Support

Admin Tools

#36210 Block template= in URL

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by on Friday, 24 December 2021 20:17 CST

Wednesday, 24 November 2021 08:49 CST

atolli

I get security error 

Reason: template= in URL

and php errors below in my email.

In a blog we are trying to insert a gallery via Droppics Gallery and i am blocked.

Hope you can help.

Kind Greetings, Abraham

A PHP Exception occurred on your site. Here you can find the stack trace:

Exception Type: JDatabaseExceptionExecuting
File: /htdocs/libraries/joomla/database/driver/mysqli.php
Line: 668
Message: Illegal mix of collations (utf8_general_ci,IMPLICIT) and (utf8mb4_unicode_ci,COERCIBLE) for operation '='

#0 /htdocs/libraries/joomla/database/driver.php(1465): JDatabaseDriverMysqli->execute()
#1 /htdocs/libraries/src/Table/Table.php(739): JDatabaseDriver->loadAssoc()
#2 /htdocs/administrator/components/com_easyblog/includes/mediamanager/mediamanager.php(1068): Joomla\CMS\Table\Table->load(Array)
#3 /htdocs/administrator/components/com_easyblog/includes/mediamanager/mediamanager.php(2421): EBMM->getMediaObject('post:163/volets...', true)
#4 /htdocs/administrator/components/com_easyblog/includes/mediamanager/mediamanager.php(1227): EBMM->getInfo('_cG9zdDoxNjMvdm...', true)
#5 /htdocs/components/com_easyblog/views/mediamanager/view.ajax.php(176): EBMM->createFolder('post:163/volets...', 'AvantApresGalle...')
#6 /htdocs/administrator/components/com_easyblog/includes/ajax/ajax.php(227): EasyBlogViewMediamanager->createFolder()
#7 /htdocs/administrator/components/com_easyblog/easyblog.php(65): EasyBlogAjax->process()
#8 /htdocs/libraries/src/Component/ComponentHelper.php(402): require_once('/htdocs/adminis...')
#9 /htdocs/libraries/src/Component/ComponentHelper.php(377): Joomla\CMS\Component\ComponentHelper::executeComponent('/htdocs/adminis...')
#10 /htdocs/libraries/src/Application/AdministratorApplication.php(101): Joomla\CMS\Component\ComponentHelper::renderComponent('com_easyblog')
#11 /htdocs/libraries/src/Application/AdministratorApplication.php(159): Joomla\CMS\Application\AdministratorApplication->dispatch()
#12 /htdocs/libraries/src/Application/CMSApplication.php(225): Joomla\CMS\Application\AdministratorApplication->doExecute()
#13 /htdocs/administrator/index.php(51): Joomla\CMS\Application\CMSApplication->execute()
#14 {main}
Request information

Wednesday, 24 November 2021 09:54 CST

tampe125

Hello,

these are two separate issues. The security exceptions happens because Admin Tools is configured to block users trying to change the template using the template= param in the URL.

You can easily fix this by getting inside your WAF configuration and in the tab Cloaking set the option Allow site templates to Yes.

Regarding the fatal error in the email, this is caused by the EasyBlog component, as you can see in the stack trace; Admin Tools simply reported the issue to you. It seems you have two different collations on your site; this is something you can fix with Admin Tools, but you should report the issue to the developers, just to be sure you're not going to corrupt your site.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 24 December 2021 20:17 CST

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
Edited by on 2021-12-24 20:17 CST

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!