book

Professional Joomla!

Name: Professional Joomla!
Author: Dan Rahmel
ISBN: 9780470133941

by Dan Rahmel

October 2007

Beginner to intermediate

479 pages

12h 2m

English

Wrox

Read now

Unlock full access

Copyright
Credits
About the Author
Acknowledgments
Introduction
Who This Book Is ForWhat This Book CoversHow This Book Is StructuredWhat You Need to Use This BookConventionsSource CodeErratap2p.wrox.com
1. Introducing Joomla!
1.1. Getting to Know Joomla1.2. Flexibility Makes Joomla the CMS of Choice1.3. Who Needs This Book1.3.1. Web Masters1.3.2. Web Designers1.3.3. Web Developers1.4. Joomla Version 1.0 and Mambo Users1.5. Summary
2. The Finer Points of Installation and Configuration
2.1. Four Servers in the Joomla System2.1.1. Installation Choices2.1.1.1. Local Installation or Remote Deployment2.1.1.2. Choice of Platform: Windows, Linux, or MacOS2.1.1.3. Installation of Individual Servers or Combined Installation2.1.1.4. Choice of Web Server: Apache or Microsoft Internet Information Server (IIS)2.1.2. Steps in the Joomla Installation Process2.1.3. Configuring Apache Web Server2.1.3.1. Configuration Files2.1.3.1.1. DirectoryIndex Directive2.1.3.1.2. LogLevel Directive2.1.3.1.3. ServerRoot Directive2.1.3.1.4. Other httpd.conf Directives2.1.3.2. Log Files2.1.3.3. Modules and Extensions Folders2.1.3.4. htdocs Folder2.1.4. Configuring PHP2.1.4.1. PHP Directives2.1.4.1.1. Modifying PHP Error Reporting2.1.4.1.2. Important PHP Settings2.1.5. Configuring MySQL2.1.5.1. MySQL Setup2.1.5.1.1. Activating the Path Parameter on Windows2.1.5.1.2. Database Connectivity with MySQL 52.1.5.1.3. Strict Mode and Data Insert Problems2.1.5.2. MySQL Administration2.1.5.3. Resetting a MySQL User Password2.1.6. Configuring Joomla2.1.6.1. configuration.php2.1.6.2. Resetting a Joomla User Password2.2. Staging Servers and Deployment Servers2.2.1. Staging Server Setup2.2.2. Deployment Server Setup2.2.2.1. Default Accounts and Passwords2.3. Summary
3. Developing Custom Templates
3.1. Template Structure3.1.1. Files and Folders3.1.2. Template Logic: The Index File3.1.3. Joomla Execution Statements3.1.3.1.3.1.3.1.1. Using JDocument Objects3.1.3.1.2. Using the $this Object Variable3.1.3.1.3. Accessing Template Parameters3.1.3.1.4. A Primitive index.php3.1.4. Template Presentation: The CSS File3.1.4.1. In-line and Block Element Types3.1.4.2. Default Styles3.1.4.3. Incorporating Images in the CSS3.1.5. Template Metadata: The TemplateDetails File3.1.6. Template Variables: The Parameters File3.1.7. Template Graphics: The Images Folder3.1.8. Template Thumbnail3.2. Creating a Three-Column Template3.2.1. Create the Template Folder and Rough Details3.2.2. Creating the index.php3.2.2.1. Create Rounded Corners Stylesheet3.2.2.2. Creating the Rounded Corner Graphics3.2.2.3. Creating a Banner Graphic3.2.2.4. Changing the Module3.2.2.5. Custom CSS for Components3.3. Creating the Details File for Distribution3.4. Advanced Template Techniques3.4.1. Using a Template Family with CSS3.4.2. favicon.ico3.4.3. Core Output Override Templates3.4.4. Creating a Cell Phone-Centric CSS3.4.4.1. Defining the Handheld CSS3.4.5. Converting a Mambo or Joomla 1.0 Template3.5. Summary
4. Adding and Modifying Available Extensions
4.1. Extensions Directory4.2. Site Features and Management4.2.1. Enabling a Different WYSIWYG Editor4.2.2. Add a Custom Style to TinyMCE4.2.3. Adding File Management and FTP Support4.2.4. Adding a Sitemap4.2.5. Community Builder4.2.5.1. Structure of Community Builder4.2.5.2. CB Plug-Ins4.2.5.3. User Avatar4.2.5.4. Download and Installation4.3. Organizations and E-commerce4.3.1. Subscription Manager4.3.2. MicroShop PayPal Shopping Cart4.3.3. Project Fork Project Manager4.3.4. Timesheets Extension4.3.5. Adding an Auction Framework to Your Site4.4. Site Content4.4.1. Podcasting through Joomla4.4.2. Providing a Picture Gallery4.5. Site Interactivity4.5.1. Adding Comments for Posted Articles4.5.2. Guestbook4.5.3. Chat Rooms through Joomla4.5.4. Setting Up a Wiki System in Joomla4.5.5. eWriting4.5.6. Implementing Classified Ads4.5.7. Adding Sports Tracking4.5.8. Adding Casino Games4.5.9. Handling a Quiz4.6. Summary
5. Developing Simple Extensions: Modules
5.1. Creating a Hello World Module5.2. Creating a Holiday Greetings Module5.2.1. Creating the XML Descriptor File5.2.2. Creating the Module Code File5.2.3. Creating the Table and Storing Sample Data5.2.4. Configuring the Module5.3. Creating a Contact Us Module5.4. Summary

6. Advanced Extensions: Components
6.1. Setting Up a Development System6.2. Adopting Source Code Control with SVN6.2.1. Installing SVN6.2.2. Creating a SVN Repository6.2.3. Using Eclipse6.2.3.1. Download EasyEclipse and Installation6.2.3.2. Configuring Eclipse6.2.3.3. Workbench Basics6.3. Creating a Guestbook Component6.3.1. Protecting against Guestbook Spamming6.3.2. The Front-End Guestbook Component6.3.2.1. Creating the Front-End Component6.3.3. The Administrator Guestbook Editor Component6.3.4. The XML Descriptor6.3.5. Adding the Component to the SVN Repository6.3.6. Archiving the Component6.3.7. Installing the Guestbook Component6.4. Using phpDocumentor6.4.1. Installation6.4.2. Adding DocBlocks to Source Code6.5. Summary
7. Joomla! and Ajax
7.1. Structure of Ajax7.2. Simple Ajax Component7.2.1. Creating the Component7.2.2. Creating the Ajax Web Page7.3. Creating a Server-Query Component7.3.1. Creating the Component7.3.1.1. Accepting the Query Request7.3.1.2. Querying the MySQL Database7.3.1.3. Returning XML Output7.3.2. Creating the Ajax Module7.3.2.1. Creating the Module Folder and XML File7.3.2.2. Creating mod_articleajax7.3.2.3. Pop-Up Window7.3.2.4. Requestor Functions7.3.2.5. Finding Articles in the Joomla Database7.4. Ajax Disadvantages7.4.1. Ajax SEO Invisibility7.4.2. Information Harvesting7.4.3. Security Risks7.5. Summary
8. Design Patterns and Joomla!
8.1. Design Patterns8.2. Three Primary Categories of Patterns8.2.1. Creational Patterns8.2.1.1. Abstract Factory Pattern8.2.1.2. Singleton Pattern8.2.1.3. Builder Pattern8.2.2. Structural Patterns8.2.2.1. Adapter Pattern8.2.2.2. Bridge Pattern8.2.3. Behavioral Patterns8.2.3.1. Observer Pattern8.2.3.2. Chain-of-Responsibility Pattern8.2.3.3. Strategy Pattern8.2.4. Concurrency Patterns8.2.5. Architectural Patterns8.2.5.1. Server-Based Pattern8.2.5.2. Client-Execution Pattern8.3. Model-View-Controller Pattern8.3.1. MVC for Joomla Components8.3.1.1. The Model File: mvc.php8.3.1.2. The View Files8.3.1.3. The Controller File: controller.php8.3.1.4. The Descriptor File: hellomvc.xml8.4. Summary
9. Hooking into the Joomla! Foundation: Plug-Ins
9.1. Joomla Plug-In Overview9.1.1. Content Events9.1.2. Editor Events9.1.3. System and Search Events9.1.4. User Events9.2. Hello World Plug-In9.2.1. Create the XML Descriptor File9.2.2. Create the plug-in Code9.3. Text Abbreviation Replacement Plug-In9.3.1. XML Descriptor Code9.3.2. plug-in Code9.4. Joomla Framework Access9.4.1. Joomla CMS (JApplication) Structure9.4.1.1. JInstallation Application9.4.1.2. JSite Front-End Application9.4.1.3. JAdministrator Back-End Application9.4.2. Path Variables9.4.3. Tips for Examining Joomla Source Code9.4.4. Using a Directory Search Function9.4.5. Examining com_content9.4.6. Joomla SVN: The Bleeding Edge9.5. Summary
10. Building Joomla! Communities
10.1. Planning a Virtual Community10.1.1. Three Stages of a Virtual Community10.1.1.1. Stage 1: Development and Testing10.1.1.2. Stage 2: Launch and Gathering10.1.1.3. Stage 3: Redefinition and Maturity10.1.2. Understanding the Importance of Stability and Regularity10.1.3. Why You Should Create a Virtual Community10.2. Technology of a Virtual Community10.2.1. Guestbook10.2.1.1. Easybook10.2.1.2. Jambook10.2.2. Chat10.2.2.1. BlastChat10.2.2.2. utChat10.2.3. Forums and Message Boards10.2.3.1. Simple Machines Forum (SMF)10.2.3.2. Fireboard10.2.4. Polls10.2.5. Comments10.2.5.1. AkoComment Tweaked Special Edition 1.4.610.2.5.2. !JoomlaComment10.2.6. Social Networking10.2.6.1. SocialBookmarkerBot v1.3.210.2.7. Event Calendar10.2.7.1. Events Calendar (JEvents) Extension10.2.7.2. JCalPro10.2.8. Wiki Systems10.2.8.1. OpenWiki10.2.8.2. WikiBot10.3. Deploying a Virtual Community10.3.1. Legal Liabilities10.3.2. Grooming Moderators10.4. Maintaining a Community10.5. Summary
11. Managing a Professional Deployment
11.1. Development and Testing11.1.1. Development and Testing11.1.2. Debug Settings11.1.3. PHP Command Line Interface (CLI)11.1.4. Automated Testing11.1.4.1. Page Validation11.1.4.2. Unit Testing11.2. Site Deployment11.2.1. Transferring to the Deployment Server11.2.2. Joomla Backup11.2.3. Apache Virtual Hosts Configuration11.2.4. Controlling Apache from the Command Line11.2.5. Multi-Server Management11.2.5.1. MySQL Instance Manager11.2.5.2. PhpMyAdmin11.2.6. Load Testing11.2.7. Load Balancing11.2.8. Internationalization11.2.9. Automated Content Vetting11.3. MySQL Performance Tuning11.3.1. Setting the Data Drive11.3.2. Selecting a Server Type11.3.3. Source of Problems11.3.4. Optimizing Indexes11.3.4.1. Use of Compound Indexes11.3.4.2. Unique Values in an Index Field11.3.4.3. Remove Redundant Indexes11.3.4.4. Use the Smallest Possible Data Type11.3.4.5. Only Retrieve What You Need11.3.4.6. Use the EXPLAIN Command11.3.5. Profiling the Existing System11.4. Administration11.4.1. LDAP Authentication11.4.1.1. Joomla LDAP Plug-In11.4.1.2. OpenLDAP11.5. Maintenance11.5.1. Cleaning Joomla11.5.1.1. Using the Article Manager to Find Unpublished Articles and Menus11.5.2. Direct MySQL Access11.5.2.1. Finding Old Content11.5.2.2. Finding Inactive Users11.5.2.3. Finding Empty Data Fields11.5.2.4. Finding Unpublished Articles and Menus11.5.2.5. Finding Most Recent Polls11.5.2.6. Finding Empty Sections and Categories11.6. Summary
12. Interfacing with Outside Content
12.1. Pulling in External Content12.1.1. Web Feeds12.1.1.1. Web Feed Format12.1.1.2. Joomla Feed Subscription Module12.1.1.3. Joomla Syndication Publishing Module12.1.2. Auto Articles 3000 Extension12.2. Managing Affiliate Programs12.2.1. Google AdSense Affiliate Program12.2.2. Amazon Affiliate Program12.2.2.1. Amazon Associates Extension12.2.2.2. Amazon Products Feed Bridge12.3. Business Interaction with EDI12.3.1. EDI Documents12.3.2. EDI Standards12.3.3. Skylark Extension12.4. Custom Extranet Interaction12.4.1. Screen Scraper Component12.4.1.1. Brief History of Screen Scrapers12.4.1.2. Pitfalls of Using a Screen Scraper12.4.1.3. Basic Component Source File12.4.1.4. Component Descriptor File12.4.1.5. Scraper Component12.4.2. Google Map Component12.4.2.1. Google Maps API Primer12.4.2.2. Registering for a Key12.4.2.3. Component Descriptor File12.4.2.4. Creating the Component Index File12.4.3. Postal Address Finder with XML12.4.3.1. Manual Testing12.4.3.2. Implementing a PHP Test Page12.4.3.3. Component Descriptor File12.4.3.4. Creating the Component Index File12.5. Summary
13. Search Engine Optimization (SEO) and Search Engine Marketing (SEM)
13.1. Joomla Settings13.1.1. Search Engine Friendly (SEF) URLs13.1.2. Metadata13.1.2.1. Site Metadata13.1.2.2. Article Metadata13.1.3. Activating Breadcrumbs13.1.4. Sitemap13.1.4.1. Joomla Sitemap Extensions13.1.4.2. Google Sitemaps13.2. General Techniques13.2.1. Dominant Search Engines13.2.2. Performing Keyword Research13.2.2.1. Creating a Keyword Starter List13.2.2.2. Using a Keyword Finder Tool13.2.2.3. Finding the Sweet-Spot Keywords13.2.2.4. Look at the Top Pages13.2.3. Page Titles13.2.4. alt Attribute for Images and Other Media13.2.5. Google Page Rank13.2.6. Reciprocal Links13.2.7. Ajax and SEO13.2.8. Google Analytics13.2.9. What Not to Do13.3. Search Engine Marketing (SEM)13.3.1. Writing an Effective Ad13.3.2. Pay-per-Click and Impression Advertising13.3.3. Google Adsense13.4. Summary
14. Joomla! Security
14.1. Types of Attack14.1.1. Password Attacks14.1.2. SQL Injection14.1.2.1.14.1.2.1.1. Unfiltered Text Fields14.1.3. Handling Text Fields in Joomla and PHP14.1.3.1. Untyped Fields14.1.4. Custom Requests — Especially Through Ajax14.1.5. Cross-Site Scripting (XSS)14.1.6. Directory Scanning14.1.7. Denial of Service (DoS) Attack14.1.8. HTTP Sniffing14.2. Web Server Security14.2.1. Securing Apache Server14.2.1.1. .htaccess Configuration14.2.1.2. ServerSignature Directive14.2.1.3. ServerTokens Directive14.2.2. Denying Access to File Extensions14.3. PHP Security14.3.1. PHP Safe Mode14.3.2. PHP doc_root14.3.3. PHP disable_functions14.3.4. PHP disable_classes14.3.5. PHP display_errors14.3.6. PHP expose_php14.4. MySQL Security14.5. Joomla Security14.5.1. Delete Installation Files14.5.2. Joomla HTML Editor14.5.3. Execution within the System14.5.4. Testing and Development14.6. Summary
15. What Joomla! Can't Do
15.1. Document Version Control15.2. Import, File Conversion, and Export15.3. Limited Security and Authentication Features15.4. Load Balancing and Replication15.5. User Interface Levels and Skinning15.6. Standard Groupware Capabilities15.7. Portal Capabilities15.8. Summary
16. Spotlight on Successful Joomla! Sites
16.1. Academic Sites16.1.1. Princeton Molecular Biology Department16.1.2. Shakespeare Birthplace Trust16.1.3. Journal of Intercultural and Interdisciplinary Archaeology16.1.4. Graphic User Interactive Learning and Development (GUILD)16.1.5. Virgin Islands Department of Education16.2. Family/Health Sites16.2.1. SeniorNet16.2.2. KidsCHANNEL16.2.3. A Story for Bedtime16.2.4. Second Wives Club16.2.5. Better Health Here16.3. Professional Sites16.3.1. World Cup 2010 South Africa16.3.2. Best Association Resources and Tools16.3.3. Randall Wood Travel Writing Site16.3.4. Turbo Trade16.3.5. Sonnetto16.3.6. John Avon Illustration16.4. Media (News, Magazines, and so on) Sites16.4.1. MainSPOT.NET16.4.2. PanNatural Environmental News Source16.4.3. United Nations Regional Information Centre for Western Europe16.4.4. HCJB Global16.4.5. Asiaing.com16.4.6. The Chaser16.4.7. Creative Guy Publishing16.5. Hobbyist Sites16.5.1. Success and Sport (S.A.S.)16.5.2. Safari Ventures16.5.3. Sky Systems16.5.4. KISSin' UK16.5.5. Calialive.com16.6. Technology Sites16.6.1. Joomla Main Site16.6.2. VOIPSpeak.net16.6.3. Open Workbench16.6.4. Joomlahut16.6.5. OScar Project (Open Source Car)16.7. Summary

Content preview from Professional Joomla!

Chapter 14. Joomla! Security

Because Joomla is easy to install and configure, many Web masters are lax when it comes to implementing proper security. Although the Joomla system does everything it can to prevent hacker breaches, it is important for any Web administrator to understand the basics of security and for you to understand the particulars of ensuring that your Joomla system can withstand an attack.

Because Joomla uses four interlocking server technologies (Apache, PHP, MySQL, and Joomla), you must maintain security protection at each link of the chain. For example, poorly handled PHP security can leave Joomla wide open to penetration even if Joomla, MySQL, and Apache are secure. This chapter examines each of the servers and how maximum security can be put into place to minimize the danger from the "Wild Wild West" environment of the Internet.

To minimize security problems you should perform a regular update of all your server software, including Joomla. New security problems are found all the time, and the developers of each software package patch the applications to close loopholes. By keeping your versions updated, you will be less vulnerable to attacks.

Types of Attack

Entire books have been written on aspects of hacking attacks, so a complete list is beyond the scope of this book. Nonetheless, there are a number of common attack methods (password, SQL Injection, cross-site scripting, and so on) that are extremely widespread. Any Web master should have at least a passing ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780470133941Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Professional Joomla!

by Dan Rahmel

Chapter 14. Joomla! Security

Types of Attack

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.