Support

Admin Tools

#9759 YooTool Yoo_Login Module not working

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Tuesday, 08 February 2011 04:17 CST

Saturday, 05 February 2011 21:25 CST

peterleslie
Hi

i've just installed ATPro onto a test site.
I just used the HTACCESS Maker and activated it, i.e. got it to create and save a new .htaccess file

everything is working ok - except for the Login/Logout module i have in my main menu. It is provided by YooTheme

the problem is that I can't logout from the front-end. I hit the logout button it reloads page taking me to back to index.php - but does not actually log me out.

From another browser - it wont let me login.

i've added and exception under server protection for
modules/mod_yoo_login

however no effect.

site is www.lloc.com.au
happy to private message login details

peter

Sunday, 06 February 2011 04:12 CST

nicholas
Try disabling the redirection of index.php to the site's root in the .htaccess Maker and click on save and create .htaccess. This should allow this kind of AJAXified login modules to properly work now.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Sunday, 06 February 2011 16:19 CST

peterleslie
Hi Nicholas

that solved the problem of login in and logging out. However the module is still not displaying properly...

www.lloc.com.au click login (this has ATPRO enabled)

vs

http://www.nlpinstitute.com.au/

click login (this is what is should look like

Edited by peterleslie on 2011-02-06 16:21 CST

Sunday, 06 February 2011 17:03 CST

slaes
Peter,

Just curious whether you have activated the "remove all instances of joomla" in the WAF (firewall) options? If so try switching it off and see what happens.

Sunday, 06 February 2011 18:40 CST

peterleslie
that feature was/is turned off in the WAF

peter

Monday, 07 February 2011 01:10 CST

nicholas
Peter,

Of course it doesn't display properly. Look at the URL to Yoo's CSS and Javascript files:
http://www.lloc.com.au/modules/mod_yoo_search/mod_yoo_search.css.php

It is a PHP file! The front-end protection, as stated in the user guide, will block direct access to rogue PHP files in random locations of your site and only allow direct access to index*.php files in your site's root. Please take a look in the "How to determine which exceptions are required" section of our user's guide. In your case, you have to set up two exceptions for directories where access to PHP files is allowed:
modules/mod_yoo_search
plugins/system/yoo_effects

IMHO, it should be better to let YooTheme know that the oh-so-common practice of serving CSS and JS files as PHP files in order to GZip them poses a big security risk on their clients' sites which outweighs the performance gains.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Monday, 07 February 2011 01:47 CST

peterleslie
Hi Nicholas

thank you so much for your help, as you can probably tell i am a totally newbie with this application and still learning and reading through your fantastic manual.

i added the following as exceptions

modules/mod_yoo_login
modules/mod_yoo_search
plugins/system/yoo_effects

as you suggested. However this had no effect.

So i restored my original .htaccess file. Site back to normal.
Then i went into ATPRO went to HTAccess Maker, Server Protection. And made sure FrontEnd Protection was turned OFF.

then i Saved & Created .HTAccess ... and the problem with Yoo Login and Yoo Search returned.

would really appreciate any help you can give.

Monday, 07 February 2011 01:58 CST

nicholas
There are multiple exception boxes. What is the title on the left-hand side of the exception text box where you added these items?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Tuesday, 08 February 2011 04:14 CST

peterleslie
Hi Nicholas

thank you for your patience and help, as i learn this new product. Fantastic product by the way.

Yes - i had them in the wrong exception box.

They are now in the exception box titled
"Allow direct access, including .php files, to these directories"

are are now working properly.

peter

Tuesday, 08 February 2011 04:17 CST

nicholas
You're welcome! I'm glad it's fixed now.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!