0
Welcome Guest! Login
0 items Join Now

Joomla Version Info, Security Tips and Changed Upgrade Items

    • Ben Lee's Avatar
    • Ben Lee
    • Elite Rocketeer
    • Posts: 4193
    • Thanks: 42

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 4 months ago
    • That is a AWESOME write up! :D ;D :D

      Thanks a ton for posting this. I'll try to get something posted here in the next day or two!
    • Ben Lee's Avatar
    • Ben Lee
    • Elite Rocketeer
    • Posts: 4193
    • Thanks: 42

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • I've been working on it and I'm just not getting good results. Is it possible that there's a little more to the login module than what's posted here?
    • Joe Halleck's Avatar
    • Joe Halleck
    • Preeminent Rocketeer
    • Posts: 5480
    • Thanks: 66
    • Never give up!

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • What is not working?
    • Magento - phpBB3 - Kunena - RokBridge Specialist
      No Secure Tab posts unless requested.
      Use the Thank You and Life Preserver Buttons!
      Your signature is also great place for setup details...help us help you!
    • Ben Lee's Avatar
    • Ben Lee
    • Elite Rocketeer
    • Posts: 4193
    • Thanks: 42

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • Well, here's what I have and it doesn't really load all the necessary items for the login module to be configured from the backend. Not sure what's going on.

      Also, I had to manually delete the files over FTP after uninstalling to get rid of it. No worries about this part, just a heads up.

      You can try installing it and using it if you want to see.
    • Joe Halleck's Avatar
    • Joe Halleck
    • Preeminent Rocketeer
    • Posts: 5480
    • Thanks: 66
    • Never give up!

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • Mine worked that I did when I tested.
      I will give it a look see.
    • Magento - phpBB3 - Kunena - RokBridge Specialist
      No Secure Tab posts unless requested.
      Use the Thank You and Life Preserver Buttons!
      Your signature is also great place for setup details...help us help you!
    • Joe Halleck's Avatar
    • Joe Halleck
    • Preeminent Rocketeer
    • Posts: 5480
    • Thanks: 66
    • Never give up!

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • I see your issue.
      You renamed the mod_login.php to mod_login_jomsocial.php but the .xml file doesn't reflect that. You don't need to rename the mod_login.php file...just do the edits on the mod_login.php file that you need to do and drop the mod_login_jomsocial.php file.
    • Magento - phpBB3 - Kunena - RokBridge Specialist
      No Secure Tab posts unless requested.
      Use the Thank You and Life Preserver Buttons!
      Your signature is also great place for setup details...help us help you!
    • Ben Lee's Avatar
    • Ben Lee
    • Elite Rocketeer
    • Posts: 4193
    • Thanks: 42

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • I had tried it both ways and couldn't get it to work right. I'll give it another try and see if I made a typo the first time around.
      Thanks again for the help!
    • Joe Halleck's Avatar
    • Joe Halleck
    • Preeminent Rocketeer
    • Posts: 5480
    • Thanks: 66
    • Never give up!

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • I removed the file I mentioned above and installed.
      That was successful and module shows up fine on the Module manager.
    • Magento - phpBB3 - Kunena - RokBridge Specialist
      No Secure Tab posts unless requested.
      Use the Thank You and Life Preserver Buttons!
      Your signature is also great place for setup details...help us help you!
    • TheOne's Avatar
    • TheOne
    • Rocketeer
    • Posts: 64
    • Thanks: 0

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • This is a great post, please keep adding, it has made a real difference to my understanding of Joomla and the security issues.
      :D
    • Ben Lee's Avatar
    • Ben Lee
    • Elite Rocketeer
    • Posts: 4193
    • Thanks: 42

    Re: Joomla Version Info, Security Tips and Changed Upgrade Items

    Posted 15 years 3 months ago
    • FTP information and security infos. Some general, some just for Windows...sorry Mac's.

      FTP - File Transfer Protocal
      This is the tool used to get files from your computer over to your server and back again. What most people don't look into is how it actually works and what the best practices are. There are more and more people doing all work from laptops over wireless connections which already makes things incredibly more insecure, so here's one more way to sure up your connection and put one more "lock" on the front door.

      FTP access is probably the door that, if opened, makes you the most vulnerable to an attacker. From here you have access to nearly everything on your server...if it's your own dedicated server, then possible EVERYTHING on your server. Also, anytime you send information, transfer files, back and forth, if they are not encrypted they can be intercepted by means of someone "eavesdropping" on your connection. This eavesdropping can occur through the connection from your computer to the internet, wirelessly over your connection, or the connection your server has to the internet.

      In order to better understand how these connections work and what you can do to tighten yours up, I'm going to be using info and links from an opensource FTP program. The info is universal, but the program is for Windows...sorry Mac users, but please don't stop reading now.


      The program is WinSCP3 and has been a standard issue for Georgia Tech students since I started school there, back in 1997.

      Now for the info:
      Files can be transferred several ways with the three most popular being FTP, SFTP, and SCP.

      FTP is pretty standard and you can find dozens of FTP clients out there. This is a pretty effecient and easy to use system and most of the clients (programs) have an easy to understand user interface. This is also the most popular way suggested for file transfer for shared hosting. When I say that data is sent unencrypted or unsecure here, I mean passwords too!

      SFTP is the next best thing and a pretty darn good one at that. SFTP is really FTP but secured. All information sent is encrypted including passwords and all functions are regularly supported. Your password is used as your authentication here allowing for to use all the typical FTP features, only in an encrypted environment. This is also very popular because it does not require Shell access to operate.

      SCP is by far the most secure way of running a file transfer from your computer to your server. SCP uses encryption just as SFTP does but the difference is in the user authentication. SCP uses keys for authentication ( Very Good Info on Keys Here! ). This is a very similar system to what a SSL Secure Certificate does for a website. SCP does require Shell access though and a little bit of work to get going. Some hosts offer Shell access for free and some charge a small set up fee of $10 or there abouts.

      Protocol Comparison Chart


      Now that you know more about the different ways to connect to your server for file transfers, there are a couple things to discuss on how to use these. If you have a dedicated server, you're probably already set up and know your way around, but if you're on shared hosting, there's a chance that only FTP is working for you.

      Here's a trick that works in most shared hosting environments:
      Most of the time when you sign up for hosting service, you are given initial account info including an IP address for your future website...or sites, then you are told that after propagation you can access your account through an FTP client using your domain name. Instead of using your domain name, use an SFTP setting (in WinSCP3 you can use "SCP with SFTP fallback") and connect with your IP address.
      In WinSCP3 you'll see a familiar lock icon at the bottom right if the connection is secure!


      If you're a Windows user, you can download WinSCP3 here .
      The default settings are pretty well set up for you and only need to be changed if you're familiar with these programs and have certain specific preferences. Otherwise, the defaults are set to allow for automatic detection of whether to use "binary" or "ASCII" transfer modes (a whole other topic), and work pretty much as you'd expect from any other FTP client.

Time to create page: 0.077 seconds