jDownloadsownloads.com

Advertisement
Advertisement:

Author Topic: Can't save configuration menu  (Read 1730 times)

0 Members and 1 Guest are viewing this topic.

Offline Mathyas

  • Newbie
  • *
  • Posts: 3
Can't save configuration menu
« on: 14.10.2015 09:45:15 »
Hi!

I did update JDownloads 1.9 to 2.5.
I found everything ok, but I can't save (and close) configuration menu.

Error message:
403  forbidden
You don't have permission to access /administrator/index.php on this server.


I tried this proceedings, but doesnt work...

Offline ColinM

  • Moderator
  • *
  • Posts: 3.152
Re: Can't save configuration menu
« Reply #1 on: 14.10.2015 13:34:14 »
Hi
Just trying to understand so please excuse all the questions :) .

When you did the migration did you follow the doc below?
http://www.jdownloads.net/documentations/item/how-to-upgrade-jdownloads-component-from-1-9-x-to-latest-2-5-version

Actually you might be better to upgrade directly to Joomla! 3.x as Joomla! 2.5 is no longer supported (and also jD 2.5 series)  All new work is going into the jD 3.2 series.
http://www.jdownloads.net/documentations/item/from-jd1-9-1-x-on-joomla-2-5-to-jd3-2-on-joomla-3-2

The Permissions doc below to which you referred is about resetting the ACL permissions.  Will edit start to make it a bit clearer.
http://www.jdownloads.net/documentations/item/permissions-problems-after-migration-to-new-series

It looks at first site as if you have a file access permission problem.
Can you log in and logout of your administrator account OK if you do not go to jDownloads? 
Did you set SEF on?
And rename the htaccess.txt file?

Colin


« Last Edit: 14.10.2015 14:15:34 by ColinM »

Offline Mathyas

  • Newbie
  • *
  • Posts: 3
Re: Can't save configuration menu
« Reply #2 on: 15.10.2015 13:19:20 »
Hi!

The problem is:

The components conflict with protection rules at my hosting provider.

Log message: Blind SQL injection attack

The hosting power doesn't want to suspense the protection rules.

Has any possibility to repair the component?

Offline ColinM

  • Moderator
  • *
  • Posts: 3.152
Re: Can't save configuration menu
« Reply #3 on: 15.10.2015 14:56:44 »
Hi
Pleased you found the cause.

Edit:  Just noticed you are on Joomla! 2.5 - you NEED to go to Joomla! 3.x the entire protection area is much more secure in Joomla! 3.x and jd 3.2 series

I am sure Arno will want to resolve what is causing the problem with your hosting provider. Like most things the challenge is finding the bit that is creating the problem.
 
To move forward I think Arno will need Super Admin details and probably  host site access details.
Maybe you hosting provider can give more details, perhaps you could ask.

As I understand it Blind SQL injection attacks are similar to ordinary SQL injections but a bit more painful for the intruder to do.  It seems that to prevent such attacks one method is to send a 'prepared sql statement' to the database; basically an sql statement with the parameters replaced by ? characters.  The database the 'compiles' such statements.  A separate 'execute' type function is then used to identify the statement and provide the parameter values. 

Other methods such as using JInput (used to be jRequest) to extract parameters also helps, jD already uses this.

Colin
« Last Edit: 15.10.2015 15:02:28 by ColinM »

Offline Arno

  • Administrator
  • ***
  • Posts: 12.110
    • jDownloads.com
Re: Can't save configuration menu
« Reply #4 on: 16.10.2015 02:29:23 »
Quote
The components conflict with protection rules at my hosting provider.
Hm... can it be that your hoster use "special" settings for your server?
Nobody else has posted a problem like yours in the last months.

When you have get more detailed informations from your hoster, please send it me via PM.
Also a backend access (as Super User) can be helpful.
Best Regards / Gruß
Arno
Please make a Donation for jDownloads and/or write a review on the Joomla! Extensions directory!

 

Advertisement