No one can save from the Front End with jomDefender enabled???

[frodojrr]

I had jomDefender enabled but had to turn it off because no one was able to save content items from the front end.

What did I do wrong?  What settings should I have used?

[Andy]

Please create a ticket so we can look further into the issue (there's a nifty link in my sig).

Kindest regards,

[frodojrr]

Please create a ticket so we can look further into the issue (there's a nifty link in my sig).

Kindest regards,

Done!  Thank you!

[Andy]

In case anyone else encounters this, here was my response:

I've looked into this and changed "Remove word Joomla!" from "Yes" to "No"

I was troubleshooting on this page: http://www.enewspf.com/latest-news/latest-local/20819-in-and-around-park-forest-week-of-january-3-2011-1.html?task=edit and the plugin was removing "joomla" from line 13ish changing this:

Code: [Select]

<script type="text/javascript" src="/includes/js/joomla.javascript.js"></script>
to this:

Code: [Select]

<script type="text/javascript" src="/includes/js/.javascript.js"></script>
I recommend leaving the setting off if it causes conflicts.

[frodojrr]

To Andy and the CorePHP crew:

Thank you very much for jumping on this so quickly after the holidays.  I'm glad I'm able to keep jomDefender installed, helping to secure the site.

[fresh]

Is there another solution for this? I've installed jomdefender and jcomments component won't work. I did what Andy said about and everything is now fine - but looking at the code anyonce can see the site is built with Joomla - which kind of goes against the scope of JomDefender.

Any updates? Thanks!

[frodojrr]

Check Andy's response above.

There is an option in jomDefender, "Remove the word 'Joomla'"

Turn that option off.

[Andy]

I think he's referencing the fact that turning that off will allow the necessary includes but will also allow instances of "Joomla" to still appear in your site allow bots and potentials hackers to fingerprint your site.

1. In some people's installations, they do not have includes being used bearing the word "joomla" so they can have the word "Joomla" edited out.
2. In other cases, such as yours, there are files being included with the word "joomla" in the path that don't get included correctly because that info is being edited out.  Our plugin COULD be modified so that it finds the files and renames them, though editing the Joomla core is typically a bad idea.

I'll look into adding an option to choose whether lowercase "joomla" gets edited out which would allow "Joomla!" and "Joomla" to be removed but not little "joomla" that we would need for our file includes.  This would prevent your site from saying Joomla in search engines but, of course, would not make your site as incognito as to the CMS it's running.

It may be more practical to rename that file and edit the code that includes it.

What are your thoughts?

Kindest regards,

[Andy]

I'll look into adding an option to choose whether lowercase "joomla" gets edited out which would allow "Joomla!" and "Joomla" to be removed but not little "joomla" that we would need for our file includes.

FYI, this can be done by modifying lines 339, 346 and 351 in /plugins/jomdefender.php to have a capital J in Joomla and removing the 'i' for case-insensitivity at the end of the regular expression so that:

Code: [Select]

'/(?:(?<=\>)|(?<=\/\>))(\s*?.*?)(joomla(!)?)(\s*?.*?)(?=\<\/?)/i',Looks like this:

Code: [Select]

'/(?:(?<=\>)|(?<=\/\>))(\s*?.*?)(Joomla(!)?)(\s*?.*?)(?=\<\/?)/',
Kindest regards,

[frodojrr]

FYI, this can be done by modifying lines 339, 346 and 351 in /plugins/jomdefender.php to have a capital J in Joomla and removing the 'i' for case-insensitivity at the end of the regular expression so that:

Code: [Select]

'/(?:(?<=\>)|(?<=\/\>))(\s*?.*?)(joomla(!)?)(\s*?.*?)(?=\<\/?)/i',Looks like this:

Code: [Select]

'/(?:(?<=\>)|(?<=\/\>))(\s*?.*?)(Joomla(!)?)(\s*?.*?)(?=\<\/?)/',
Kindest regards,

Very cool.

Thank you, Andy.

[frodojrr]

FYI, this can be done by modifying lines 339, 346 and 351 in /plugins/jomdefender.php to have a capital J in Joomla and removing the 'i' for case-insensitivity at the end of the regular expression so that:

Code: [Select]

'/(?:(?<=\>)|(?<=\/\>))(\s*?.*?)(joomla(!)?)(\s*?.*?)(?=\<\/?)/i',Looks like this:

Code: [Select]

'/(?:(?<=\>)|(?<=\/\>))(\s*?.*?)(Joomla(!)?)(\s*?.*?)(?=\<\/?)/',
Kindest regards,

Andy:

Sorry.  I need a more complete path.  I can't find/plugins/jomdefender.php.

[Steven Pignataro]

Typo in the path:

/plugins/system/jomdefender.php

Kindest regards,

[frodojrr]

Thank you!

This plugin now works. Completely!!!

[alisondesser]

To Andy and the CorePHP crew: I'm glad I'm able to keep jomDefender installed, helping to secure the site.

[dpk]

Have these changes been made to the latest version of the plugin by now? It does not make sense for it to make ANY text replacement on URLs of any type. Outbound links are fine, and references to local files or folders can't be replaced without breakage -- it's up to the site owner not to create such a conflict.