Admin Tools

#36512 Repeated missing admin query string from trusted ip

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by on Sunday, 27 February 2022 20:17 CST

Friday, 28 January 2022 03:41 CST

jorlan

Hi,

I do NOT think that the following issue is caused by AdminTools. However, I seem to recall that I have seen a situation like this before and I cannot remember exactly how it was solved; probably you have seen it before as well:

One of my customers gets blocked from their own site on a regular basis, because one or more of their computers is making calls to the /adminstrator url of their site and is doing so every minute until they are blocked. The users do not do this manually, neither do they have the intention to visit this url without the admin query string that we set up, as they know that they need this string. Well, at least they won't keep on trying almost exactly every minute for over 10 minutes.

I think that on an earlier occasion this was caused by either following an internal link and/or by a "helpful" browser plugin but I cannot find out what it was.

Maybe you recognize this situation? That would be very helpful to stop it.

Friday, 28 January 2022 04:00 CST

nicholas

Does their browser have a "Most visited" / "Frequently visited" or similar section in the new tab page, complete with thumbnails from the sites? Yeah, these little suckers load the URL automatically. Since the URL the browser figures out is unlikely to have the secret URL parameter they trigger a blocked requests. Do it many times (as in: open new tabs in the browser many times) and you get locked out.

Solution: remove your own site's backend from that area in the new tab page (usually you can right click and choose delete or something similar).

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 28 January 2022 04:11 CST

jorlan

Hi Nicholas,

Thanks for your reply. I will inform the customer that they should check this in their local browsers.

Sunday, 27 February 2022 20:17 CST

System Task

system

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Support