Topic
13 articles.
Security
Block the site at server level, copy files, database and logs, then find the planted PHP and the way in. Clean up first, change…
6 November 2026 · 5 min read
Security
Joomla 4+ has a REST API in /api that can read articles, users and configuration. How it is protected, how to test it with curl…
2 November 2026 · 5 min read
Security
Locked out of the Joomla administrator? With database access you can reset the password, unblock the account and remove the…
28 October 2026 · 5 min read
Security
Joomla ships a System - HTTP Headers plugin for X-Frame-Options, Referrer-Policy, HSTS and CSP. What each setting does and how to…
21 October 2026 · 5 min read
Security
Spam accounts that keep appearing with registration off often come in through a profile save that never checks login. How to find…
14 October 2026 · 5 min read
Security
Joomla has multi-factor login in core since 4.2. How to switch it on, force it for administrators, and get a user back in after…
14 October 2026 · 4 min read
Security
Something on the site is different and nobody admits to it. Joomla has kept a record the whole time, and most people never look.
6 August 2026 · 2 min read
Security
Joomla has a Privacy component for GDPR requests: export or delete someone's data, record consent and keep a log. Where it is and…
6 August 2026 · 2 min read
Security
Joomla user groups decide what someone may do; access levels decide what they may see. Mixing them up is why Registered content…
6 August 2026 · 2 min read
Security
Joomla 6 no longer ships a Google reCAPTCHA plugin. What it offers instead, how to set it up on forms, and what to do with sites…
6 August 2026 · 2 min read
Security
Joomla's integrated ACL (Access Control List) allows you to define granular access rights for different types of users. To…
2 May 2025 · 1 min read
Security
Read user input in Joomla through the Input object, never straight from $_GET or $_POST, and add validation, CSRF tokens and…
2 May 2025 · 1 min read
Rather have someone look at it
A Dutch agency that has been building and running Joomla sites since 1999. If your site needs more than an article can fix, get in touch.
