Support

Akeeba Backup for Joomla!

#26239 Unable to access Joomla 3.6.2 site backend - Administrator access after backup using Akeeba backup for Joomla

Posted in ‘Akeeba Backup for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Akeeba Backup version
n/a

Latest post by dlb on Monday, 03 October 2016 15:46 CDT

user91334
EXTREMELY IMPORTANT: Please attach a ZIP file containing your Akeeba Backup log file in order for us to help you with any backup or restoration issue. If the file is over 2Mb, please upload it on your server and post a link to it.

Description of my issue:

I installed Akeeba 3.6.2 to my website: http://discoveritskills.com

The backup of the site using Akeeba Backup appeared successful and I was able to obtain a
jpa backup file.

I tried testing the Backup file to see if I can restore from the backup.
After the restore test, I could not login to the site using my Administrator credentials
any longer.

The Akeeba Backup Debug Log file that was generated by Akeeba backup is to large at 75 MB.

Please download it from my website. Go to URL:
1. http://discoveritskills.com/documents/
2. Akeeba Backup Debug Log.txt

Thank you.

Julius Sinlao
email: [email protected]
phone (858) 863-7237

dlb
Julius,

I don't see anything wrong with the backup, it looks like it completed normally. You do get the opportunity to change the admin password for your site during the backup restore. And some browsers will helpfully fill in the password field for you and change it without you even realizing it.

If it is actually the password, you're getting a bad user ID or password message, this may be what happened. If you're getting redirected to the home page, that's a whole different thing. It is probably easier to reinstall and pay special attention to the password than it is to break in to the site.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

user91334
Dale,

>>you said:
>> You do get the opportunity to change the admin password
>> for your site during the backup restore.

It seems I didn't see that option, when I was doing the backup process.


>>you said:
>>If it is actually the password, you're getting a bad
>> user ID or password message, this may be what happened.

After the Backup process and going to the Admin page:
http://discoveritskills.com/administrator/index.php

I entered my Admin credentials, and get the error message:

Warning

Username and password do not match or you do not have an account yet.

>>you said:
>>It is probably easier to reinstall and pay special attention
>> to the password than it is to break in to the site.

So basically , delete what's inthe public_html folder and re-do the backup?

- Julius
Julius Sinlao

dlb
I was a little loose with my language, I apologize. You get the option to change the admin password during the restore process, not during the backup. We have seen numerous examples of browsers injecting a password into a blank password field during the restore.

It is a fairly trivial process to break into a Joomla! site if you have direct database access - usually through phpMyAdmin. If you are comfortable using phpMyAdmin, changing the admin password is an option. Otherwise, doing the restore over again is the easiest option. You do not have to delete the files in this case, extracting the backup archive will overwrite them and the restore process will give you the chance to change the backed up admin password.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

user91334
Dale,

>>you said:
>>Otherwise, doing the restore over again is the easiest option.

I did the easier option as you suggested.

In the last ALICE dialog box after restoring the site using Kickstart,
it asked to enter the password. Last time, I must have forgot to
enter the password and left it blank.

A hacker could have accessed the Admin page and got in becasue the password was blank.

I can acess the back-end Admin page now and restored the Admin password.

Please close this Ticket now.

Thank you for your assistance.

- Julius

Julius Sinlao

dlb
Julius,

A hacker could have accessed the Admin page and got in because the password was blank.
No, it doesn't work that way. The blank password means "Do not change the backed up password", it does not mean "Use a blank password".

I'm glad it is working as expected now.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!