Support

Admin Tools

#39948 Administrator Exclusive Allow IP List / behind Cloudflare

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
441
PHP version
8125
Admin Tools version
743

Latest post by nicholas on Friday, 08 December 2023 05:59 CST

Friday, 08 December 2023 03:24 CST

hbproph

Dear Nicholas,

 

I face with some issue and i need your professional advise.

So we use Admin tools for years, and we really love it.

So far we havent faced with this situation as we did not had CloudFlare configured.

 

So the situation is:

 

We really like this Administrator Exclusive Allow IP List solution whitin Admin tools its gives an extra layer of security.

It was always enabled for us.

 

Recently we configures cloudflare on the site and because CF is masking now our real IP i was locked out from our site... :(

As millions of users useses CF, im asking is there is a solution for this please?

How we can still keep this option enabled behind CF?

Thanks for any tip!

Friday, 08 December 2023 04:05 CST

nicholas

Don't worry, there is a solution. We had created a workaround for this in Admin Tools which we contributed back to Joomla!. It now suffices to go to your site's Global Configuration, Server tab, set Behind Load Balancer to Yes, and click on Save & Close.

By doing that, Joomla! knows that you are behind a transparent proxy (including CDNs like CloudFlare, Sucuri, etc). As a result, it will no longer report the direct IP accessing the site, but the real IP of the visitor which is reported in an HTTP header by CloudFlare.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 08 December 2023 04:39 CST

hbproph

Thank you very much this is really a great news, i will test this asap, i have a question for this, so i will enable this option, this is clear but my question => still i need to add my home IP address to the "Administrator Exclusive Allow IP List" ?

Friday, 08 December 2023 05:23 CST

nicholas

No, you do not and should not do that. This option is there for very specific and mostly uncommon use cases e.g. having a static IP address, accessing a site within a private network, etc. For most users, like you, the Administrator Exclusive Allow IP List is not something they need to care about.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Friday, 08 December 2023 05:38 CST

hbproph

Just configured based on your advise and tested and works as charm!

Thank you so much Nicholas, for me Admin tools is the number one must have plugin for every Joomla owner!

 

Καλό Σαββατοκύριακο! (<= i hope i didnt say any stupid... :D )

Friday, 08 December 2023 05:59 CST

nicholas

You're welcome!

(and yes, that was correct Greek, well done!)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!