Experiencing a 401 Unauthorized Error During Update?
If you're seeing a 401 Unauthorized error when trying to update your Joomla extension, it's likely due to our new two-factor authentication (2FA) security measure for your Download ID.
To resolve this, check your email (Spam folder?) for a message to approve your server or device, or read our detailed blog post here(
onlinecommunityhub.nl/best-practice/new-...-extension-downloads) to understand the steps involved. This will guide you through approving your server for future updates.
Implemented Question on New User Notification
- Norsk Jernbaneklubb
- Topic Author
- Offline
- Posts: 24
- Thank you received: 2
Well, disabled users or not, we would like the possibility to say explicitly which admin email addresses that will receive these notifications, like we can in other extensions, e.g. Admin Tools and LOGman.
Would this be a possible enhancement?
Regards,
Frode
DOWNLOADLINK TESTVERSION
Please Log in to join the conversation.
- Ruud van Lent
- Offline
- Posts: 1640
- Thank you received: 107
the notifications are sent to all user accounts that have 'receive system emails = yes' configured in their account.
This because I classified this as a system email.
I know that this system email functionality is build in into Joomla but almost no extension makes (correct) use of it.
It is also sending to disabled users, this is actually a bug Thanks for pointing that out to me
The way it is set now, the (super users) can configure themselves if they want to receive these emails or not (they just need to configure the receive system emails in their account).
Would that be an option for you and your administrators?
Please Log in to join the conversation.
- Norsk Jernbaneklubb
- Topic Author
- Offline
- Posts: 24
- Thank you received: 2
Ok, that's interesting. I've always wondered as to whether that function was being used at all. But this actually means that anyone with 'receive system emails = yes' will get the mails, even if they're not Super Users (well of course that shouldn't happen, so it's more of a theoretical problem).
But I think we still preferr the explicit email option to have full control, but this will definetly do for the time being. Please explain the system email details in the docs.
Oh, and I forgot to mention the bug I found. You are using html-code in the email Subject line, which comes out like this:
Password for <strong>'User Name'</strong> changed on 'Site Name'
Please Log in to join the conversation.
- Ruud van Lent
- Offline
- Posts: 1640
- Thank you received: 107
will push out a new release today that will fix the mailing of blocked uses and also the language string.
This release will also have a new feature: it now has a 'allow from' field for the back-end administrator protection. here you can set e.g. your ip address. When matched you will not be prompted for the apache login, when not matched you will
I will add an option for setting a specific (one or more) email accounts (bcc). This will not be part of the next release.
Please Log in to join the conversation.
- Norsk Jernbaneklubb
- Topic Author
- Offline
- Posts: 24
- Thank you received: 2
Please Log in to join the conversation.
- Ruud van Lent
- Offline
- Posts: 1640
- Thank you received: 107
Please Log in to join the conversation.
- Ruud van Lent
- Offline
- Posts: 1640
- Thank you received: 107
Please Log in to join the conversation.
- Ruud van Lent
- Offline
- Posts: 1640
- Thank you received: 107
in the first post (yours) of this topic there is a link to a test version.
In this version I have refactored the admin accounts email selection.
Now there is a (advanced tab) field where you can specify one or more admin email accounts. If empty it will fallback to the accounts that have 'Receive System Emails' = yes.
This logic is now used on:
- manual override notifications
- geoip downloads
- user protection (new)
I have renamed the user notification tab to user protection as it now does more then only notify users of logins on new devices and password / email changes in their account.
new is a cronjobs that will parse all user accounts and check their last login date with a configured max number of days. If the account matches then it will either be blocked (because not used for max number of days) or it will have the 'password reset required' field set.
This way we can crank up security (block old user accounts) and give even more security control to the site admin
anyway,
if you can test that would be great!
tips are welcome
Please Log in to join the conversation.
- Norsk Jernbaneklubb
- Topic Author
- Offline
- Posts: 24
- Thank you received: 2
Thanks, this is working just fine. So far tested Email Change and New Device, and they were sent to the given address.
Please Log in to join the conversation.
- Ruud van Lent
- Offline
- Posts: 1640
- Thank you received: 107
thanks for testing and confirming.
Any thoughts on the new User Protection features?
Please Log in to join the conversation.