Support

Hello,

I just realized that I can log to back-end in without entering a Google Authentificator code !!
While the Google plugin is enabled, and the user configured.

What is going on ?

Thank you

I tried creating a new super administrator user with a Google Authentificator code, but the problem was still there.

Is your IP address in the "Never block these IPs" list? That turns off many of the security functions because it identifies the IP for special handling.

I'm sorry, I don't understand your second post,

...but the present was still there.

*but the problem was still there.

I tried on iPhone with different IP. Same problem.

I saw that you had the Akeeba Loginguard plugin.
Is it better ?

Thank you

Which one is better I would have to ask Davide to address. He is one of our programmers and would be better able to give you that level of detail.

I'm thinking that Admin Tools may be blocking the Google code, but I would expect you to get fatal errors if that were the case. Let's try some basic troubleshooting to see if we can get an idea of what is going on.

1. Try setting the Error Reporting level in your Global Configuration to "None". Many errors are caused by harmless PHP Notices and Warnings being output to the browser, breaking anything which requires HTTP header manipulation such as Joomla!'s session management, AJAX calls and download systems.

2. Try to replicate the issue after disabling the "System - Admin Tools" plugin. If you can still replicate the issue, it is not caused by Admin Tools. Disabling that plugin means that Admin Tools code (including the Web Application Firewall) is not running on your site.

3. If you suspect an issue with the .htaccess file, replace its contents with the contents of the stock htaccess.txt file shipped with every version of Joomla!. If you are on GoDaddy please wait for 1-30 minutes for the changes to be effective. Then, retry loading the problem page. If you can still reproduce the error, then it is not caused by .htaccess Maker.

If doing any of the above resulted in the issue still occurring, it's not related with Admin Tools and we can't help you. If doing any of the above did stop the issue from occurring, we'll have to do some troubleshooting.

First go to Admin Tools, Web Application Firewall, Configure WAF. Make sure "Log security exceptions" is set to Yes; if it's not, set it to Yes and click on Save. Now try reproducing your issue. Immediately after that, please go to Admin Tools, Web Application Firewall, Security Exceptions Log. The latest log entry at the top should have the date and time of when the issue occurred. Please copy the Reason and Target URL here so that we can further help you.

If, however, you do not see a log entry, or the Date and/or IP address do not match your last access, this problem is not caused by Admin Tools' WAF. In this case, you will have to do some .htaccess troubleshooting. You may need to read the general .htaccess troubleshooting page, as well as the page on finding out necessary .htaccess exceptions.

Thank you very much for all your solutions.
Finally the problem was caused by another extension.