Support

Admin Tools

#30973 Helix template blocked by admin tools

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by on Saturday, 23 March 2019 18:17 CDT

karendunne
Admin tools blocks the access to the Helix template on this site: https://mavendesignstudio.com/

See screen shot: http://take.ms/aEN7w

It is the only template installed on the site.

I read through this post first: https://www.akeebabackup.com/support/admin-tools/Ticket/29590-cloaking-helix-ultimate-template-sp-page-builder.html
and tried to implement what was suggested but I am still unable to access the Helix Template.

The security logs show this: http://take.ms/2pBnL

I tried adding the following words (many variations because I couldn't get it to work) to the List of allowed tmpl= keywords:

  • template

  • template=shaper_helixultimate

  • shaper_helixultimate

  • https://mavendesignstudio.com/index.php?template=shaper_helixultimate


See screenshot of cloaking section: http://take.ms/xYyxo

Is there another step that I'm missing or a different keyword needed?

Thanks,

Karen

dlb
Karen,

Let's try this: Go to Web Application Firewall, Configure WAF, on the Cloaking tab, set "Allow site templates" to Yes.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

karendunne
Hi Dale,

Yes, that worked. I didn't try that option earlier because the tool tip said it was only for sites using more than one template at the same time, which is not the case here.

Are there other security concerns that I should be aware of when this is set to yes?

What would have been the correct keyword in the tmpl parameter?

Thank you,

Karen

dlb
Karen,

The security risk is pretty small. It prevents Admin Tools from stopping an attacker from switching templates. Joomla! can still stop it. That's a pretty small risk.

There are two very similar error codes in play here, tmpl and template. You were adjusting tmpl values, the error was a template setting. Right church, wrong pew. You couldn't fix it from the setting you were changing.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

karendunne
OK, understood. I thought I was following the directions that were given in the previous post I referenced. https://www.akeebabackup.com/support/admin-tools/Ticket/29590-cloaking-helix-ultimate-template-sp-page-builder.html

Perhaps I misunderstood the direction there.

Cheers,

Karen

dlb
These are two different errors, they just happen to be the same template. Your error in the log was "template=" where #29590 was a "tmpl=" error. They sound similar, but are different errors with different solutions.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!