Home
Login | Register
Welcome, Guest
Please Login or Register.    Lost Password?

jSecure enabled - Can still access administrator
(1 viewing) (1) Guest
Go to bottomPage: 12
TOPIC: jSecure enabled - Can still access administrator
#595
jSecure enabled - Can still access administrator 1 Year, 10 Months ago Karma: 0
Hi,

Problem description:
After activating the jSecure plugin, the administrator page was still accessible the normal way.
Using jSecure 1.0.9 on Joomla 1.5.15.

Reason:
The server variable SCRIPT_NAME contains the path "/cgi-bin/php".
So the plugin was parsing the wrong path for the correct jSecure key.....

Solution:
I changed the statement in the jsecure.php file and it solved the problem for me .

// Original statement
// if((preg_match("/administrator\/*index.?\.php$/i", $_SERVER['SCRIPT_NAME']))) {

// New statement
if((preg_match("/administrator\/*index.?\.php$/i", $_SERVER['PHP_SELF']))) {

Not sure if it can be fixed in a different way, but I thought it was worth sharing.

Cheers,
Sander - NL
Shonkmaster
Fresh Boarder
Posts: 1
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#596
Re:jSecure enabled - Can still access administrator 1 Year, 10 Months ago Karma: 0
We will look into this ASAP.
admin
Admin
Posts: 5
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#621
Re:jSecure enabled - Can still access administrator 1 Year, 10 Months ago Karma: -1
Any news?
rmeijer
Fresh Boarder
Posts: 8
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#631
Re:jSecure enabled - Can still access administrator 1 Year, 10 Months ago Karma: 0
We regret the delay. We will have an answer on this ASAP
aaron.handford
Admin
Posts: 16
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
#634
Re:jSecure enabled - Can still access administrator 1 Year, 10 Months ago Karma: 2
Hi,

Thanks for suggestion.

We will test the system with your suggestion and will add the changes.

Thanks and Regards,
Bhavin Shah
bhavin.shah
Moderator
Posts: 393
graph
User Offline Click here to see the profile of this user
Gender: Male bhavin.r.shah Location: Mumbai Birthday: 12/24
The administrator has disabled public write access.
 
#636
Re:jSecure enabled - Can still access administrator 1 Year, 10 Months ago Karma: -1
When will it be added to the code?
rmeijer
Fresh Boarder
Posts: 8
graphgraph
User Offline Click here to see the profile of this user
The administrator has disabled public write access.
 
Go to topPage: 12