Security Articles
Preventing SQL Injections PDF Print E-mail
Written by Anthony Ferrara   

Recently, I've been noticing a lot of misconceptions about how to protect code in 3pd extensions from SQL injection.  To be honest, using JRequest is not enough by far!!!  I hope to cover some thing here about some methods to prevent SQL attacks.  It's not that difficult; there are a few simple things you can do to prevent injection attacks.  I'll go through them one by one, and show some examples of each.
Read more...
 
Joomla Administrators Security Checklist PDF Print E-mail
Written by Anthony Ferrara   

About this document

Security is a vast and fast-moving subject. No one document can cover it all. This checklist is designed to help you with only two things.

  1. Alert you to important issues
  2. Point you in the right direction to learn more

Not all security techniques are appropriate for both versions of Joomla. Where a technique only applies to one version, an image is added. For example:

Read more...