Support

Admin Tools

#40768 403 error in preview window of t4 template framework - Layouts Settings (by Akeeba Admin Tools)

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
5.1.1
PHP version
8.1.28
Admin Tools version
7.5.3

Latest post by WoodyF4u on Friday, 31 May 2024 12:29 CDT

WoodyF4u

Hi,

I use T4 template framework with t4_bs5_blanc from JoomlArt.
I think since the update to Joomla 5.1.0 I have been getting a 403 error in the review window of Layouts Settings in template management.
That 403 error is generated by Akeeba Admin Tools.
Does anyone have experience with this and what could I do to resolve it?

 

See the screenshot.

 

Regards,

Wouter

 

Best regards,
Wouter (WoodyF4u)

nicholas
Akeeba Staff
Manager

First go to Admin Tools, Web Application Firewall, Configure WAF. Make sure "Log security exceptions" is set to Yes; if it's not, set it to Yes and click on Save. Now try reproducing your issue. Immediately after that, please go to Admin Tools, Web Application Firewall, Security Exceptions Log. The latest log entry at the top should have the date and time of when the issue occurred. Please copy the Reason and Target URL here so that we can further help you.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

WoodyF4u

Instead of "Log security exceptions" do you mean "Log blocked requests" in Logging & Reporting?

There I get his logging:

Reason:
template= in URL

Target URL:
https://compactweb.nl/?t4preview=5532f537ed9b866ccb860e5102fecf92&templateStyle=29

Best regards,
Wouter (WoodyF4u)

nicholas
Akeeba Staff
Manager

Yes, that's what I meant. I have these instructions stored in a document, so I don't forget any important steps. I forgot to update the wording. Thank you for the heads up :)

So, this is what I expected to see there. It's easy to fix; we have an option in WAF for that.

Go to your site's administrator, Components, Admin Tools for Joomla!, Web Application Firewall.

Click on Configure WAF.

Click on the Cloaking tab.

Set "Allow site templates" to Yes.

Click on Save & Close.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

WoodyF4u

I've btried that.

But then when I save it I receive this message on top op the page:

Invalid field: Permanently disallow IP after this many automatic blocks

and

here were errors trying to save the Web Application Firewall's configuration.

I looked for other logs where my IP address might still be listed, so that the change was not allowed.
But I think I've cleared everything up.
However, the error message keeps coming back when saving.Do you have any advice for this?
Or would you like to see it yourself and can I send you login details if the ticket can be made private?

Regards,
Wouter

Best regards,
Wouter (WoodyF4u)

nicholas
Akeeba Staff
Manager

Check the "Permanently disallow IP after this many automatic blocks" field. There is a blank entry at the end. Click the delete (-) button next to it to remove it, then save again.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

WoodyF4u

From the message I already understood that I should look for it.
But I can't find that field anywhere.
Can you explain to me where that field is located?

Best regards,
Wouter (WoodyF4u)

nicholas
Akeeba Staff
Manager

Under the Auto-ban tab, see https://www.akeeba.com/documentation/admin-tools-joomla/web-application-firewall.html#waf-configure-autoban

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

WoodyF4u

Hmmm, that's why I couldn't find it.
Because this is what I see under Auto ban.
See Attachment.

How could that happen?

Best regards,
Wouter (WoodyF4u)

nicholas
Akeeba Staff
Manager

Try setting the first option to Yes to see the rest of the page. Fix the problem, then set that first option back to No.

Joomla's form validation is really dumb, it tries to validate fields hidden from view when they are irrelevant. It also defaults subform field to an invalid state, making for an excellent mess. Unfortunately, this is part of using the native Joomla! 4+ API for our software.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

WoodyF4u

Hi Nicholas,
Once again your support is great.
Thank you very much for your explanation, patience and solution to the problem.

Best regards,
Wouter (WoodyF4u)

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!