Am unable to login to my joomla site al of the sudden despite having the right credentials. I have changed the password via my phpadmin but in Vain. I tested it with wrong/non existent logins and am able to get the error message that username/password are not valid. However when I use valid logins, the site just refreshes and brings back the login panel. I have cross checked my configuration file and all looks okay.

Some one please help out.

  • Are you sure it's not something simple like having CAPS enabled? Are you getting anything in the PHP error log?
    – Lodder
    Commented Sep 30, 2017 at 12:36
  • CAPs is not enabled
    – Bakersen
    Commented Sep 30, 2017 at 13:00
  • What was the last change you did to your Joomla site, if any? Commented Sep 30, 2017 at 20:25
  • @SheldonSeale Nothing, I was logging in as usual.
    – Bakersen
    Commented Oct 1, 2017 at 15:07
  • 1
    Then I suspect you have been hacked. Myjoomla is a service that can detect and correct hacked sites. They (myjoomla.com) will allow you to do an initial scan of your site for free. Their clean up service is ranked very well and I have heard that it is well worth it. I would run the scan... Commented Oct 2, 2017 at 16:38

3 Answers 3


Probably your IP is banned. Change IP (use a vpn or restart your router) and try again.


I've tried it before.

Sometimes it was enough to delete files from the browser cache. Sometimes another browser and sometimes to set set the cookie domain and path in the configuration.php


I get the feeling that your website is hacked. The first step you can take to see if you can regain access is to restore the Joomla! installation by using the files in full stable installation package that you can download from the downloads archive for Joomla! 3. Please keep in mind to download the same version as is currently installed, you don't want to upgrade right away, just restore.

Unzip the file and upload everything except for the "installation" directory, because you don't want to get started over with a fresh installation. Use the merge option in your FTP client to make sure the third party extensions will remain.

After uploading is complete, check if you can login again. There is a big chance that the malicious code is partially removed, so that you can use the backend again.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.