Support

Admin Tools

#31294 AdminTOols and Cloudflare

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by j2studio on Sunday, 28 April 2019 09:42 CDT

j2studio
HI, a client has a Cloudflare account and I have installed AdminTools pro. We are getting save warnings in our YOoTHeme site when trying to use the customizer. Moreover, when trying to make other changes in the admin section of the website, we are constantly hit with a Google Recaptcha image test. This is terribly frustrating.

We were told this is because CloudFlare thinks the changes are suspicious. I want to ask, seeing how we are using AdminTools Pro and the firewall feature, do we even need Cloudflare and their firewall?

THanks!

JJ

nicholas
Akeeba Staff
Manager
Yes, the problems you are having come from CloudFlare, not Admin Tools.

There are two reasons to use CloudFlare. One is speeding up the delivery of static content which makes sense if your site's primary content is in a primarily big, immutable, public section.

The other is the protection against DDoS (distributed denial of service) attacks. This is, however, what is causing problems with your site. For whatever reason CloudFlare's DDoS protection gets triggered.

Most likely you should configure your site so that your administrator backend does NOT go through CloudFlare. I believe CloudFlare has documentation on that. I'm afraid I cannot help you with that since it's beyond the scope of our support.

Regarding your question, Admin Tools is protecting you against a different class of attacks. It cannot protect you against DDoS attacks. There is no way for software running on the server being attacked to mitigate a DDoS attack. By definition, by the time you handle all requests you can be taken down by a DDoS attack which simply drowns your server with requests. Therefore the answer to your question is no, Admin Tools cannot substitute CloudFlare's DDoS protection and CloudFlare's DDoS protection cannot substitute Admin Tools' Web Application Firewall. They are two very different things with different scope.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

j2studio
OK thank you for your help. I will look into admin settings on CloudFlare.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!