Admin Tools

#30157 Admin secret work (the whole function) not working

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by elementotango on Monday, 03 September 2018 02:57 CDT

Saturday, 01 September 2018 13:42 CDT

elementotango

Hi there.

I only now realize that the "secret word" function does not work on my site!

Once I set the password, accessing the site with the "normal"

https://www.elementotango.it/administrator does give access to the admin panel, whereas it should only concede access if the correct param is supplied.

I tried removing my .htaccess altogether, assuming this was the cause, but no change.

Thank-you for your help.

Kind Regards

Andrea.

https://www.elementotango.it

Edited by elementotango on 2018-09-01 13:42 CDT

Monday, 03 September 2018 02:39 CDT

nicholas

You have added your IP address in the Administrator IP Whitelist page or in the "Never block these IPs" in the Configure WAF page. As a result any request coming from your IP is exempt from all security checks.

Try accessing your site from your smartphone while it is connected to the Internet with 3G/4G (NOT over WiFi). Since your phone has now a different IP address than your computer you will see that the feature works just fine.

To prove that this is the case I just accessed https://www.elementotango.it/administrator from my computer. I got redirected to https://www.elementotango.it as I should. You will see an IP from Greece in your Security Exceptions Log with the reason Admin Query String. That was me proving that the feature works just fine ;)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Monday, 03 September 2018 02:57 CDT

elementotango

Hi Nicholas, interesting, I didn't know that. Yes I confirm all that you said, so the site is safe ;)
Thanks a lot.
Cheers
AG