Support

Hi
I experience some potential problems on my sites where an url to an non-existing file or folder results in the display of the home page instead of the 404 error page.
I can prevent this using Akeeba Admin Tools .htaccess feature by setting Server protection/Frontend protection to ON.
But then, the eventgallery images are no longer displayed.
Again, I managed to solve this by adding the “components/com_eventgallery” folder to the “Allow direct access, including .php files, to these directories” list.
But I doubt that this is a good approach.
Can you enlighten me?
Thanks a lot.
Didier.

Thanks!

By adding “components/com_eventgallery/helpers/image.php” to “Allow direct access to these files“, eventgallery worked again.

Yes, I work with local files.

Some more information:
On my Joomla websites, some URL’s to non-existing files or folders result in displaying an existing page, mostly the Home page, just add the following to your website url :

/components/com_5starhotels/5starhotels.xml
or
/modules/mod_3dcloud/3dcloud.xml

or even parts of these.

(e.g. www.website.com/components/com_5starhotels/5starhotels.xml)

These directories do not exist, these extensions are never installed, there is no reference to such extensions nor folders in the databases, etc. I found these folder names via a friend who did some pentests, see info below

https://www.exploit-db.com/exploits/33566
https://www.exploit-db.com/exploits/7575

Didier.

Yes, Admin tools and Akeeba back-up are really essential tools, just as Event Gallery :-)
Thanks for your always great support.
Didier.