Support

Admin Tools

#9810 can't login to backend with parameter

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by piggybank on Wednesday, 30 March 2011 07:35 CDT

Tuesday, 29 March 2011 18:53 CDT

piggybank
Not sure what's happened. Trying to support my client's site today...when I try to login to administrator?xxxx I get redirected to the home page.

An email is also generated with subject: "Security exception on..." and it indicates the ip address (mine) and reason = Reason: Admin IP Whitelist.

Going into the database, I can confirm that the password parameter I'm using is what appears in the database.

joomla 1.5.22
admin tools 2.0.1

Edited by piggybank on 2011-03-29 19:04 CDT

Wednesday, 30 March 2011 00:47 CDT

nicholas
You or your client have enabled the IP Whitelist feature in Admin Tools. This feature allows only specific IP addresses to connect to the back-end of the site. If you did not intend to do that, please follow the standard workaround:
- Using FTP, rename plugins/system/admintools/main.php to main.old.php
- Log in to the back-end of your site.
- Go to Components, Admin Tools, Web Application Firewall, WAF Config and disable the administrator IP whitelist feature.
- Logout from the back-end.
- Rename main.old.php to main.php and retry logging in. It should now work.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 30 March 2011 07:29 CDT

piggybank
That's got it! I think I'll have to take a look at what my Clients are fiddling with!

Let me take this opportunity to thank you (again) for the high quality products and SERVICE that help make Joomla such a great platform to work with. Your contributions to the community are priceless!

Wednesday, 30 March 2011 07:31 CDT

nicholas
You're welcome!

In order to avoid your clients tweaking things they are not supposed to, it's best to use the Master Password feature of Admin Tools. It will lock down select features (you get to tell it which ones) so that only persons who know the password can modify them. There's also the Access Control feature since Admin Tools 2.0 which allows you to completely lock out select users from Admin Tools' configuration.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 30 March 2011 07:35 CDT

piggybank
That's very good advice. I'll add that to our protocol for implementing admin tools.

Just a note/suggestion to other webmasters...we try to keep our implementations of things like Admin Tools as standard as possible, following a protocol. When we do our regular maintenance on client sites, we take that opportunity to update their software and configurations to match our current "best practices". Nicholas is very good at recommending best practices and I'm keen to take them into consideration.

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!