your software places it back at the first position all the time.

Ah, thanks. Would advise to put this in the helppage about ordering the SEF and Admin Tools plugin.

I am afraid it is still not working. The order of the plugins is:
- System - SEF
- System - Admin Tools

SQLiSchield protection is on. I want to make an exception for Ajax calls from Chronoforms forms. These forms make calls like:

.../index.php?option=com_chronoforms&chronoform=testform&event=Ajax&format=raw

When I try an exception rule with (only) the Query parameter "event" these Ajax calls from Chronoforms should not be treated as SQLi attack anymore, but they still are.

Regards.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.