Support

 hello guys,

i wanted to update to latest version before posting here, but things got worse and i couldn't.

i get the 'you are a spammer' message all the time these days, but this is not reproducible, some times it happens, sometimes not. Everything was fine for hours this morning, and suddendly, i got kicked out when i saved an article.

I think my OVH server may be in cause, and i have contacted them.

Meanwhile, i really get problems with admintools.

i get Admin Query Strings exceptions whereas i was logged in and working just a minute before, with this kind of URL :
http://www.anco.pro/administrator/index.php?option=com_installer&view=update&task=update.ajax&eid=0&skip=700
or
http://www.anco.pro/administrator/?option=com_easyblog


Thanks for your opinion and/or help on this,

Adrien

Adrien,

You have the right solution - rename main.php, but now you're up against a cache problem. The main.php is loading out of your site cache (or browser cache) and the rename hasn't happened yet. You can clear the caches or just wait a bit and that problem will fix on its own.

Note that when your IP gets auto-blocked you have to clear that IP from both the auto-block list and the Security Exceptions Log.

My apologies, I missed your last edit when I replied.

If the problem is intermittent, your session may be timing out. You can reduce that by increasing the session timeout value in the Global Configuration screen.

If you always get a security error from com_easyblog, then we need to set up an exception for that extension.

Hi Dale,

sorry for my quick edit. I realized that main.php had returned after my failed attempt to update Admintools.

regarding the problem, it seems not to be a session timeout, as i first thought about that. As said, it's coming in the middle of a work session in the backend. It could look like a bad security configuration i would have set (but dont remember) too tight in the WAF settings, and provokes too easily these exceptions, don't you think ?

i will try to notice any pattern, regarding where and when this happens, as you suggested.

Thanks
Adrien

Adrien,

There has to be a pattern there somewhere, we just haven't seen it yet. It is tough to fix it until we figure out what the cause is. Keep in mind that under most setups it takes several exceptions in the log to get kicked out. So there may be multiple things going on.

Note that IPs in the whitelist and "never block" list are not auto-blocked. That may also be a solution.

hi Dale,

ok, i'll open both eyes.

regarding IP, mine is dynamic.

best
Adrien

If it is dynamic, but slow, it may work well enough for the whitelist. If it changes rapidly, then that is not a good option.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.