36

Keeping a Joomla Website Secure Use strong passwords. Minimise the number of administrator accounts. Disable or remove unused user accounts. Minimise the number of third party extensions and where third party extensions are necessary, use well supported extensions from established developers you trust. Regularly apply the latest updates to Joomla and third ...


18

You can use it, but I would not recommend it especially if you are not familiar with Joomla's codebase and specific PostgreSQL particularities. In the last couple of months I looked into a couple of PostgreSQL issues, as part of my time dedicated to the Joomla Bug Squad. I never used it in production, but here are some issues / what to expect: Supporting ...


14

It's very important to store backups on a separate server. I see a lot of people who are faithfully running Akeeba Backups... and they're being stored on the same server in the same root directory. Not so helpful if you are hacked in a serious way, and certainly not helpful to recover from a hosting failure. Akeeba Backup Pro allows you to store and manage ...


9

The easiest way I've found is to use Akeeba Backup. Very easy to use and free.


8

When you're using something that is not a official release (i.e. all the testing packages and the latest staging packages on github) you don't need to remove the install directory (the check is commented out). This means all you need to do is delete configuration.php and you can just start the installation proceedure again. The risk is people could ...


7

No, when installing for MySQL there is no need to create the database first. The credentials (Username and password) you use to connect to the database server do need to have the permissions to create a database. The database server needs to exist and be running for the Joomla installation to create the database. Some providers don't allow this and give you ...


7

As an alternative to .htaccess file or locking it down by IP, you can also use jSecure to secure your admin login. One thing that hasn't been mentioned is using a reputable hosting provider. You want one that not only keeps up with security but will also work with you if you are hacked or there is a problem (database gets corrupted for example). The idea ...


7

Did you try the class name without underscores? "plgSystemNotifierInstallerScript" (or possibly "plgSystemnotifierInstallerScript" not sure) That seems to be the format the two plugins I checked use.


6

You have 3 options here. Option 1: As you have already mentioned, you can install everything as 1 package, however it's not really the most efficient method. This method is useful for extensions which have dependencies, but your package of extensions will have to be installed or uninstalled as a bundle, but not separately. Option 2: You can install ...


6

Try this too, Keep your Joomla up-to-date together with its extensions. Keep regularly backups of your site in clouds. Do not open robots.txt for secured folders. For the latest Joomla versions, making use of the two-factor authentication will be more secure. Make sure folders and files have the right permissions allowed. Use Cloudfare for Joomla. Hope its ...


6

If I understand right your question, you are after the Discover Feature in the Extensions Manager. First, make sure you have copied all the required files of an extension to their proper directories -wherever those may exist: administrator site, media, languages and so on-, otherwise you will encounter issues using this extension later on. Then, go to the ...


5

Basically in my experience, with the size of Joomla there is no way to truly secure it completely. So rather then a perfect security policy that stops it all, its best to bring your expectations down to try and lower the overall damage. This can be done with an extremely frequent backup policy so that at any intrusion the site can be rolled back, as well as ...


5

Put in the header of install script: jimport('joomla.filesystem.folder'); and inside of function install($parent) put the code: $path = JPATH_SITE . DIRECTORY_SEPARATOR . "images" . DIRECTORY_SEPARATOR . "mycom"; $mode = 0755; JFolder::create($path, $mode); DIRECTORY_SEPARATOR for Joomla 3.x


5

This has nothing to do with free vs commercial templates. Modules (the main menu usually is a module too) has to be published to a Module position. The current position for each module can be seen in the module manager, or in the details for each module: The important part is that each template can have different module position names. The default Joomla ...


5

If you cannot install Joomla, then your server is not filling the minimum requirements. For instance, a basic PHP configuration must have certain PHP extensions enabled. Check your browser console or server log to review if there is a more detailed error output. PD: PHP 5.4 is not longer stable, it has reached its end of life. I would recommend at least ...


5

Here are some helpful resources for beginners and Joomla newbies. (for developers tutorials go: Joomla 3.x extension development tutorial for a beginner developer) Joomla Docs Getting started with Joomla Joomla Beginners Tutorials Joomla Portal: Beginners Joomla Portal: Administrator Manual Joomla Terminology Joomla Glossary Some Basic Video Tutorials on ...


5

Yes, it is absolutely possible. You have to create/use an install script.php file in your installable plugin folder which will include tasks on different points of installation, uninstallation, update, preflight or postflight tasks: For a module, a script class would look like this: class mod_helloWorldInstallerScript { public function __construct(...


4

Change username and keep administrator password strong, use two-factor authentication (inbuilt for 3.3+, for others http://www.readybytes.net/labs/two-factor-authentication.html) Install kSecure (http://extensions.joomla.org/extensions/access-a-security/site-security/login-protection/12271) Safeguard your website from various attacks by using this htaccess ...


4

Installation of Joomla requires a properly configured infra. It looks like several stacks are not properly configured out-of-the-box for this very common Joomla setup. Increase max_execution_time in php.ini and restart apache untill installation of Joomla succeeds. Installation should continue creating the tables and finish in a timely fashion.


4

As noted in the comments already, the Protostar template is installed perfectly fine in your installation. The default sample data would only add some modules to the page. But this is unrelated to the template itself. It looks like this without sample data and this is with the default sample data The difference is that with the sample data you have The "...


4

Sounds to me like the script times out while creating the database tables? The server error log file would likely tell you the reason for it. To manually install Joomla You need to create the configuration.php file. There is an example file installation/configuration.php-dist. You can take that, adjust it and place it in the root folder as configuration....


4

Just my 2 cents as there could always be some other issues. In regards to permissions, it's not always the chmod levels that need changing. It may sometimes be due to the directory group permissions. Changing the the group permissions can be achieved easily through SSH with a tool such as Putty and the following command: cd path/to/parent/directory chgrp -...


4

As @lodder says, the JPA file generated by Akeeba Backup contains everything you need (files and database, including Joomla itself), so all you need to do is upload the JPA file and kickstart.php to your server and visit "http://yourdomain.com/kickstart.php" (if you're using Kickstart pro, you'll have to rename the file to something else first). But since ...


4

In your case, Joomla.com doesn't give super user permissions and there is limited access to everything. You cannot install any extension or template. You have to use the pre-defined template the one you chose during launching your website in joomla.com. Refer this for more: http://tutorials.joomla.com/no-category/34-joomla-com-admin Hope this helps


3

Check out Joomla extensions packager at http://www.joomla-extensions-packager.org The form is limited to 10 extensions, but you can use the library to generate unlimited package by simple php script (example is available at packager's github) Or you can use the form multiple times (recursively), as it supports package extension type, so its able to pack ...


3

It's likely you'll want to change ownership to user www-data. You can see the user assigned to that space by doing # cat /etc/passwd. Always be careful when touching objects as root. You can break a lot of things.


3

I had this happen on my XAMPP on a (rather slow) laptop. Basically the script times out while waiting for MySQL. Increasing max_execution_time solved the issue for me.


3

Your first line of defense is your hosting service Lease a dedicated server from a reliable hosting service Ensure that you activate 2FA on your server and use a 'VERY STRONG' password Install a reliable firewall on your server - I use ConfigServer Install / Configure an anti-virus program, I use ClamAV Ensure that each website username does NOT use the 1st ...


3

Borrowing this list from a whitepaper "Pen-testing a Joomla site" found on blog. I think this list is a thorough guideline for the basics of Joomla security. Always keep you Joomla up to date. Install the latest upgrade as soon as the upgrade is released. Whatever extensions are being used, they must be properly patched with latest upgrade releases. Any ...


Only top voted, non community-wiki answers of a minimum length are eligible