Support

Akeeba Backup for Joomla!

#32760 Please add possibiliy to remove random string on backup files

Posted in ‘Akeeba Backup for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Akeeba Backup version
n/a

Latest post by Romkabouter on Monday, 30 March 2020 13:43 CDT

Romkabouter
Hi,

I have the same issue as this: #32721 – Strange File Name Just Started
Can you please add in a config option to be able to remove the random string?

I make backups per week and I only want to keep 1. Akeeba does an upload to dropbox, but now every backup is kept.
I have [HOST] als filename, so every week the backup on dropbox is overwritten, that obviously does not work anymore.

Thanks

nicholas
Akeeba Staff
Manager
I recommend following the same advice I gave everyone else. The past 12 years there's been a warning in your Akeeba Backup Control Panel and when you're taking backups from the backend about using the default backup output directory. Please click that link to understand the implications and follow its advice to use a non-default backup output directory. This WILL remove the random string which is only appended IF you a. use a web accessible backup output directory (checked when you visit the Akeeba Backup Control Panel page and activate your backup profile from the dropdown) OR b. you use the default backup output directory.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Romkabouter
Hi Nicholas, I do not have that warning on any of my sites and cannot recall that link ever being there.

I will change the output folder, but since I removed the backup files right after they were uploaded I did not have an security issue anyway.

Thanks for the update

Romkabouter
Hi Nicholas,
I cannot use an output directory which is not accesible from the web. I only have write access on webroot.
I have tried with a non default output directory but still a random string is attached.

This is not workable for me.

nicholas
Akeeba Staff
Manager
You CAN change your backup output directory to overcome the built-in security protection. Ideally, this should be placed in a directory above your site's root. If this is not possible, please use a directory inside your site's root. A hard to guess name like "qebPw234wD_backups" is preferred to an easily guessable name like "backups". Do not place your backup output directory in a CMS system directory, such as Joomla's cache, tmp, media etc directories or WordPress' wp-content directory. After creating the backup output directory go to the Configuration page to change your backup output directory to it. This needs to be done once per backup profile. Remember to exclude your old backup output directory (default: administrator/components/com_akeeba/backup) from your backup to prevent backing up any existing backups which may still be in there.

When you next visit Akeeba Backup's Control Panel, Akeeba Backup will try to protect the backup output directory and check if your directory is accessible over the web. The test for whether the backup output directory is accessible over the web takes place when you visit Akeeba Backup's Control Panel page and activate the backup profile in question from the dropdown list. First, Akeeba Backup will place a .htaccess, web.config, index.html and index.html file if they are not already present. For this reason it's IMPERATIVE that your backup output directory is NOT the parent folder of a web accessible location. The check will then try to write a randomly named file in your backup output directory and access it over the web. This may create an entry in your server's error log. If this happens do not worry; it's normal and it means that everything is working correctly.
If the backup output directory is EITHER above the site's root (therefore by definition inaccessible over the web) OR positively identified as being inaccessible over the web THEN and only then Akeeba Backup will stop adding the -[RANDOM] suffix to the names of your backup archives.

That is to say, having an output directory above the site's root is NOT a requirement.

Even if you are using NginX, which does not understand .htaccess or web.config files, you CAN use Admin Tools' NginX Conf Maker and its Frontend Protection feature to block web access to all folders not explicitly allowed. If you follow the suggestions above your folder will not be in the default allowed list, therefore access to it over the web will be disallowed.

I wouldn't tell you to do something if I didn't know that it's possible to do it. I never ask you to do the impossible.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Romkabouter
Thanks for the update, I will experiment a bit with it

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!