Support

Admin Tools

#24993 How to restrict user login

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by dlb on Thursday, 21 April 2016 11:07 CDT

atolli
Hi,

I would like to know how I can use WAF Blacklist to restrict people from attempting to login, as some hackers are using this url /component/users/?view=login. I hope you can advise!

thanks 

dlb
From your question I assume that no one needs to log in or register for the front end of your site. You can turn off user registration in Joomla!, Users, Options. You can prevent your Super Users from logging in to the front end in Admin Tools under Configure WAF, on the Feature Hardening tab. That should not leave any valid users for them to find. You can't disable the login module.

You can black list the hacker's IP address, but they will just switch to another IP address. Hackers don't use their own IP, so that is a losing proposition.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

atolli
I have restricted every option but login can be done with /component/users or via index task=login. WAF can restrict this I assume?

dlb
You should be able to disable the login in Admin Tools in Web Application Firewall, WAF Blacklist. Click on New and enter "login" in the task field. That should prevent the module from being accessed.


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

atolli
Thanks a million

dlb
You're welcome!


Dale L. Brackin
Support Specialist


us.gifEnglish: native


Please keep in mind my timezone and cultural differences when reading my replies. Thank you!


????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!