Support

Hi,
I noticed today that in Joomla 3.2, front end editing now has the ability to edit modules as well as articles. YAY!!
But, when I clicked on the edit icon in the corner of the module (even just a plain HTML one) I was taken to a new page which redirected to the homepage. (Different to if I click on the edit icon in an article, which opens the editor in the same window).

I searched for articles about this new functionality in J3.2 and found this:
http://joomla4web.com/226-front-end-module-editing-in-joomla-3-2

So it would appear that when you try to edit a module from the front end, you will be redirected to the module edit screen in the backend. However, if you are not currently logged into the backend (why would you be, you’re using the nice & simple front end), then you are redirected to the /administrator login page. Except, that if you have Akeeba Admin Tools set up with secret word you will get redirected to the home page because you are missing the secret word parameter. Hmmm. And this will create a security exception.

I am not using two factor authentication - either from Joomla core, or from Admin Tools. I just use secret word and administrator password protection (at this stage).

Is this a bug, or should we not be using secret word parameter any more?

Thanks for your help, I hope I have explained it properly.
Nicola

Thanks for your reply Nicholas, and in the mean time I will include into my documentation for my clients, that if they want to use front end editing of modules & menu items they need to login to the backend first.

But is there not a way to make a better solution? It seems a shame to finally have this functionality in the front end, but still have to login to the backend first to be able to utilise it. While I am very familiar with the backend, the concept of modules/articles/menu all being separate doesn't seem to be as easy to understand for my clients and they much prefer the simplicity of the front end. Of course this backend layout has nothing to do with Akeeba, and your products are excellent.

No doubt you will tell me that you have already considered all options, and suggest that I am an idiot for even thinking that you had not considered it, but, at the risk of being berated..... could the secret word be prompted for from the front end between clicking on edit module, and then appended to the administrator login URL? Assuming that the person has already logged into the front end with administrator rights of course.

My sites are set up with 'allow user registration' set to off, which is fine for the types of sites that we build, but obviously not an option for a lot of other people's sites. So, if someone is logged in to the front of one of our sites they are already super-user authenticated as they have entered their userid & password. Can Admin Tools add an extra field there for the secret word, or is that leaving the key out for the cleaners again?

If I am missing something blindingly obvious I'm sure you will tell me!
Regards, Nicola