Joomla! extensions from RSJoomla! - Blog

Since the first part of the article "10 security mistakes to avoid in Joomla!" was a real success, we are really excited about writing another set of mistakes commonly found on customer Joomla! websites .

In the first part we wrote about the importance of updating to the latest version of Joomla!, about files permissions, folders permissions, file uploads and keeping the public folder clean.

Whenever you install Joomla! on a server, you must take some measures in order to secure the installation.

Users often tend to leave the installation as it is, thus making the server vulnerable to hackers. That's why, when you install Joomla! on your server you need to change several configuration settings to avoid some major mistakes that will affect the overall site security.

Let's see the most common mistakes and why they are critical for your system:

Mistake #1. NOT TO download or upgrade to the latest Joomla! Version

New versions of Joomla! are released often with various security fixes and the developers are strongly recommending to upgrade to the latest version of Joomla!

It is important to download Joomla! packages from trusted sources or directly from joomla.org, otherwise you may compromise your system (you may download a modified package that could harm your website ). Periodical backups of the whole site are essential, providing a safety net in case something goes wrong caused by the update or some other unforeseen event. Already there are some specialized components that can create backups (files+database) very easily.

Today, we have released a new revision of RSFirewall!, the security scanner for Joomla!

RSFirewall! is updated constantly with the latest known vulnerabilities and updates for Joomla! therefore the new revision comes with some optimization regarding the memory usage, backend control and hash files:

• RSFirewall! has now hash files for Joomla! 1.5.14
• during checking files and folder permissions , RSFirewall! now uses less memory
• also, we have optimized the malware patterns check to use less memory
• you can not lock yourself out anymore if you forget to select an user when you activate "Backend Access Control" ("Backend Access Controll" allows you to control which backend user can login and what components he can use).
• No more stripping HTML from passwords

If you haven't tried yet the latest security tool for Joomla! , you can discover RSFirewall! on RSJoomla! demo server , download the free demo extension or watch our video tutorials for the latest tips regarding security.

A lot of RSForm! customers tend to move their forms to RSForm!Pro to extend the form functionalities.

Thanks to the newest RSForm!Pro plugin, you can import forms in 3 simple steps. Notice that you need to have installed both Joomla! form managers, RSForm! and RSForm!Pro (at least 1.2.0 Rev. 24 )

First step: download the Joomla! Migration Plugin (access your www.rsjoomla.com account >> Downloads rea).