I created a new Joomla website. It's located on a subdomain. It works perfectly.
... But now when I go live I get the error message “Bad Request
"The domain you are using to access this site is not allowed. This site can only be accessed through the domain names website2026.gfb-orga.de, www.website2026.gfb-orga.de.
If you clicked a link which brought you here please do NOT contact the administrator of the sites you see above. The problem is a wrong configuration in the web server of the company hosting the site, something that the site owner cannot control.
If you are the administrator of this domain name, and you were not expecting this error please go to your site's backend, Components, Admin Tools, Web Application Firewall, Configure WAF, Allowed Domains and add the domain name gfb-orga.de to the list, then click on Save to update your site's settings."
If I rename the provider.php to disable the site runs without any problems.
What am I doing wrong?
Best regards
Manfred
#43255 Bad request
Posted in ‘Admin Tools for Joomla!’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
6.12
PHP version
8.4
Admin Tools version
newest
Latest post by nicholas on Thursday, 06 August 2026 01:52 CDT
Thursday, 06 August 2026 00:55 CDT
a2dmsAdmin
Thursday, 06 August 2026 00:58 CDT
nicholas
Akeeba Staff
Manager
please go to your site's backend, Components, Admin Tools, Web Application Firewall, Configure WAF, Allowed Domains and add the domain name gfb-orga.de to the list, then click on Save to update your site's settings.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Thursday, 06 August 2026 01:33 CDT
a2dmsAdmin
Great! Thanks. A quick and perfect answer, as always.
Best regards
Manfred
Thursday, 06 August 2026 01:52 CDT
nicholas
Akeeba Staff
Manager
Angelika, I have a confession to make.
I just copied and pasted the information which was already written in the error message you pasted in your ticket. It's best to read the information I place on your screen before contacting me. I add that information to save you time and frustration.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!