24 Oct 2008

Joomla Security - jos_

Written by Brian Teeman

One of the few pieces of code that I can claim any credit for is the ability to define a database prefix to all the tables in your site and this dates back to the early days of Mambo around the end of 2003. The reason it was frst introduced was to allow site owners to install multiple version of Mambo on a single mysql database.

But now it serves a second purpose in "helping" to protect your site from some of the more common security hacks.

If you follow millw0rm or any of the other security sites you will have noticed that many of the exploits rely on your database tables being called jos_XXXXXX.

By simply using your own prefix you would have been protected from these exploits.

Of course none of this is a replacement for good server security (permissions etc) and good quality, and regularly maintained extensions but its a start.

 

blog comments powered by Disqus

About Brian Teeman

  • As a co-founder of Joomla! and OpenSourceMatters Inc I've never been known to be lacking an opinion or being too afraid to express it.

    Despite what some people might think I'm a shy and modest man who doesnt like to blow his own trumpet or boast about achievements.

    But it seems that no blog exists without an "About" page so rather than talk about what an amazingly great guy I am and list all the things I've achieved (and failed at) in life from my Cycling Proficiency Test in 1976 to winning an award for the "UK Individual Contribution to Open / Source" in 2005 here are some links.

    {...}