Allow rules ("URLs that stay open")
Enter one rule per line. Lines starting with # are notes.
| Rule | Matches |
|---|---|
/webhook/ or webhook |
Any URL path that starts with /webhook (whole path segments only; a plain word is read as /word) |
com_example |
Every request to that component |
com_example:task.name |
Only that exact task |
com_example?ctrl=checkout&task=notify |
Requests where every listed parameter matches exactly (not case-sensitive) |
Default rules: /api/, /notify, /ipn, /webhook, /callback, plus a # Payment gateways block for:
- HikaShop
- VirtueMart
- J2Store
- PayPal IPN
- RSForm PayPal
- Akeeba Subscriptions
- PhocaCart
- EShop
- JoomShopping
- OS Membership Pro
- Event Booking
- Joom Donation
How component rules work. A component rule only matches when option= is in the request itself (the query string or POST data) and equals the component Joomla actually routes to. Adding parameters can't open a SEF URL or a menu item. To keep a normal page open, use Menu items that stay open.
⚠ Important: payment gateway callbacks
Payment callbacks only stay open when the gateway calls a non-SEF URL that includes
option=. For example:index.php?option=com_hikashop&ctrl=checkout&task=notify.... If your gateway is set up with a SEF callback URL (for example/shop/checkout/notify), it gets the 503 page, and payments may not be confirmed while the page is on. Before switching on, check the notification/IPN URL in each gateway's settings. If you can, use the non-SEF form. Then test one payment in sandbox mode.
Built-in safety list. These can never be opened with a component rule, even if you add one:
- requests with no
option com_content,com_tags,com_contact,com_finder,com_newsfeeds,com_users,com_fields,com_wrapper,com_privacy,com_search
Rules that start with ? (no component), such as ?task=notify, are ignored.
Error pages. Visitors who aren't let through see the Coming Soon/Maintenance page instead of Joomla's 404 or 500 page. Allow rules don't open error pages.