Hi, I have a little problem with the WAF configuration.
I wanted to add
".htaccess"
inside
"Monitor these files for changes."
but after saving, I get 404.
When I remove a dot, only use htaccess; it saves without a problem.
Please help
#40278 Monitor .htaccess changes
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
4
PHP version
n/a8
Admin Tools version
7.4.8
Latest post by nicholas on Tuesday, 13 February 2024 03:51 CST
Monday, 12 February 2024 04:55 CST
nicholas
Akeeba Staff
Manager
Ask your host to check the error log. They will see that they have a mod_security2 rule which blocks this request. They need to disable it. If they disable it by adding a line to the .htaccess file they need to tell you what it is so that you can transcribe it to the .htaccess Maker's custom code section.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Tuesday, 13 February 2024 02:12 CST
komir
Thank you. Solved.
I would like to ask for some advice.
In your opinion, what are some files to add to the monitor list? I mean, what are the most common files that hackers change to hack web pages?
I assume some of them are
configuration.php
.htaccess
robots.txt
index.php
Tuesday, 13 February 2024 03:51 CST
nicholas
Akeeba Staff
Manager
Some common files are already being monitored when "Monitor Critical Files" is enabled: index.php, administrator/index.php and the index.php, error.php and component.php of all templates installed on the site. These files don't appear on the list, and you cannot stop monitoring them.
Remember, since this feature runs on every page load you should ideally have a small list. The default list is pretty much what you realistically need to be monitoring in realtime. Don't overdo it, you will make your site slower. For a more in-depth check of all .php files run the PHP File Change Scanner periodically, e.g. once a day.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!