I've been using Admin Tools for years and I've always defined an Administrator secret URL parameter; so, I also have to type it if I want to login.
For a few weeks I've been going in even without typing it or typing it wrong.
It is true that in this new website I have also indicated my static IP in the "Site IP allow list".
Could this be the reason or did I forget some other option this time?
#38927 Access even without "Administrator secret"
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
4.3.0
PHP version
8.1.18
Admin Tools version
7.3.2
Latest post by nicholas on Monday, 01 May 2023 02:10 CDT
Saturday, 29 April 2023 03:27 CDT
GSommaruga
Monday, 01 May 2023 02:10 CDT
nicholas
Akeeba Staff
Manager
It is true that in this new website I have also indicated my static IP in the "Site IP allow list".
Link
That's exactly the reason. As noted in the documentation
Any request coming from an IP address in this list will bypass Admin Tools' Web Application Firewall.
Site IP Allow List
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!