Please look at the bottom of this page (under Support Policy Summary) for our support policy summary, containing important information regarding our working hours and our support policy. Thank you!
Admin Tools Pro 7.8.9 blocks Helix Ultimate 2.2.7 Template Options in Joomla 5.4.6. The 403 call stack shows: Akeeba\Plugin\System\AdminTools\Feature\TemplateSwitch The Helix Options URL is: administrator/index.php?option=com_ajax&helix=ultimate&... When System - Admin Tools is disabled, Helix Options works normally. When System - Admin Tools is enabled, Helix Options gives 403.#43133 Admin Tools Pro 7.8.9 blocks Helix Ultimate 2.2.7 Template Options in Joomla 5.4.6.
Posted in ‘Admin Tools for Joomla!’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
5.4.6
PHP version
8.2.32
Admin Tools version
7.8.9
Latest post by RikNuytten on Wednesday, 08 July 2026 03:33 CDT
Tuesday, 07 July 2026 09:46 CDT
RikNuytten
Tuesday, 07 July 2026 09:52 CDT
moira
Helix Framework passes a template name in the URL when accessing its backend Template Options (e.g. option=com_ajax&helix=ultimate&id=17). Admin Tools' Template Switch / Cloaking protection blocks this, because it prevents visitors from probing which templates are installed by passing a template name in the URL.
The fix is:
- Go to Components → Admin Tools → Web Application Firewall → Configure WAF.
- Click on the Cloaking tab.
- Set Allow site templates to Yes.
- Click Save & Close.
Note: this allows an attacker to detect which templates are installed on your site. We recommend uninstalling any non-core templates you are no longer using.
Moira Fari
Support Specialist
🇬🇧English: native 🕐 My time zone is Asia / Nicosia
Kindly note that my replies are fully vetted by our developers.
Wednesday, 08 July 2026 03:33 CDT
RikNuytten
This is perfect! Thanks! I do not have other templates except Cassiopeia and helix.