Support

Admin Tools

#43005 Question on Firewall restriction

Posted in ‘Admin Tools for Joomla!’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
6.1.1
PHP version
8.3.31
Admin Tools version
7.8.9

Latest post by timpennington on Monday, 08 June 2026 09:27 CDT

timpennington

I use a module from CMSJunkie that is a directory system. One of the features is that it allows business listings on my site to have a small map of their location. Here is an example: https://finishingandcoating.com/index.php/alpha-metal-finishing

The issue is on the right side, where instead of the map box, a blue "?" appears. I have attached a screenshot.

When I asked the developer, they responded with this answer:

"Please allow access to https://finishingandcoating.com/components/com_jbusinessdirectory/libraries/staticmaplite/staticmap.php?center=42.3411667,-83.88505119626771&zoom=13&size=400x300&markers=42.3411667,-83.88505119626771 It seems that the access is restricted."

And also: "It seems that you have a firewall that is blocking the request. You can contact the hosting company to provide you more details."

Is related to the use of Admin Tools. Thank you for any guidance you can provide.

moira

The map image is indeed being blocked by Admin Tools' .htaccess Maker. This feature prevents direct browser access to PHP files outside of Joomla's normal request flow — which is a deliberate security measure — but it also catches legitimate PHP scripts that third-party extensions need to run standalone, like staticmap.php.

You can add a specific exception for that one file without disabling the protection globally:

  1. Go to Components → Admin Tools → .htaccess Maker.
  2. Scroll down to the "Allow direct access to these files" option.
  3. Click the green + icon to add a new line and type in:
    components/com_jbusinessdirectory/libraries/staticmaplite/staticmap.php
  4. Click Save & Create .htaccess in the toolbar.

The map should load correctly after that.


Important security note: We strongly recommend adding only the specific file path above, rather than disabling the "Block direct access to PHP files" option entirely. That option protects your site against a class of attacks where a malicious PHP file uploaded to your server (through a vulnerability in another extension, for example) can be executed directly by visiting its URL. Allowing direct PHP access everywhere eliminates that protection. Allowing it only for a single, known-good file keeps your site safe while restoring the functionality you need.

If at any point you see a 403 error for other files from the same extension, check whether those files are also PHP scripts intended to be called directly (e.g. AJAX endpoints, image generators) and add them one by one in the same way.

Moira Fari

Support Specialist

🇬🇧English: native 🕐 My time zone is Asia / Nicosia
Kindly note that my replies are fully vetted by our developers.

timpennington

I did that where I added the exception, and my site went down immediately with the message "

Sorry, your PHP version is not supported.

Your host needs to use PHP version 8.3.0 or newer to run this version of Joomla."

 

I can not bring up the front or back.

 

timpennington

Update: I worked with Rochen, my host, and we found a problem that adding the line caused.

 

From Rochen:

"It looks like your AdminTools added the following line to the bottom of your .htaccess file which broke the site: 

AddHandler application/x-httpd-ea-php82 .php .php8 .phtml

I have commented out that line and the site is back up and functional now."

 

It is now fixed. Thank you again.

nicholas
Akeeba Staff
Manager

Hi Tim,

Please remember that this line is added because you added it to the .htaccess Maker's “Custom .htaccess rules at the bottom of the file”.

Please do read the documentation page for this feature which has a separate section explaining how to find the correct line so you can add it to your .htaccess Maker configuration.

It goes without saying, every time you change your PHP version you need to update that line.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

timpennington

Thank you! I will pass this along to my hosts at Rochen, who made the change.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!