Support

Admin Tools

#23534 Not being asked for secret URL param

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by on Saturday, 21 November 2015 17:20 CST

Thursday, 22 October 2015 07:21 CDT

arcascomputing
 In light of the upcoming security release for 3.4.5 I've been installing AdminTools on our sites and using the Wizard to get them up and running with this as additional pre-emptive protection.

One thing however is that the wizard generated a password for the admin secret key (the first field in the wizard's setup) and I made a note of this for each site and saved the config, however on the sites I've tried it on I'm being allowed straight through to the admin page without this string.

Am I missing a step? Do I need to manually go through the .htaccess maker to enable this?

 web design edinburgh - https://www.arcas.co.uk

Thursday, 22 October 2015 07:51 CDT

tampe125
Hello Simon,

could you please try with another browser or using the private mode? Do you still can access to your backend without a popup asking for a password?

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Thursday, 22 October 2015 07:56 CDT

arcascomputing
Hi Davide

Yeah I tried using Firefox (normally I use Chrome) in case it was a caching issue or a cookie had already been set which was bypassing the secret url string but was still able to go directly to the administrator area and login from there. Not sure if it's worth you giving it a go?

AS an example - http://www.magentahr.com/administrator

 web design edinburgh - https://www.arcas.co.uk

Thursday, 22 October 2015 08:19 CDT

tampe125
mhm... it seems that the Secret Param is not saved when saved from the Wizard.
I'll fix it right now, in the meantime you can set up the password in the old way, directly in the WAF Configuration Page

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Saturday, 21 November 2015 17:20 CST

System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.
Edited by on 2015-11-21 17:20 CST

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!