Joomla! Documentation - Recent changes [en]

Talk:Developing a Model-View-Controller Component - Part 4 - Creating an Administrator Interface

2009-11-20T19:11:17Z

fixing link

←Older revision		Revision as of 19:11, 20 November 2009
Line 32:		Line 32:
	The documentation was great upto chapter 3. Got confused in 4th chapter.		The documentation was great upto chapter 3. Got confused in 4th chapter.

-	Also, this doesn't cover how to create sub menus for a component [~~[Image:~~http://www.vojtechovsky.net/joomla/component/tutorial-joomla-1.5-free-component.png]]	+	Also, this doesn't cover how to create sub menus for a component [http://www.vojtechovsky.net/joomla/component/tutorial-joomla-1.5-free-component.png See example]

	== Suggestions for improvement ==		== Suggestions for improvement ==

JRoute

2009-11-20T19:00:21Z

changing <pre> to <source> to include syntax hilighting

←Older revision		Revision as of 19:00, 20 November 2009
(One intermediate revision not shown.)
Line 4:		Line 4:

	A simple example of using JRoute would be		A simple example of using JRoute would be
-		+	<source lang=php>
-	echo JRoute::_(index.php?option=example&task=view);	+	<?php echo JRoute::_('index.php?option=example&task=view'); ?>
		+	</source>

	If we use this method inside a class and we are trying to link it to current component we do not need to specify option		If we use this method inside a class and we are trying to link it to current component we do not need to specify option

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 13

2009-11-20T13:06:53Z

Indroduction:

←Older revision		Revision as of 13:06, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 12

2009-11-20T13:06:38Z

Indroduction:

←Older revision		Revision as of 13:06, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 11

2009-11-20T13:06:21Z

Indroduction:

←Older revision		Revision as of 13:06, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 10

2009-11-20T13:05:23Z

Indroduction:

←Older revision		Revision as of 13:05, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 09

2009-11-20T13:05:06Z

Indroduction:

←Older revision		Revision as of 13:05, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 08

2009-11-20T13:04:42Z

Indroduction:

←Older revision		Revision as of 13:04, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 07

2009-11-20T13:03:38Z

Basic backend:

←Older revision		Revision as of 13:03, 20 November 2009
(One intermediate revision not shown.)
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

	== Basic backend ==		== Basic backend ==
-	Designing the backend interface leads us to create at least a Model-View-Controller triptych. We have to ~~modified~~ the administrator entry point of our component, the ''admin/helloworld.php'' file	+	Designing the backend interface leads us to create at least a Model-View-Controller triptych. We have to modify the administrator entry point of our component, the ''admin/helloworld.php'' file

	<span id="admin/helloworld.php">		<span id="admin/helloworld.php">

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 06

2009-11-20T13:03:01Z

Indroduction:

←Older revision		Revision as of 13:03, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 05

2009-11-20T13:02:43Z

Indroduction:

←Older revision		Revision as of 13:02, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 04

2009-11-20T13:02:27Z

Indroduction:

←Older revision		Revision as of 13:02, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 03

2009-11-20T13:02:12Z

Indroduction:

←Older revision		Revision as of 13:02, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Part 02

2009-11-20T12:41:17Z

Indroduction:

←Older revision		Revision as of 12:41, 20 November 2009
Line 5:		Line 5:
	{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}		{{Chunk:Developing a Model-View-Controller (MVC) Component for Joomla!1.6 - Contents}}

-	== ~~Indroduction~~ ==	+	== Introduction ==
	This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.		This tutorial is part of the [[Developing a Model-View-Controller (MVC) Component for Joomla!1.6]] tutorial. You are encouraged to read the previous parts of the tutorial before reading this.

Adding sortable columns to a table in a component

2009-11-20T03:14:07Z

Fixed some of the nastiest problems; it still doesn't work because you don't supply a reverseDir function.

←Older revision		Revision as of 03:14, 20 November 2009
Line 24:		Line 24:

	<input type="hidden" name="filter_order" value="<?php echo $this->lists['order']; ?>" />		<input type="hidden" name="filter_order" value="<?php echo $this->lists['order']; ?>" />
-	<input type="hidden" name="filter_order_Dir" value="" />	+	<input type="hidden" name="filter_order_Dir" value="<?php echo $this->lists['order_Dir']; ?>" />
	</form>		</form>
	</source>		</source>
Line 97:		Line 97:

	// Table ordering.		// Table ordering.
-	$lists['order_Dir'] = $state->get( '~~filter_order_dir~~' );	+	$lists['order_Dir'] = $state->get( 'filter_order_Dir' );
	$lists['order'] = $state->get( 'filter_order' );		$lists['order'] = $state->get( 'filter_order' );

Vulnerable Extensions List

2009-11-19T23:06:23Z

Items will be removed after a suitable period and not on resolution.:

←Older revision		Revision as of 23:06, 19 November 2009
(One intermediate revision not shown.)
Line 349:		Line 349:
	\| ''' Not Known'''		\| ''' Not Known'''
	\|-		\|-
-	\|'''Kunena 1.5.7'''	+	\|'''Kunena 1.5.x'''
	\|Summary: This is an important security release and users are urged to update immediately. Five security issues and an Internet Explorer 8 table bug have been resolved in this release. This release also contains many other important bug fixes. Added 18 November 2009		\|Summary: This is an important security release and users are urged to update immediately. Five security issues and an Internet Explorer 8 table bug have been resolved in this release. This release also contains many other important bug fixes. Added 18 November 2009
	\|[http://www.kunena.com/blog/19-developer-blog/51-kunena-157-security-release-now-available Advisory]		\|[http://www.kunena.com/blog/19-developer-blog/51-kunena-157-security-release-now-available Advisory]
Line 373:		Line 373:
	\| [http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html jeffchannell.com]		\| [http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html jeffchannell.com]
	\|''' Not Known'''		\|''' Not Known'''
		+	\|-
		+	\|'''iF Portfolio Nexus'''
		+	\|Summary: The '''iF Portfolio Nexus component for Joomla!''' is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements using the id parameter, which could allow the attacker to view, add, modify or delete information in the back-end database. Nov 18, 2009
		+	\|[http://secunia.com/advisories/37408/ secunia.com 37408/]
		+	\|[http://www.inertialfate.za.net/help/forums/topic?id=10&p=3#p172 iF Portfolio Nexus v1.1.1 released]
		+
		+	\|-
		+	\|'''JoomClip'''
		+	\|Summary: The '''JoomClip component for Joomla!''' is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the index.php script using the cat parameter, which could allow the attacker to view, add, modify or delete information in the back-end database. Nov 18, 2009
		+	\|[http://secunia.com/advisories/37400/ secunia.com 37400/]
		+	\|''' Not Known'''
		+	\|-
		+	\|
		+	\|
		+	\|
		+	\|
		+	\|-
		+	\|
		+	\|
		+	\|
		+	\|
	\|-		\|-
	\|		\|

Template:Most popular pages

2009-11-19T22:54:50Z

Updated for today's statistics

User:Moneyads4u

2009-11-19T22:49:50Z

deleted "[[User:Moneyads4u]]" Spam.

New page

User:Moneyads4u

2009-11-19T22:49:24Z

blocked [[Moneyads4u (Talk | contribs)]] with an expiry time of infinite (account creation disabled, e-mail blocked) Spamming links to external sites

New page

Security Checklist 7

2009-11-19T22:23:49Z

←Older revision		Revision as of 22:23, 19 November 2009
(5 intermediate revisions not shown.)
Line 1:		Line 1:
-	{{~~review}}~~	+	{{RightTOC}}
-	~~{{stub~~}}	+
	== You have been hacked ==		== You have been hacked ==

Line 30:		Line 29:
	<pre> find \public_html -mtime -1 </pre>		<pre> find \public_html -mtime -1 </pre>
	''Please note the location of your files may be public_html or httpdocs or similar. ''		''Please note the location of your files may be public_html or httpdocs or similar. ''
		+
		+	To protect directories that seemed to need 777 permissions to run or as a default in your images/media folder try this code within a .htaccess file within the open folder.
		+	<pre># secure directory by disabling script execution
		+	AddHandler cgi-script .php .pl .py .jsp .asp .htm .shtml .sh .cgi
		+	Options -ExecCGI</pre>
		+	* Make sure that is in a htaccess file in a directory that will not run any scripts or remove the extensions as required

	Do check with your hosting provider to see if they have purposely secured the server your site is on; and that they '''or you''' perform regular (weekly) security updates to keep the server up to date.		Do check with your hosting provider to see if they have purposely secured the server your site is on; and that they '''or you''' perform regular (weekly) security updates to keep the server up to date.
Line 65:		Line 70:

	Download and Review raw apache access and error logs.		Download and Review raw apache access and error logs.
		+
		+	Deny any IP's that you got to the IP ban on your site but it may belong to a proxy site.

	'''Was your site hacked in the past''' and proper site sanitation not used to remove actual		'''Was your site hacked in the past''' and proper site sanitation not used to remove actual
Line 88:		Line 95:
	[http://forum.joomla.org/memberlist.php?mode=viewprofile&u=322239 JeffChannell]		[http://forum.joomla.org/memberlist.php?mode=viewprofile&u=322239 JeffChannell]
	[http://forum.joomla.org/memberlist.php?mode=viewprofile&u=339316 dynamicnet]		[http://forum.joomla.org/memberlist.php?mode=viewprofile&u=339316 dynamicnet]
		+
		+
		+
		+	== Security Checklists Table of Contents==
		+	# [[Security Checklist 1 - Getting Started\|Getting Started]]
		+	# [[Security Checklist 2 - Hosting and Server Setup\|Hosting and Server Setup]]
		+	# [[Security Checklist 3 - Testing and Development\|Testing and Development]]
		+	# [[Security Checklist 4 - Joomla Setup\|Joomla Setup]]
		+	# [[Security Checklist 5 - Site Administration\|Site Administration]]
		+	# [[Security Checklist 6 - Site Recovery\|Site Recovery]]
		+
		+
		+
		+	[[Category:FAQ]]
		+	[[Category:Security]]
		+	[[Category:Security_FAQ]]
		+	<!-- KEEP THIS AT THE END OF THE PAGE -->
		+	[[Category:Security Checklist]]
		+
		+	[[Category:Security Checklist]]

Vulnerable Extensions List

2009-11-19T17:16:07Z

Items will be removed after a suitable period and not on resolution.:

←Older revision		Revision as of 17:16, 19 November 2009
(2 intermediate revisions not shown.)
Line 283:		Line 283:
	Please remove JUMI2.0.5 from the download page immediately to stop people falling victim to this.		Please remove JUMI2.0.5 from the download page immediately to stop people falling victim to this.
	It will be simple enough to remove the compromised code from this download, but you need to do		It will be simple enough to remove the compromised code from this download, but you need to do
-	a full security audit on your site as well as you have been compromised.	+	a full security audit on your site as well as you have been compromised. Added November 2009
	\| [http://code.google.com/p/jumi/updates/list Report]		\| [http://code.google.com/p/jumi/updates/list Report]
	\| [http://code.google.com/p/jumi/updates/list Jumi Update]		\| [http://code.google.com/p/jumi/updates/list Jumi Update]
	\|-		\|-
	\| '''com_photoblog'''		\| '''com_photoblog'''
-	\| Input Validation Error	+	\| Input Validation Error Added November 2009
	\| [http://www.securityfocus.com/bid/36809/ 36809]		\| [http://www.securityfocus.com/bid/36809/ 36809]
	\| [http://webguerilla.net/downloads/3-components-for-joomla-1 webguerilla Photoblog alpha 3b]		\| [http://webguerilla.net/downloads/3-components-for-joomla-1 webguerilla Photoblog alpha 3b]
Line 295:		Line 295:
	\| Summary: SQL injection vulnerability in the JShop ('''com_jshop''') component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a product action to index.php.		\| Summary: SQL injection vulnerability in the JShop ('''com_jshop''') component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a product action to index.php.
	Published: 11/02/2009		Published: 11/02/2009
-	CVSS Severity: 7.5 (HIGH)	+	CVSS Severity: 7.5 '''(HIGH)'''
	\| [[NIST:CVE-2009-3835\|CVE-2009-3835]]		\| [[NIST:CVE-2009-3835\|CVE-2009-3835]]
	\| '''Not Known'''		\| '''Not Known'''
	\|-		\|-
	\| '''BF Survey Pro'''		\| '''BF Survey Pro'''
-	\| Summary: SQL injection vulnerability in the '''BF Survey Pro''' v1.2.5 or lower (fixed in version 1.2.6). '''BF Survey Basic v1.0''' (fixed in version 1.1). '''BF Quiz v1.1.1''' (fixed in version 1.2 or greater)	+	\| Summary: SQL injection vulnerability in the '''BF Survey Pro''' v1.2.5 or lower (fixed in version 1.2.6). '''BF Survey Basic v1.0''' (fixed in version 1.1). '''BF Quiz v1.1.1''' (fixed in version 1.2 or greater) Added November 2009
	\| [http://www.tamlyncreative.com.au/software/forum/index.php?topic=357.0 tamlyncreative.com.au]		\| [http://www.tamlyncreative.com.au/software/forum/index.php?topic=357.0 tamlyncreative.com.au]
	\| [http://www.tamlyncreative.com.au/software/forum/index.php?topic=357.0 update]		\| [http://www.tamlyncreative.com.au/software/forum/index.php?topic=357.0 update]
	\|-		\|-
	\| '''Joo!BB 0.9.1 '''		\| '''Joo!BB 0.9.1 '''
-	\| Summary: Persistent XSS/MySQL Injection vulnerabilities in Joo!BB 0.9.1	+	\| Summary: Persistent XSS/MySQL Injection vulnerabilities in Joo!BB 0.9.1 Added November 2009
	\| [http://www.joobb.org/community/board/topic/700-MultipleXSSSQLInjectionVulnerabilities.html joob.org]		\| [http://www.joobb.org/community/board/topic/700-MultipleXSSSQLInjectionVulnerabilities.html joob.org]
	\| [http://www.joobb.org/downloads/components.html update]		\| [http://www.joobb.org/downloads/components.html update]
	\|-		\|-
	\| '''sh404sef '''		\| '''sh404sef '''
-	\| Summary: sh404sef URI XSS Vulnerability	+	\| Summary: sh404sef URI XSS Vulnerability Added November 2009
	\| [http://jeffchannell.com/Joomla/sh404sef-uri-xss-vulnerability.html jeffchannell.com]		\| [http://jeffchannell.com/Joomla/sh404sef-uri-xss-vulnerability.html jeffchannell.com]
	\| [http://extensions.siliana.com/en/2009060876/sh404SEF-and-url-rewriting/Interim-release-of-sh404sef-for-Joomla-1.5.x.html update]		\| [http://extensions.siliana.com/en/2009060876/sh404SEF-and-url-rewriting/Interim-release-of-sh404sef-for-Joomla-1.5.x.html update]
	\|-		\|-
	\| '''AWD Wall 1.5'''		\| '''AWD Wall 1.5'''
-	\| Summary '''AWD Wall 1.5''' Blind SQL Injection Vulnerability.The Joomla component AWD Wall 1.5 suffers from an SQL Injection vulnerability in its handling of the 'cbuser' parameter.	+	\| Summary '''AWD Wall 1.5''' Blind SQL Injection Vulnerability.The Joomla component AWD Wall 1.5 suffers from an SQL Injection vulnerability in its handling of the 'cbuser' parameter.Added November 2009
	\| [http://jeffchannell.com/Joomla/awd-wall-15-blind-sql-injection-vulnerability.html Notice]		\| [http://jeffchannell.com/Joomla/awd-wall-15-blind-sql-injection-vulnerability.html Notice]
	\|''' Not Known'''		\|''' Not Known'''
	\|-		\|-
	\| '''EasyBook 2.0.0rc4'''		\| '''EasyBook 2.0.0rc4'''
-	\| Summary: The Joomla component '''EasyBook 2.0.0rc4''' suffers from multiple persistent XSS vulnerabilities. One seems fairly critical, while the others would take some incredible creativity to actively exploit.	+	\| Summary: The Joomla component '''EasyBook 2.0.0rc4''' suffers from multiple persistent XSS vulnerabilities. One seems fairly critical, while the others would take some incredible creativity to actively exploit. Added November 2009
	\| [http://jeffchannell.com/Joomla/easybook-200rc4-multiple-xss-vulnerabilities.html Alert]		\| [http://jeffchannell.com/Joomla/easybook-200rc4-multiple-xss-vulnerabilities.html Alert]
	\| ''' Not Known'''		\| ''' Not Known'''
	\|-		\|-
	\| '''F!BB 1.5.96'''		\| '''F!BB 1.5.96'''
-	\| Summary: The Joomla component '''F!BB 1.5.96 RC''' suffers from multiple persistent XSS vulnerabilities, as well SQL Injection in its user search feature.	+	\| Summary: The Joomla component '''F!BB 1.5.96 RC''' suffers from multiple persistent XSS vulnerabilities, as well SQL Injection in its user search feature. Added November 2009
	\| [http://jeffchannell.com/Joomla/fbb-1596-rc-multiple-vulnerabilities.html Alert]		\| [http://jeffchannell.com/Joomla/fbb-1596-rc-multiple-vulnerabilities.html Alert]
-	\|	+	\| ''' Not Known'''
	\|-		\|-
	\| '''Testimonial Ku 2.0 Admin Panel'''		\| '''Testimonial Ku 2.0 Admin Panel'''
-	\| Summary: The Joomla component '''Testimonial Ku 2.0''' is vulnerable to persistent XSS in the administrator panel. A malicious user can submit a testimonial containing <script> tags with absolutely no quotes and inject that script into the administrator panel through any of the available inputs except "email".	+	\| Summary: The Joomla component '''Testimonial Ku 2.0''' is vulnerable to persistent XSS in the administrator panel. A malicious user can submit a testimonial containing <script> tags with absolutely no quotes and inject that script into the administrator panel through any of the available inputs except "email". Added November 2009
	\| [http://jeffchannell.com/Joomla/testimonial-ku-20-admin-panel-persistent-xss.html Alert]		\| [http://jeffchannell.com/Joomla/testimonial-ku-20-admin-panel-persistent-xss.html Alert]
	\| ''' Not Known'''		\| ''' Not Known'''
	\|-		\|-
	\| '''MS Comment 0.8.0b'''		\| '''MS Comment 0.8.0b'''
-	\| Summary '''MS Comment 0.8.0b for Joomla''', a commenting plugin, suffers from an multiple vulnerabilities.	+	\| Summary '''MS Comment 0.8.0b for Joomla''', a commenting plugin, suffers from an multiple vulnerabilities. Added November 2009
	\| [http://jeffchannell.com/Joomla/ms-comment-080b-multiple-vulnerabilities.html Alert]		\| [http://jeffchannell.com/Joomla/ms-comment-080b-multiple-vulnerabilities.html Alert]
	\| ''' Not Known'''		\| ''' Not Known'''
	\|-		\|-
	\| '''!JoomlaComment 4.0 beta1'''		\| '''!JoomlaComment 4.0 beta1'''
-	\| Summary: '''!JoomlaComment 4.0 beta1''', a commenting plugin, suffers from multiple XSS vulnerabilities.	+	\| Summary: '''!JoomlaComment 4.0 beta1''', a commenting plugin, suffers from multiple XSS vulnerabilities. Added November 2009
	\| [http://jeffchannell.com/Joomla/joomlacomment-40-beta1-multiple-xss-vulnerabilities.html Alert]		\| [http://jeffchannell.com/Joomla/joomlacomment-40-beta1-multiple-xss-vulnerabilities.html Alert]
	\| ''' Not Known'''		\| ''' Not Known'''
Line 366:		Line 366:
	\|'''NinjaMonials'''		\|'''NinjaMonials'''
	\| Summary: SQL injection vulnerability in the '''NinjaMonials (com_ninjacentral)''' component 1.1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the testimID parameter in a display action to index.php. Added 18 November 2009		\| Summary: SQL injection vulnerability in the '''NinjaMonials (com_ninjacentral)''' component 1.1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the testimID parameter in a display action to index.php. Added 18 November 2009
-	\| [[NIST:~~CVEe~~-2009-3964 \| CVE-2009-3964]]	+	\| [[NIST:CVE-2009-3964 \| CVE-2009-3964]]
	\|''' Not Known'''		\|''' Not Known'''
	\|-		\|-
-	\|	+	\|'''webee 1.1.1 &1.2'''
-	\|	+	\|Summary: '''webee 1.1.1,''' a Joomla commenting plugin, suffers from multiple vulnerabilities. '''webee has been updated to 1.2''' as of 12 November 2009 and''' still suffers''' from SQL Injection. XSS was not tested in 1.2. Added 19 November 2009
-	\|	+	\| [http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html jeffchannell.com]
-	\|	+	\|''' Not Known'''
	\|-		\|-
	\|		\|

Tutorial:Joomla Beginning Developer Course

2009-11-19T16:10:43Z

Integrated Developer Environment:

←Older revision		Revision as of 16:10, 19 November 2009
Line 39:		Line 39:

	==== Integrated Developer Environment ====		==== Integrated Developer Environment ====
-	An [[http://en.wikipedia.org/wiki/Integrated_development_environment\|Integrated Developer Environment (IDE)]] is a collection of tools designed to help a developer. Typically, an IDE includes a source code editor, a compiler and/or interpreter, a debugger and a version control system.	+	An [[http://en.wikipedia.org/wiki/Integrated_development_environment \|Integrated Developer Environment (IDE)]] is a collection of tools designed to help a developer. Typically, an IDE includes a source code editor, a compiler and/or interpreter, a debugger and a version control system.

	Select the appropriate choice for your operating system:		Select the appropriate choice for your operating system:

What is module chrome?

2009-11-19T15:18:46Z

←Older revision		Revision as of 15:18, 19 November 2009
Line 10:		Line 10:

	The standard Joomla! 1.5 package includes six default Module chrome styles. However, the flexibility of the template system means that you are not limited to these styles - it's very easy to create as many new styles as you want!		The standard Joomla! 1.5 package includes six default Module chrome styles. However, the flexibility of the template system means that you are not limited to these styles - it's very easy to create as many new styles as you want!
		+
		+	Note that this example includes class additions because the examples are taken using mod_mainmenu. The suffix "_menu" to the div class and the "menu" class on the ul tag are not present with other modules.

	{\| style="width:100%" class="wikitable"		{\| style="width:100%" class="wikitable"

User:Cdemko

2009-11-19T10:16:04Z

←Older revision		Revision as of 10:16, 19 November 2009
Line 1:		Line 1:
-	I'm Christophe Demko and I'm an ~~assitant~~ professor at [http://www.univ-larochelle.fr the university of La Rochelle (France)]. Actually, I'm also the [http://informatique.univ-lr.fr computer science department] head of my university.	+	I'm Christophe Demko and I'm an assistant professor at [http://www.univ-larochelle.fr the university of La Rochelle (France)]. Actually, I'm also the [http://informatique.univ-lr.fr computer science department] head of my university.

	My personal site: [http://www.chdemko.com http://www.chdemko.com]		My personal site: [http://www.chdemko.com http://www.chdemko.com]

Creating a language definition file

2009-11-19T09:58:40Z

←Older revision		Revision as of 09:58, 19 November 2009
Line 17:		Line 17:
	----		----
	<references/>[[Category:Languages]]</noinclude>		<references/>[[Category:Languages]]</noinclude>
		+	More information about the discussed changed for Joomla 1.6 can be found on the page [[1.6: Specification of language files]]

1.6: Specification of language files

2009-11-19T09:08:11Z

←Older revision		Revision as of 09:08, 19 November 2009
(One intermediate revision not shown.)
Line 1:		Line 1:
-	This page explains the ~~specification~~ of the language ~~files~~ in 1.6	+	This page explains the changes of the language file specification from version 1.5 to 1.6. As this is currently under development it is not merged back to the central specification page.
		+
		+	The 1.5 specification is described in [[Creating a language definition file]].
		+
		+	==Overview of changes in Joomla 1.6==
		+	# The KEY is now defined to be
		+	## without any whitespace. All whitespace shall be converted into a underscore '_'
		+	## All KEY's in the frontend shall include a prefix of the extension
		+
		+	==Related discussion threads in the development mailing list==
		+	* [http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/af76ac17eecbfe2d/fbfbbd15c5c60d71?lnk=gst&q=language#fbfbbd15c5c60d71\|Another language question concerning 1.6 Optionen]
		+	* [http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/213f8e6a885e42fe/310bb187a26d5965?lnk=gst&q=language#310bb187a26d5965\|Here is a proposal from the com_localise team - Comments?]
		+	* [http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/8ef8d089546b7734/ffea9ba8a60a5927?lnk=gst&q=language#ffea9ba8a60a5927\|Hardcoded punctuation creates issues in language files Optionen]
		+	* [http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/446ccaa42baafc66/af422d0b2de81c2f?lnk=gst&q=language#af422d0b2de81c2f\|Language String Namespaces]


	[[Category:Dev_cookie_jar]]		[[Category:Dev_cookie_jar]]
		+	[[Category: Languages]]

Joomla! 1.6 UTF 8 URL

2009-11-19T08:47:58Z

New page

== Initial information ==
* [http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/1a8e1b122a5c2f03?hl=en-GB|joomla dev cms thread]

[[Category:Dev_cookie_jar]]
[[Category:Development Working Group]]

Category:Dev cookie jar

2009-11-19T08:42:31Z

Joomla! CMS Development:

←Older revision		Revision as of 08:42, 19 November 2009
Line 10:		Line 10:


-	~~== Joomla! CMS Development ==~~
-	* [[UTF8 slugs & domain names]] ([http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/1a8e1b122a5c2f03?hl=en-GB\|joomla dev cms thread])

	[[Category:Development Working Group]]		[[Category:Development Working Group]]

1.6: Specification of language files

2009-11-19T08:39:12Z

New page: This page explains the specification of the language files in 1.6 Category:Dev_cookie_jar

New page

This page explains the specification of the language files in 1.6

[[Category:Dev_cookie_jar]]

Developers

2009-11-19T08:33:35Z

Localisation:

←Older revision		Revision as of 08:33, 19 November 2009
Line 92:		Line 92:
	* [[Adding multi-language support]]		* [[Adding multi-language support]]
	* [[Adding Joomfish functionality to custom components]]		* [[Adding Joomfish functionality to custom components]]
		+	* [[1.6: Specification of language files]]

	=== Miscellaneous ===		=== Miscellaneous ===

Security Checklist 7

2009-11-19T04:30:29Z

←Older revision		Revision as of 04:30, 19 November 2009
(One intermediate revision not shown.)
Line 1:		Line 1:
-	{{~~underconstruction~~}}	+	{{review}}
-		+	{{stub}}
	== You have been hacked ==		== You have been hacked ==

Vulnerable Extensions List

2009-11-19T04:28:38Z

Items will be removed after a suitable period and not on resolution.:

←Older revision		Revision as of 04:28, 19 November 2009
(2 intermediate revisions not shown.)
Line 345:		Line 345:
	\|-		\|-
	\| '''WebAmoeba Ticket System 3.0.0'''		\| '''WebAmoeba Ticket System 3.0.0'''
-	\| Summary: '''WebAmoeba Ticket System 3.0.0''', a Joomla help desk component. The vulnerability is with the BBCode library used to parse BBCode tags, as it does not strip javascript: urls from [url] tags.	+	\| Summary: '''WebAmoeba Ticket System 3.0.0''', a Joomla help desk component. The vulnerability is with the BBCode library used to parse BBCode tags, as it does not strip javascript: urls from [url] tags. Added November 2009
	\| [http://jeffchannell.com/Joomla/webamoeba-ticket-system-300-bbcode-xss.html Alert]		\| [http://jeffchannell.com/Joomla/webamoeba-ticket-system-300-bbcode-xss.html Alert]
	\| ''' Not Known'''		\| ''' Not Known'''
	\|-		\|-
	\|'''Kunena 1.5.7'''		\|'''Kunena 1.5.7'''
-	\|Summary: This is an important security release and users are urged to update immediately. Five security issues and an Internet Explorer 8 table bug have been resolved in this release. This release also contains many other important bug fixes.	+	\|Summary: This is an important security release and users are urged to update immediately. Five security issues and an Internet Explorer 8 table bug have been resolved in this release. This release also contains many other important bug fixes. Added 18 November 2009
	\|[http://www.kunena.com/blog/19-developer-blog/51-kunena-157-security-release-now-available Advisory]		\|[http://www.kunena.com/blog/19-developer-blog/51-kunena-157-security-release-now-available Advisory]
	\|[http://docs.kunena.com/index.php/Kunena_1.5.7_Read_Me Latest Version]		\|[http://docs.kunena.com/index.php/Kunena_1.5.7_Read_Me Latest Version]
		+	\|-
		+	\| '''com_siirler'''
		+	\| Summary: SQL injection vulnerability in the '''Q-Proje Siirler Bileseni (com_siirler)''' component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php. Added 18 November 2009
		+	\| [[NIST:CVE-2009-3972 \| CVE-2009-3972]]
		+	\| ''' Not Known'''
		+	\|-
		+	\| '''jTips (com_jtips)'''
		+	\|SUmmary:SQL injection vulnerability in the '''jTips (com_jtips)''' component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the season parameter in a ladder action to index.php. Added 18 November 2009
		+	\| [[NIST:CVE-2009-3971 \|CVE-2009-3971]]
		+	\|''' Not Known'''
		+	\|-
		+	\|'''NinjaMonials'''
		+	\| Summary: SQL injection vulnerability in the '''NinjaMonials (com_ninjacentral)''' component 1.1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the testimID parameter in a display action to index.php. Added 18 November 2009
		+	\| [[NIST:CVEe-2009-3964 \| CVE-2009-3964]]
		+	\|''' Not Known'''
		+	\|-
		+	\|
		+	\|
		+	\|
		+	\|
	\|-		\|-
	\|		\|

How to use the JToolBar class in the frontend

2009-11-18T23:33:01Z

Added categorisation. Fixed typo.

←Older revision		Revision as of 23:33, 18 November 2009
Line 199:		Line 199:
	(if you are using the toolbar on a component that other people will be installing it would be better to use:		(if you are using the toolbar on a component that other people will be installing it would be better to use:
	<source lang="php">		<source lang="php">
-	$mainframe->addCustomHeadTag ('<link rel="stylesheet" href="'.$this->baseurl.'/components/com_~~yourcomponet~~/filename.css" type="text/css" media="screen" />');	+	$mainframe->addCustomHeadTag ('<link rel="stylesheet" href="'.$this->baseurl.'/components/com_yourcomponent/filename.css" type="text/css" media="screen" />');

	</source>		</source>
Line 208:		Line 208:
	</source>		</source>
	And that's it. your toolbar should now render exactly as it does in the backend. This is a very simple toolbar helper. You could equally copy the JToolbarHelper class exactly in to your toolbar helper and use the functions in the same way as the backend. This would allow you to reuse your jtoolbar helper in multiple components.		And that's it. your toolbar should now render exactly as it does in the backend. This is a very simple toolbar helper. You could equally copy the JToolbarHelper class exactly in to your toolbar helper and use the functions in the same way as the backend. This would allow you to reuse your jtoolbar helper in multiple components.
		+	<noinclude>[[Category:Development]]</noinclude>

Template:Most popular pages

2009-11-18T23:26:48Z

Updated for today's statistics