I was surprised to notice recently, one of my favourite Joomla websites (Not one we’ve designed I hasten to add) had been hacked, by the looks of things this was by changing the permissions on the files and directories on the webserver – for information folders are generally chmod to 755 and files are 644.
This brought me to thinking that although Joomla is a great CMS, with some patience hackers can run free throughout your site! If you run a Joomla site, you already know that the backend can be accessed simply by going to http://www.yourdomain.com/administrator – it’s then simply a case of hacking the administrator password.
There are ways and means however, to stop the hackers before they’ve even got started! I came across a fantastic plugin the other day, which is available free from the Joomla Extensions website: jSecure Authentication. What this plugin does, it creates a Key in the back end of your choice, (There is an option to make the key any word you want it to be) you then have to enter this key as part of the URL to get access to the backend of the site. For example, if your key was letmein you would type http://www.yourdomain.com/administrator/?letmein without the key, a 404 page is displayed! Nice and simple. To make sure you are also extra protected, take a look at the Vulnerable Extensions List on the Joomla.org site. This is a list compiled by Joomla displaying any extensions which have been found to be vulnerable, and therefore could be a back-door to your site for would-be hackers.
Hackers will always try to gain access to any site. Make sure your site is protected, don’t pay money to companies who try to sell you things to protect your site – follow this post and your site will be at least a bit more protected!
Posted by
StormIT Date:
Tuesday, January 19, 2010
Categories:
Joomla, Security
Tags:
extensions, hackers, hacking, Joomla, joomla administration, joomla security checklist, Security, security updates

Tim Berners-Lee started the web to help scientists communicate
The forward slashes at the beginning of internet addresses have long annoyed net users and now the man behind them has apologised for using them.
Sir Tim Berners-Lee, the creator of the World Wide Web, has confessed that the // in a web address were actually “unnecessary”.
He told the Times newspaper that he could easily have designed URLs not to have the forward slashes.
“There you go, it seemed like a good idea at the time,” he said.
He admitted that when he devised the web, almost 30 years ago, he had no idea that the forward slashes in every web address would cause “so much hassle”.
His light-hearted apology even had a green angle as he accepted that having to add // to every address had wasted time, printing and paper.
Sir Tim is currently director of the World Wide Web Consortium and he is also working with the UK government to help open up access to government data.
Taken From the BBC Website
Posted by
StormIT Date:
Wednesday, October 14, 2009
Categories:
Web
Tags:
sir tim berners-lee, w3c, Web, world wide web, www
I have just written an article for Heart Internet’s blog on the Top 10 Joomla extensions you can’t live without! It’s just been published today! Take a look:
http://www.heartinternet.co.uk/blog/2009/09/top-10-joomla-extensions-you-can%E2%80%99t-live-without/
Posted by
StormIT Date:
Monday, September 28, 2009
Categories:
Joomla
Tags:
Joomla, joomla extensions
After several years of running Joomla we started to realise that we had to compile a list of “Must Have” Joomla extensions. This is a brief run down on which extensions we think every site needs! Read more…
Posted by
StormIT Date:
Thursday, September 24, 2009
Categories:
Joomla, SEO, Web
Tags:
extensions, Google Analytics Tracking Module, Google Verify, JCE, Joomap, Joomla, Joomla 1.5 SEO Patch, JoomlaPack, JoomlaXplorer, Kunena, must have joomla extensions, Phoca Photo Gallery, Virtuemart



The HTC Hero Orange Update...
We are the proud owners and users of the HTC Hero handset. We love it. Google Android O/S, Market, everything about this phone is fantastic! The only downside is the slight lag and the battery life. Which has been apparently fixed in the latest update from Orange and HTC themselves…. Great! Or so we thought. On Saturday, the update was installed on a HTC Hero handset, mine in fact and I thought I’m going to be running the latest piece of kit, running smoothly and running well! Today it’s still not working… Am so annoyed about this, Orange customer services don’t even know what I’m talking about and HTC have said that the update has been successful… So now what?!
Posted by
StormIT Date:
Monday, September 21, 2009
Categories:
Android
Tags:
android, google android, HTC Hero, htc hero update, Orange