Interesting about Joomla! CMS

Joomla! 1.0.14 RC1 is released (you can download it from joomlacode.org).

I looked after a changelog.php, therefore I have noticed the activity connected with updating of Joomla! 1.0.x. But I did not expect, that release candidate will be released so quickly.

Security Fixes:

• [LOW] Fixed XSS issue in com_search
• [LOW] Fixed XSS issue in search results pages
• [LOW] Fixed multiple typos in back end com_content making array integer check ineffective
• [HIGH] Fixed CSRF issue allowing portal compromise — Administrator components.

This project and information is deprecated. Please visit Mobile Joomla! project at mobilejoomla.com for the latest and best way of mobilize Joomla! web sites. Thank you very much for your support.

Two days ago, my laptop has broken down; therefore, last versions of all files of developed Mobile Joomla 3.0 have been lost. Thankfully, on the other computer it was saved files of ten-day prescription. From here a rule: always duplicate the data and on a regular basis make backups of the most valuable information. I have decided that the best way to duplicate Mobile Joomla files is to upload them to this site. Therefore receive Mobile Joomla 3.0.alpha!
I’ll update as far as possible these files with the indication of updating date and the basic changes.
I ask you to check the Mobile Joomla where only it is possible (in particular, I recommend ready.mobi). And inform me on all found out errors and problems. (more…)

Joomla! 1.5 RC4 — Introducing Karibu:

Just a week and a half ago people from all over the globe gathered in various locations to do a little Bug Squashing… today the fruits of their labour can be revealed as we announce the release of Joomla! 1.5 RC4. This release is code named Karibu which is Swahili for nearby, close, close by, at hand… all terms that we feel reflect the nature of this release.

Karibu marks an important milestone in 1.5’s development, as barring any major issues we believe it will be the last release candidate, with the next release being the big one… Joomla! 1.5 stable.

Security Fixes:

• SECURITY [HIGH] Critical CSRF allow portal compromise - Administrator components.
• SECURITY [HIGH] Fixed registered user privilege escalation vulnerability.
• SECURITY [MEDIUM] Fixed administrators can promote other users to administrator group.
• SECURITY [LOW] XSS vulnerability in com_poll.

Recently at a forum.joomla.org, it was raised a question: why it is not possible to visit a site through SSL-connection with the mobile device (really a question was another ). At the same time, all was ОК with a usual (desktop) browser.

After some experiments and search on the Internet I have understood, that the reason of such behavior can be only one: the majority of mobile devices contain only a few basic “root certificates” and not download other from the Internet.
(more…)

Recently the following question is very popular:

When I try to login, I get an error message. Why?

The problem consists of several parts:

1. If it is specified in options of “Login Form” module to display a script at login or logout, the PDA cannot process this script and you will see the empty screen (or an error).
2. The PDA does not support cookies. In this case, Joomla! will display a script and you will see the empty screen (or an error).
3. The PDA supports cookies, but in full accordance with the standard:
   

   Only hosts within the specified domain can set a cookie for a domain and domains must have at least two (2) or three (3) periods in them to prevent domains of the form: “.com”, “.edu”, and “va.us.” Any domain that fails within one of the seven special top level domains listed below only require two periods. Any other domain requires at least three. The seven special top level domains are: “COM”, “EDU”, “NET”, “ORG”, “GOV”, “MIL”, and “INT”.

   In this case on some domains (e.g., without “www.” or with regional TLD) the PDA will not remember cookies and as a result Joomla! will solve that the PDA does not support cookies (see item 2).

(more…)

As far as I have understood from comments on this site (and even from a separate topic on forum.joomla.org), there is a big interest to the version of a PDA-mambot for Mambo CMS. The matter is that the version for Joomla cannot work in Mambo as the latter does not trigger “OnStart” event. In order to PDA-mambot start working, it is necessary to make changes to a index.php file and to modify slightly a PDA-mambot since in Mambo and Joomla the name of a new template is stored in different variables.
(more…)

This project and information is deprecated. Please visit Mobile Joomla! project at mobilejoomla.com for the latest and best way of mobilize Joomla! web sites. Thank you very much for your support.

Today I release promised “Google AdSense Mobile” module from “Mobile Joomla” package. To start earn money from the mobile version of a site, it is enough to set up and publish this module in one of pda-template positions. In parameters it is necessary to specify at least your Google AdSense client ID (like pub-0123456789012345). On the whole it is possible to change following parameters of advertising: (more…)