ghanja.be
Contact Us
Webdevelopment


Protect your Joomla 1.5 website from hacker attacks
Geschreven door Webmaster
Articles - Webdevelopment
woensdag, 28 december 2011 02:53

Joomla is one of the most used CMS systems in the world. A standard joomla installation is almost inhackable. Yet a lot of Joomla websites get hacked these days, why is this?

Vulnerable extensions 
Well a lot of websites have 3rd party extensions installed which are not included in the joomla core. Those extensions can be downloaded from the joomla extension directory for example. A lot of these extensions are completely safe but some contain leaks which can be abused by hackers.

You can check if your extensions are safe on:
http://docs.joomla.org/Vulnerable_Extensions_List

Keep your extensions up to date
it’s also important to keep the 3rd party extensions that you use up to date. Sometimes the developers find leaks in their scripts and fix them. You can’t benefit from those updates if you don’t keep your eye on your installed extensions.  

A very handy tool to help you with this is JMonitoring.  The great thing about this component is that it provides two extremely useful functions if you are trying to manage multiple websites. Firstly it lets you keep an eye on the status of your websites but secondly, and more important for me, is that you can have a cross reference of all the joomla versions, components, module and plugins that your websites are running.

Anyone maintaining multiple websites will know how difficult it is to keep up to date with all the latest versions! One place to go to see a full list of all Components, Modules and Plugins is a true time saver.

You can download Jmonitoring here:
http://extensions.joomla.org/extensions/access-a-security/site-security/site-monitoring/9787

Unsafe Webhosting or Joomla settings
Another Reason why Joomla Websites can get hacked is because of unsafe webhosting settings. A lot of people don’t know how to safely configure their web service when working with Joomla websites. A very handy tool to help you optimize your settings for safety is called Guard XT. After installing the component on your website it helps you secure your website and it can do even more.

Keep an eye on your files
GuardXT performs health checks on your Joomla site. The "heart" of GuardXT is a file system check (best scheduled as a cron job), that regulary monitors changes of your files. Additionally various security checks may be performed (e.g. check Joomla configuration, PHP settings etc...).
The results are presented in an easy to use and understand interface and most security issues can be fixed immediately from the interface.

It’s a very useful tool to secure and monitor your website. However this component still contains a lot of bugs to be fixed. But I still can recommend it strongly. The most important functions are working, and I hope all bugs will be fixed in the future.

You can download GuardXT here:
http://extensions.joomla.org/extensions/access-a-security/site-security/site-monitoring/7013

Protect your site against SQL Injections, Remote file Inclusions, Remote Code Executions and XSS attacks.
Hackers use a number of methods to abuse your website.  These are some methods used by hackers: SQL Injections, Remote URL/File Inclusions, Remote Code Executions and XSS Based Attacks.

Jhackguard can protect you against the most of these attacks. JhackGuard is designed by SiteGround to protect Joomla websites from hacking attacks. Just add it to your Joomla and it will be safe against most hacking methods.

You can download Jhackguard here:
http://extensions.joomla.org/extensions/access-a-security/site-security/site-protection/13233

Protect your site against SQL Injections and local files inclusions
Another nice tool to secure your websites is called: Marco's SQL Injection.  This plugin adds a simple but, in most cases, fundamental protection against SQL injection and local files inclusions. It checks data sent to Joomla and intercepts a lot of common exploits, saving your site from hackers.

* Filters requests in POST, GET, REQUEST and blocks SQL injection / LFI attempts.
* Notifies you by e-mail when an alert is generated.
* Protect also from unknown 3rd Party extensions vulnerability.
* White list for safe components (at your risk)
* automatic ip blocking on attack

You can download Marco's SQL Injection here:
http://extensions.joomla.org/extensions/access-a-security/site-security/site-protection/12731

All these tools are to be used with caution. Always make a backup of your website before installing these extensions. Read the documentation of these extensions well before installing them on live sites. And try to test stuff first on a testing website before installing it on existing websites.

After you have installed extensions on to your live website thoroughly check your website for bugs or problems that might occur. These security extensions are not just regular joomla extensions. They need to be handled with care. But if used well they can save you a lot of work and frustration!

Laatst aangepast op woensdag, 28 december 2011 20:34
 
One click registration for joomla
Geschreven door Webmaster
Articles - Webdevelopment
maandag, 17 oktober 2011 15:45

fast-registerCustomizing the regular joomla registration procedure can be a lot of work, and it gets even more complicated when you have a lot of components installed on your Joomla that all need synchronization. Sometimes you wish you could add some extra fields to your registration page in a simple way, without searching dozens of php and html documents in your joomla CMS.

That’s why I made One click registration for joomla. This component is very simple and can be used by everybody. But it’s actually intended for webdevelopers. They can add more input fields in the "registration form" and create additional SQL queries to insert data in the joomla database. This can come in handy when you want to integrate with other joomla extensions.

Therefore I kept the code as simple as possible. People who know a little bit about PHP and SQL queries can easily change this component and use it for whatever they want.

Features:

- Choose exactly which input fields you want to display in the backend parameters.
- All fields have Javascript field validation and an additional safety check in PHP.
- Optional antispam question.
- Redirect after registration
- Email Notification
- Choose usergroup 
- When registering the component checks for double usernames and emailadresses.
- This components also supports Community builder but you need to switch CBmode on in the parameters.

For downloads and documentation go to:
http://www.ghanja.be/en/joomla-extensions.html

For support go to:
http://www.ghanja.be/en/forum.html

 

Laatst aangepast op maandag, 17 oktober 2011 15:53
 
Adding a user to joomla from the frontend
Geschreven door Webmaster
Articles - Webdevelopment
maandag, 10 oktober 2011 19:39

Some people might ask themselves the question: 'why do you want to add a user from the frontend to joomla?’ Well the answer to that question is very simple. The backend of joomla is too complicated for some users. If you are a webdeveloper or if you have a webdesign company you know what I am talking about.

adduserscreenshotClients can get confused when seeing so much data and options. They don’t know which fields to fill in and which fields to leave open. That’s why I decided to make this component. You can configure the component to only show the input fields which are really necessary.

You will never have to explain to your clients again how to add a user from the backend. With this component they can add users from the frontend in a very simple way. They will just see the fields they need to see.

Another nice thing about add user frontend is that you can use it to integrate with other joomla extensions. By default the component can be integrated with Community builder, Jomsocial and K2 without any knowledge of PHP/HTML.

But in addition to that webdevelopers can use it to integrate with any other 3rd party component. Therefore I kept the code as simple as possible. People who know a little bit about PHP and SQL queries can easily change this component and use it for whatever they want.

After I had made the component and published it in the joomla extension directory, I was surprised about the massive amount of positive feedback I was getting. It seemed everybody was waiting for this component to come out. In just a couple of months the component has been installed on thousands of websites worldwide.

I want to say thanks to all members of the joomla community that have helped me to debug the component, to make it more compatible, to migrate to Joomla 1.6 and 1.7 and to give me good ideas for new options in this component.

Features:

- Choose exactly which input fields to display in the parameters
- Autogenerate usernames and/or passwords
- Send notificationemails
- Generate generic email addresses
- Choose between user groups

For downloads and documentation go to:
http://www.ghanja.be/en/joomla-extensions.html

For support go to:
http://www.ghanja.be/en/forum.html

Laatst aangepast op maandag, 14 november 2011 12:35
 
Replacing FPSS with Views Slideshow in Drupal – Tutorial
Geschreven door Webmaster
Articles - Webdevelopment
vrijdag, 03 juli 2009 18:00

I have been using FrontPage SlideShow from JoomlaWorks on a number of sites, and would recommend it as a good CSS/PHP route to building a featured slide section that links to promoted content, articles, blog posts, groups, etc. One problem is that it is not free, the cost is around $35 for a license to use it on 5 to 10 domains. A second problem is highlighted by the example of releasing an installation profile for Drupal. We can release all of the code under GPL for the project except for FPSS. So, I began working on a conversion of our FPSS slides into Views Slideshow views.

The easiest way is to create a new content type, for example “slide,” and disable comments, post information, front page promotion, etc. Decide which size you would like to standardize all the images at, and then create a simple div structure with the image only as content. You can create a “views slideshow” view, sort only the “slide” content type, save it as a block or create a panels views block and embed it on a panels page. Use block or panels permissions to control the display. This is fine if you are using only images or banners made in photoshop that combine text and images, but if you want the to be text editable, viewable by search engines, and style-able by CSS, you will need to build a more complex template for your “slide” content type.

TUTORIAL:

1. Goto admin “content types” – create new content type “slide”
+ disable comments, attachments, and front page promotion in the content type form
+ goto themes “configure” – disable display post information for slides
+ you may want to disable the WYSYWIG editor (if any) on the slide node create form.
+ FCKeditor Global Profile: admin/settings/fckeditor/editg
—> visibility settings, add to exclude: node/add/slide
+ set the permissions – or skip if you only want admin to be creating this content type

2. Create a new slide – use a consistent template for this content type to build Views Slideshow displays
+ you can use html, css, php, etc. to create a custom template
+ we are looking to replace the FPSS template we are using now, and will give the template + css as a sample

Template:
+ paste in slide node create form – edit the links & paths to be consistent with your information

<div id="viewslide">
	<div id="slideleft">
		<div id="slidetop">
			<h2><a href="/articles/second-life">Prototype of
a Sustainable Virtual Reality</a></h2> </div> <div id="slidenote"> <p>Avatar: Elusyve Jewell</p> </div> <div id="slidedesc"> <p>Write desccription here</p> </div> </div> <div id="slideright"><a href="/articles/second-life">
<img width="520" height="206" src="/files/secondlife.jpg" alt="Second Life" />
</a></div> </div>

CSS – paste in style.css or equivalent
+ Note: in the Drupala theme this is in blocks.css

#viewslide {
	width: 698px;
	height: 240px;
	border: 1px solid #B0B0B0;
	margin: 0;
	margin-top: 5px;
	padding: 0;
}

#slideleft {
	float: left;
	width: 154px;
	margin: 0;
	padding: 10px;
	padding-right: 0;
	border-right: 1px solid #B0B0B0;
}

#slidetop {
	width: 134px;
	margin:0;
	margin-left: 5px;
	margin-top: -10px;
	padding:0;
}

#slidetop h2 {
	font-family: Arial,Verdana,sans-serif;
	font-size: 18px;
	line-height: 18px;
	color: #0088BF;
	font-weight:normal;
	letter-spacing:-1px;
	border: none;
	background: #fff;
}
div.block div#slidetop h2 {
	height: auto;
	margin-bottom: 10px;
	margin-top: 16px;
	padding-bottom: 3px;
	padding-left: 0;
	padding-top: 0;
}
#slidetop h2 a {
	font-family: Arial,Verdana,sans-serif;
	font-size: 18px;
	line-height: 18px;
	color: #0088BF;
}
#slidetop h2 a:hover {
	color: #CC3300 !important;
}

#slidenote {
	width: 134px;
	margin: 0;
	margin-top: -10px;
	margin-left: 5px;
	padding: 0;
}

#slidenote p {
	color:#28488C;
	height: 10px;
	font-family: Arial,Verdana,sans-serif;
	font-size: 8pt;
	font-weight: bold;
	line-height: 10px;
	margin: 0;
	padding: 0;
}

#slidedesc {
	width: 134px;
	margin-right: 0;
	margin-left: 5px;
	margin-top: 5px;
	margin-bottom: 12px;
	padding: 0;
}

#slidedesc p {
	font-family: Arial,Verdana,sans-serif;
	font-size: 8pt;
	line-height: 10px;
	color: #333333;
	margin: 0;
	padding: 0;
}

#slideright {
	float: right;
	width: 532px;
	margin: 0;
	padding: 0;
}

#slideright img {
	border: 0;
	margin: 0;
	margin-left: -1px;
	padding: 16px 0;
}

IE7 CSS Fix – paste in ie7.css
+ Note: in the Drupala theme this is in fix-ie2.css

#slidetop {
	margin-top: 10px;
}
#slidedesc {
	margin-bottom: 12px;
}
div.block div#slidetop h2 {
	margin-top: 6px;
}

IE6 CSS Fix – paste in ie6.css
+ Note: in the Drupala theme this is in fix-ie.css

#slidetop {
	margin-top: 10px;
}
div.block div#slidetop h2 {
	margin-top: 6px;
}

Note: this code is cross-browser tested in FF, IE7, IE6, Safari, Opera, & Chrome. It includes theme specific CSS fixes that may not be applicable to all theme code & CSS structures. It is configured to work with the Drupala & SEO-Mix themes for the Drupala installation profile.

3. To recreate the full effect of FPSS, you will need to open the images into an editor like photoshop and add a 20px background color: #CCCCCC (fade 64%) “tab” – use Arial font, change the alignment to vertical, and add a “read more…” text snippet along the bottom corner going up the side of the image.

4. Create a few of these “slide” content type nodes (full html) using the template, then goto views and create a Views Slideshow. Settings: page / block – views slideshow list view – fields: node body, no title, sort by random, and 10 nodes by page (filter to recommended 3 in panel settings), node: published, node-type: “slide”
+ Note: Views Slideshow also has its own configuration panels for fade settings, speed, etc.

5. Embed the Views Slideshow – goto panels – “views panes” and create a views block for the view just created (D5) – embed the block in any panels page or use admin/build/blocks to display in thee regions by path
+ You may want to “Set view URL to panel URL” additionally in the views pane settings

6. Goto “taxonomy” in admin and create a vocabulary for the “slide” content type if you want to create more views and sort the slideshows for particular pages.

Summary:

FPSS comes with 7 or 8 different templates at least and has quite a few features, very few of which are replicated here. We basically needed to change from the version of FPSS we were using to an open source alternative and Views Slideshow is a great module. Drupal designers who spend some time to create templates for Views Slideshow will find them extremely useful in serving multimedia content, or as a replacement for Flash in some situations. I also like and recommend FPSS and will probably continue to use it in some sites.

 

Example:

Views Slideshow: http://drupal.org/project/views_slideshow

FrontPage Slideshow: http://www.frontpageslideshow.net/

Drupal Module: http://drupal.org/project/fpss

Laatst aangepast op maandag, 06 februari 2012 16:13
 
<< Start < Vorige 1 2 Volgende > Einde >>

Pagina 2 van 2
Ghanja Alternatief - Community voor een open wereld!
   
Copyright © 2005 - 2012 Ghanja.be - Sitemap