Support

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes, admin password not working
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes, admin tools user guide, 7.1.1 Help I have been locked out of my Administrator's area, and general WAF configuration in userguide.
Joomla! version:3.1.5
PHP version: 5.3.26
MySQL version: 5.5.32
Host: Rochen
Admin Tools version: 2.7.6

Description of my issue:
I am having issues with backend login when Administrator secret URL parameter is set.

Here is the first scenario:
When Administrator secret URL parameter is set to aluminium www.mydomain.com.au/cms/administrator?aluminium results in redirection to www.mydomain.com.au/cms/?aluminium and the website home page is shown
My IP is not included in white list, or WAF configuration, there is no administrator directory protection set (user/password).

When Administrator secret URL parameter is set to aluminium www.mydomain.com.au/cms/administrator redirects to home page screen (which is expected)

So I have no access to the backend. I can go to /plugins/system/admintools/admintools/main.php and rename it main-disable.php and am able to access www.mydomain.com.au/cms/administrator and login ok.

Here is the second scenario:
I also have a second installation (a copy) of the site installed in

www.mydomain.com.au/web
When Administrator secret URL parameter is set to aluminium
www.mydomain.com.au/web/administrator?aluminium
results in redirection to www.mydomain.com.au/cms/?aluminium and the website home page is shown (that is not a typo, it really does go to /cms instead of /web)
My IP is not included in white list or WAF configuration, there is no administrator directory protection set (user/password).

When Administrator secret URL parameter is set to aluminium
www.mydomain.com.au/web/administrator redirects to www.mydomain.com.au/cms/?aluminium home page screen (I would expect it to go to home page screen as ?aluminium is missing, but I don't expect it to go to cms directory and have ?aluminium applied).

So I have no access to the backend. I can go to /plugins/system/admintools/admintools/main.php and rename it main-disable.php and am able to access www.mydomain.com.au/cms/administrator and login ok.

Here is the third scenario:
When Administrator secret URL parameter is set to aluminium
When Administrator password protection is applied (user/password)
My IP is included in WAF configuration 'don't block these IP addresses'
www.mydomain.com.au/cms/administrator?aluminium results in prompt for administrator protected user/password, then redirection to www.mydomain.com.au/cms/?aluminium

In this instance I can gain access to the backend by removing .htaccess and .htpasswd from the /administrator directory, then using www.mydomain.com.au/cms/administrator

I have uninstalled Akeeba Admin Tools Pro and reinstalled it, and reapplied the settings, but the same problem occurs. I have tried IE10, Firefox & Chrome, and cleared the cache in each but it makes no difference.

I have one redirection applied via cpanel, which redirects www.mydomain.com.au to www.mydomain.com.au/cms
RewriteEngine on
RewriteOptions inherit
RewriteCond %{HTTP_HOST} ^mydomain\.com\.au$ [OR]
RewriteCond %{HTTP_HOST} ^www\.mydomain\.com\.au$
RewriteRule ^/?$ "http\:\/\/www\.mydomain\.com\.au\/cms" [R=301,L]

I hope you can help because I can't figure out what is going on?
Thanks, Nicola

Ok, thanks for your suggestion. For others that may read this post in the future, I changed the URL that I type to access the administrator directory to
www.mydomainname.com.au/cms/administrator/index.php?aluminium

And the secret word in the WAF configuration is aluminium

And it all worked perfectly.

I can't believe how simple the solution was, thanks Nicholas! I didn't see it in the userguide, maybe you could add it in case others also think you can use /administrator?secretword without the index.php part.

With kind regards
Nicola

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.