Support

Hello,

We are having an issue with the latest Yootheme Pro version (2.3.1) and Admin Tools.

After updating Yootheme we can no longer upload or see new images and eventually get blocked from the site unless we have our IP in the exceptions area. The other workaround is to turn off the Direct File Inclusion shield (DFIShield setting which doesn't sound like a good idea. Not sure how this effect any public viewing images.

I'm guessing this is all on Yootheme but wanted to reach out to you guys just in case.

Yootheme is almost impossible to reach.

If putting your IP in the never block list fixes the issue, then it sounds like we have to figure out an exception in WAF.  Please trigger the problem, then  look at the Blocked Request Log and see what the reason was for the latest block.  Please copy and paste it here and we'll see what sort of an exception we need.

Here is the reason in the Blocked Request Log:

template= in URL

https://masterpolice.nepservices.com/index.php?p=theme%2Fimage&src=WyJpbWFnZXNcL3ByZXZpZXctZnVsbC1GVEJfZ3JhcGhvYy5qcGciLFtbImRvUmVzaXplIixbNTk5LDYwMCw1OTksNjAwXV1dXQ%3D%3D&hash=ccbfe87957404108a39e5835b3c5d393&option=com_ajax&style=9&template=yootheme

We've been getting a lot of these with the new YooTheme update.  You need to go to Web Application Firewall, Configure WAF, on the Cloaking tab and set "Allow site templates" to Yes.

Thank you!

You're welcome!