Fixing Extension Installation and YourSites Client Updates on Sites With AdminTools

In July 2026 AdminTools introduced enhanced hardening of uploaded files. The result of this is that if you have the uploadShield enabled with the default configuration in AdminTools you will not be able to install extensions on your client sites from within YourSites and, more importantly perhaps, you will not be able to update the YourSites client plugin on affected client sites.

This article explains what this means and how you can revover from this problem and re-enabled client plugin updates and extension installed on your affected client sites.

First of all you will need to be running YourSites version 1.72 or later.

You then need to configure a special WAF exception on each affected client site. Unfortunately you will need to do this by hand on each affected client site.





Make sure that you select articles/com_content as the component.

The Exception String you choose not be blank and for enhanced security should be changed from 'yoursites'.

In the YourSites config you should now use the same custom WAF Exception on the advanced tab of your settings.

Problems Installing Update on a Client Site

The above method should work first time for client sites - if you encounter a problem installing the client plugin update on a specific client site then manually updating the client plugin the first time may be necessary.

Start by selecting the site in YourSites and then download the client specific plugin (SITE SPECIFIC YOURSITES in the YourSites dropdown)

Once you have downloaded this package install it on the client site. You will need to download a new site specific package for each client site for security reasons.

After you install this package manually future updates should work ok. If you continue to encounter problems please raise a question in the support forum.