Support

Admin Tools

#37605 Locked out - secret url still coming up after changing main.php to main-disable.php

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
3.10.11
PHP version
7.4
Admin Tools version
latest

Latest post by syco on Thursday, 25 August 2022 03:25 CDT

syco

Hi Support,

I just migrated a site live and it works fine... but when I try to login to the backend i'm Locked out

Secret url  - still coming up even after changing main.php to main-disable.php.

I have also tried using the default .htaccess, and the admintools .htaccess files.

Wha can I do to fix this... I can removed anything... and reinstall once I can get in.

Thanks in advance

Syco

tampe125
Akeeba Staff

Hello,

in order to remove the secret param you have to edit WAF Configuration, more info here: https://www.akeeba.com/documentation/admin-tools/web-application-firewall.html#waf-configure-basic-protection

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

syco

Thanks for the quick reply... This is NOT an IP block.... it;s not recognising the username and password for the secret URL

I can you can only change what you have suggested... ONCE you are logged in. So I can NOT change the WAF config... because I can not LOG IN.

When I put in the SECRET URL - username and password... it then doesn't come up with the - Joomla Backend log in page.

So I need to fully removed ADMINTOOLS via FTP... as I have also tried using both the default .htaccess, and the admintools .htaccess files.... and changing the - main.php to main-disable.php... but unfortunately the SECRET URL window keeps popping up.

tampe125
Akeeba Staff

Ok, that's a different thing, then. What you're referring is the extra username and password to access your backend (feature "Password-protect Administrator").

This is pretty easy to disable, you simply have to delete a couple of files using FTP, more info here, last paragraph: https://www.akeeba.com/documentation/admin-tools/admin-pw-protection.html

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

syco

Thanks.. that sorted it !!   Cheers !

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!