Comments on: View module positions on a Joomla site with ?tp=1

By: How to disable ?tp=1 in Joomla | Joomla Tips

How to disable ?tp=1 in Joomla | Joomla Tips — Wed, 27 Jan 2010 21:11:25 +0000

[...] We covered how to show your published module positions using ?tp=1 in a previous post. [...]

By: matt

matt — Wed, 06 Jan 2010 22:57:37 +0000

That’s a awesome tip Hans. Thanks for that contribution.

Just to play devils advocate here…..what is the harm in people being able to see your module positions? I fail to see the security risk, but I would like your take on it.

By: Hans Kuijpers

Hans Kuijpers — Wed, 06 Jan 2010 22:39:48 +0000

Since not everyone wants their module positions to be viewed there is a way to hide it. In a production website no one should see the module positions… it’s not of anyone’s business.

add the following to your .htaccess file
########## Start ?tp=1 prevention
#
RewriteCond %{QUERY_STRING} tp=(.*)
RewriteRule ^(.*)$ index.php [F,L]
#
########## End ?tp=1 prevention

By: Chris

Chris — Fri, 18 Dec 2009 08:12:14 +0000

Something you forgot to mention Matt, one of Morphs little recent additions is the ability to turn this off in Configurator – so if you want to prevent snoops from seeing how you have structured your site, you simply disable the tp=1 option. Easy peasy
Chris´s last blog ..Morph updated – new versions across the board

By: Jeff Jones

Jeff Jones — Thu, 17 Dec 2009 00:40:12 +0000

That is a GREAT tip, thanks!