Support

Site Restoration

#14819 restoration to new site with move wizzard

Posted in ‘Site restoration’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

PHP version
n/a
CMS Type
Other
CMS Version
n/a
Backup Tool Version
n/a
Kickstart version
n/a

Latest post by nicholas on Wednesday, 30 January 2013 09:29 CST

cornelius

Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes
Joomla! version: 2.5.8

PHP version: 5.3.13
MySQL version: Mysqli
Host: (optional, but it helps us help you)
Akeeba Backup version which took the backup: 3.6.12
Kickstart version used to extract the backup: (unknown)

Description of my issue:

At the new site in the configuration file there is an entry called public $root_user with the username of the dev site. The new site works fine. But I don't think it is right to have the name of the dev user in the new site.

nicholas
Akeeba Staff
Manager

This wasn't added by our software. In fact, you can't add or remove it with any other way except manually editing the configuration.php file. I am puzzled as to what kind of support is expected from yours truly about a manual edit you made to your site's configuration.php file?

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

cornelius

Dear Nicholas,

I am very sure I did not add it myself. I believe you when you say it is not your software that did it. But I noticed the entry in severall sites that were copied with the move wizard. I will pay attention next time I copy a site from dev to live.

Sorry to have disturbed you.

Greetings,

Chris

nicholas
Akeeba Staff
Manager

The $root_user variable is a failsafe device. Normally it's not present in the configuration.php generated by Joomla!'s installer. You are only supposed to add it if you have screwed up your ACL and need a way to log back into your site and fix the trainwreck or when you want to recover your administrator password. The only way to add it is by manually the configuration.php file. Logging on as this user will also produce a big, fat warning reading "You are logged-in using the emergency Root User setting in configuration.php. You should remove $root_user from configuration.php as soon as you have restored control to your site to avoid future security breaches."

Reference: http://docs.joomla.org/How_do_you_recover_your_admin_password%3F

Akeeba Backup, no matter if you are transferring a site or restoring a backup, always follows the same procedure. It will read the existing configuration.php (from the original site) and only replace specific variables with the information you entered in Akeeba Backup Installer (database connection information, site name, tmp and log directory, FTP connection information; nothing else). Even if you add a nonsensical variable like $bigboyslike = 'mylittleponny' it will be preserved during the restoration/site transfer. Not having a whitelist of valid parameter keys is what allows ABI to be forward-compatible. This trait allowed me to be essentially reusing the same code (with few additions) for over four years – the first version of ABI was actually called "JoomlaPack Installer 3" and was created in 2008.

This brings us back to your site. How did that $root_user end up in your test site's configuration.php? No idea. If you didn't put it there, somebody did. Do you have a developer, co-worker or hacker accessing your site?

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

cornelius

Hi Nicholas,

I don't know where the code came from. I checked the dev site and it was already there. So I guess the transfer just copied it.

I really appriciate your work.

Greetings Chris

nicholas
Akeeba Staff
Manager

You're welcome, Chris!

Nicholas K. Dionysopoulos

Lead Developer and Director

πŸ‡¬πŸ‡·Greek: native πŸ‡¬πŸ‡§English: excellent πŸ‡«πŸ‡·French: basic β€’ πŸ• My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!