From helvecio.rj at gmail.com  Mon Oct  1 05:53:49 2012
From: helvecio.rj at gmail.com (=?UTF-8?Q?Helv=C3=A9cio_da_Silva?=)
Date: Mon, 1 Oct 2012 06:53:49 -0300
Subject: [joomla] Homepage Layout
In-Reply-To: <79F4DEF82AB044599717F9D96F2F45E8@OwnerPC>
References: <79F4DEF82AB044599717F9D96F2F45E8@OwnerPC>
Message-ID: <CAHM6=OBLzHLJ9spKtT85HnahfzGdDjLZW4O5ydbP4W4WsX9ucQ@mail.gmail.com>

Assuming you are workinga a template you've created, you need CSS to
accomplish that.

Get the code from any of the previously installed templates on Joomla.

Best regards,

2012/9/27 Unitel <unitelny at gmail.com>

>  Hello everyone!****
>
> ** **
>
> I?m reading the Joomla 2.5 Beginners Guide Book? By Eric Tiggeler.****
>
> ** **
>
> I want to ?Layout? the home page as follows:****
>
>    1. Leading Articles = 1 ****
>    2. Intro Articles = 4 ****
>    3. Columns = 2 ****
>
> ** **
>
> And what I get is the leading article displayed correctly but the other
> articles are not laid out in the two column format. They are displayed in a
> single column ? which option flag did I miss?****
>
> ** **
>
> ** **
>
> Best regards,****
>
> ** **
>
> Marcos Miranda ****
>  [image: ---]
>
> ** **
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
Helvecio "Elvis" da Silva
Rio de Janeiro - Brasil - helvecio.rj at gmail.com
http://www.helvecio.com - http://blog.helvecio.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121001/b72d2958/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 3357 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121001/b72d2958/attachment.gif>

From scott at wolpow.com  Fri Oct  5 18:53:14 2012
From: scott at wolpow.com (Scott Wolpow)
Date: Fri, 05 Oct 2012 18:53:14 -0400
Subject: [joomla] I need a good logo person
Message-ID: <506F64DA.7030504@wolpow.com>

Are you great at logos?
If so contact me off list.

Thanks
-- 
Scott Wolpow
718 275 7765
-------------------
I am participating in the
MS Charity Bike ride to raise
Money for this good cause,
can you please support my ride. 
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354>
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121005/11d272e7/attachment.html>

From marian at gothamwebsites.com  Mon Oct  8 09:04:59 2012
From: marian at gothamwebsites.com (Marian @GothamWebsites)
Date: Mon, 8 Oct 2012 09:04:59 -0400
Subject: [joomla] Users Group Meeting DATE CHANGE
Message-ID: <CACMUJHcPgLmiW41Ot6TiAWz=L+kouBKtSOY8g1g7H6F4k25hMA@mail.gmail.com>

Just a reminder that we depart from our usual 2nd Thursday of the month
schedule. The meeting this month is Thursday, October 18th at Robert Half.

REGISTRATION IS REQUIRED and closes at 5pm wednesday the 17th.
http://joomlanyc.org/index.php/register

For directions: http://joomlanyc.org/index.php/events/next-nycjug-meeting



-- 
*Marian Konop*
Gotham Websites
We think SMALL . . . Business
*www.gothamwebsites.com*
President JoomlaNYC Users Group
*www.joomlanyc.org
*Team Leader
*www.JoomlaDayNYC.com*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121008/a89efd5c/attachment.html>

From Kirill at hostnetservices.com  Mon Oct  8 13:42:07 2012
From: Kirill at hostnetservices.com (Kirill Poliakov)
Date: Mon, 8 Oct 2012 13:42:07 -0400
Subject: [joomla] Job Opportunity
Message-ID: <OF6CA0D578.52291298-ON85257A91.00610B22-85257A91.00613FDC@abadona.com>

An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121008/0828b6fc/attachment.html>

From gjschaller at psi-13.com  Wed Oct 10 12:22:06 2012
From: gjschaller at psi-13.com (Geoffrey Schaller)
Date: Wed, 10 Oct 2012 12:22:06 -0400
Subject: [joomla] Looking for an Image Rotation module
Message-ID: <CABr9RmmLFRd0zE_GbPedM8VGE2n0wg7NXKQgXLT9qFko5WF7PQ@mail.gmail.com>

I have a collection of about 20 photos, that I would like to display as
thumbnails on a page.  I'd like to display 5 at a time, chosen randomly
from a folder:

[Image1] [Image2] [Image3] [Image4] [Image5]

I've tried a few different image rotation / slideshow modules, but none of
them seem to QUITE fit the bill I am looking for.  Either they only show
one image (and no option for more than one), or they slide the whole pool
instead of statically choosing 5 on load and sticking with them.

I tried the default Joomla 2.5 Random Image Module, loaded 5 times on the
page, but it shows the same image in all 5 loads instead of 5 different
ones.

There's a bazillion modules on the JED - I tried a few and got frustrated,
as each one claimed to do what I want, but was missing something in the
end. :-(

Anyone have a lead on a good module or plugin, that fits the bill for what
I need?

-- 
Geoffrey Schaller
gjschaller at psi-13.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121010/e0eee4c8/attachment.html>

From gjschaller at psi-13.com  Wed Oct 10 16:28:12 2012
From: gjschaller at psi-13.com (Geoffrey Schaller)
Date: Wed, 10 Oct 2012 16:28:12 -0400
Subject: [joomla] Looking for an Image Rotation module
In-Reply-To: <CABr9RmmLFRd0zE_GbPedM8VGE2n0wg7NXKQgXLT9qFko5WF7PQ@mail.gmail.com>
References: <CABr9RmmLFRd0zE_GbPedM8VGE2n0wg7NXKQgXLT9qFko5WF7PQ@mail.gmail.com>
Message-ID: <CABr9RmntNwKS_FOk0zK3XnH6FMd9X7jgf=hPdJ5F9j_9BrKJ5A@mail.gmail.com>

I *think* I've solved my own issue, in a way... but it requires JoomGallery
to be set up, as it's a module that draws from that, rather than from a
Joomla images folder.

Still, it's a good way to go, esp. if you're already using JoomGallery on
your site and want to showcase images elsewhere on your site.

-Geoffrey


On Wed, Oct 10, 2012 at 12:22 PM, Geoffrey Schaller
<gjschaller at psi-13.com>wrote:

> I have a collection of about 20 photos, that I would like to display as
> thumbnails on a page.  I'd like to display 5 at a time, chosen randomly
> from a folder:
>
> [Image1] [Image2] [Image3] [Image4] [Image5]
>
> I've tried a few different image rotation / slideshow modules, but none of
> them seem to QUITE fit the bill I am looking for.  Either they only show
> one image (and no option for more than one), or they slide the whole pool
> instead of statically choosing 5 on load and sticking with them.
>
> I tried the default Joomla 2.5 Random Image Module, loaded 5 times on the
> page, but it shows the same image in all 5 loads instead of 5 different
> ones.
>
> There's a bazillion modules on the JED - I tried a few and got frustrated,
> as each one claimed to do what I want, but was missing something in the
> end. :-(
>
> Anyone have a lead on a good module or plugin, that fits the bill for what
> I need?
>
> --
> Geoffrey Schaller
> gjschaller at psi-13.com
>



-- 
Geoffrey Schaller
gjschaller at psi-13.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121010/78df29e2/attachment.html>

From matt at betweenbrain.com  Wed Oct 10 16:44:56 2012
From: matt at betweenbrain.com (Matt Thomas)
Date: Wed, 10 Oct 2012 16:44:56 -0400
Subject: [joomla] Looking for an Image Rotation module
In-Reply-To: <CABr9RmntNwKS_FOk0zK3XnH6FMd9X7jgf=hPdJ5F9j_9BrKJ5A@mail.gmail.com>
References: <CABr9RmmLFRd0zE_GbPedM8VGE2n0wg7NXKQgXLT9qFko5WF7PQ@mail.gmail.com>
	<CABr9RmntNwKS_FOk0zK3XnH6FMd9X7jgf=hPdJ5F9j_9BrKJ5A@mail.gmail.com>
Message-ID: <CAOXGsbJaZAFBpcVihspCVwj0GT5zzs9sWjdOtfQK=BvAmY4dDg@mail.gmail.com>

FWIW, I was going to recommend that you take a look at JoomGallery. It's a
bit of overkill for this, but a great solution none the less.

Best,

Matt

Sent from my phone that uses an open source operating system.
On Oct 10, 2012 4:29 PM, "Geoffrey Schaller" <gjschaller at psi-13.com> wrote:

> I *think* I've solved my own issue, in a way... but it requires
> JoomGallery to be set up, as it's a module that draws from that, rather
> than from a Joomla images folder.
>
> Still, it's a good way to go, esp. if you're already using JoomGallery on
> your site and want to showcase images elsewhere on your site.
>
> -Geoffrey
>
>
> On Wed, Oct 10, 2012 at 12:22 PM, Geoffrey Schaller <gjschaller at psi-13.com
> > wrote:
>
>> I have a collection of about 20 photos, that I would like to display as
>> thumbnails on a page.  I'd like to display 5 at a time, chosen randomly
>> from a folder:
>>
>> [Image1] [Image2] [Image3] [Image4] [Image5]
>>
>> I've tried a few different image rotation / slideshow modules, but none
>> of them seem to QUITE fit the bill I am looking for.  Either they only show
>> one image (and no option for more than one), or they slide the whole pool
>> instead of statically choosing 5 on load and sticking with them.
>>
>> I tried the default Joomla 2.5 Random Image Module, loaded 5 times on the
>> page, but it shows the same image in all 5 loads instead of 5 different
>> ones.
>>
>> There's a bazillion modules on the JED - I tried a few and got
>> frustrated, as each one claimed to do what I want, but was missing
>> something in the end. :-(
>>
>> Anyone have a lead on a good module or plugin, that fits the bill for
>> what I need?
>>
>> --
>> Geoffrey Schaller
>> gjschaller at psi-13.com
>>
>
>
>
> --
> Geoffrey Schaller
> gjschaller at psi-13.com
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121010/02c4c504/attachment.html>

From gjschaller at psi-13.com  Wed Oct 10 16:49:04 2012
From: gjschaller at psi-13.com (Geoffrey Schaller)
Date: Wed, 10 Oct 2012 16:49:04 -0400
Subject: [joomla] Looking for an Image Rotation module
In-Reply-To: <CAOXGsbJaZAFBpcVihspCVwj0GT5zzs9sWjdOtfQK=BvAmY4dDg@mail.gmail.com>
References: <CABr9RmmLFRd0zE_GbPedM8VGE2n0wg7NXKQgXLT9qFko5WF7PQ@mail.gmail.com>
	<CABr9RmntNwKS_FOk0zK3XnH6FMd9X7jgf=hPdJ5F9j_9BrKJ5A@mail.gmail.com>
	<CAOXGsbJaZAFBpcVihspCVwj0GT5zzs9sWjdOtfQK=BvAmY4dDg@mail.gmail.com>
Message-ID: <CABr9RmnkFgthuHK04iKWcD8yU46cLPJqcMCdY4MHvCXUuAseGg@mail.gmail.com>

It's funny - the site I am looking to use this on, is still on Gallery2
bridged with JFusion.  I'm trying to migrate to JoomGallery, but there's
not a migration script... yet.

One of my other sites does use it, though, so that's where I tested it.  As
soon as I can ditch Gallery2 and be on JoomGallery, I'll be good to go.

-Geoffrey


On Wed, Oct 10, 2012 at 4:44 PM, Matt Thomas <matt at betweenbrain.com> wrote:

> FWIW, I was going to recommend that you take a look at JoomGallery. It's a
> bit of overkill for this, but a great solution none the less.
>
> Best,
>
> Matt
>
> Sent from my phone that uses an open source operating system.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121010/20694080/attachment.html>

From marian at gothamwebsites.com  Fri Oct 12 13:40:03 2012
From: marian at gothamwebsites.com (Marian @GothamWebsites)
Date: Fri, 12 Oct 2012 13:40:03 -0400
Subject: [joomla] Joomla NYC Board of Director Elections
Message-ID: <CACMUJHcN9ctxO3QyzWp3PQ+oEzXaJ8x8ZZGkP+Z7VeFD4xZGKw@mail.gmail.com>

Board of Director elections will be coming soon. If you are interested in
running for a position, please submit your name at the October meeting or
email us at http://joomlanyc.org/index.php/contact  . Laura Gordon and
Scott Wolpow will be at the October meeting, and can answer questions about
the scope of the Board.
 We will ask all candidates to tell us about themselves and what skills
they can contribute to the organization at the November meeting. If you are
unable to attend the November meeting, please email a statement to the
about contact form address above, and I will read them at the meeting.
 Elections will be held at the December meeting.

Here is a link to the current Board.
http://joomlanyc.org/index.php/contact



 *Marian Konop*
Gotham Websites
We think SMALL . . . Business
*www.gothamwebsites.com*
 President JoomlaNYC Users Group
*www.joomlanyc.org
*Team Leader
*www.JoomlaDayNYC.com <http://www.joomladaynyc.com/>*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121012/ebfc1a44/attachment.html>

From scott at wolpow.com  Wed Oct 17 09:07:56 2012
From: scott at wolpow.com (Scott Wolpow)
Date: Wed, 17 Oct 2012 09:07:56 -0400
Subject: [joomla] Great News
Message-ID: <507EADAC.2010807@wolpow.com>

Robert Half Resources will be our host through the end of the year.

-- 
Scott Wolpow
718 275 7765
-------------------
I am participating in the
MS Charity Bike ride to raise
Money for this good cause,
can you please support my ride. 
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354>
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121017/354fb3fa/attachment.html>

From snewfeld at zebrasystems.com  Thu Oct 18 12:42:52 2012
From: snewfeld at zebrasystems.com (Stewart Newfeld)
Date: Thu, 18 Oct 2012 12:42:52 -0400
Subject: [joomla] I want to teach a Joomla beginners class
Message-ID: <008f01cdad4f$9dfc1f20$d9f45d60$@com>

Hi Joomla People,

 

I miss teaching and want to teach a free Joomla Beginners class in a
workshop format.  I am thinking of meeting once a week from 6:30-8:30 for 8
weeks.  Students would have to bring their own laptops.

 

I intend to bring this up at tonight's meeting.  

 

I can do this as part of the JoomlaNYC users group or just put it up as a
Meetup independently of the user's group, so I'd love to get everyone's
thoughts on the matter.  

 

Also, if anyone knows beginners who might be interested, please have them
contact me.

 

Stewart Newfeld



Zebra Systems, Inc.

Computer Network & Website Support

131 Joralemon Street, Apt. 52

Brooklyn, NY 11201

www.zebrasystems.com

212.675.8414

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121018/81f64cc0/attachment.html>

From rytech123 at gmail.com  Thu Oct 18 23:01:14 2012
From: rytech123 at gmail.com (Laura Gordon)
Date: Thu, 18 Oct 2012 23:01:14 -0400
Subject: [joomla] October meeting - minutes
Message-ID: <CABbkB_e_LquJNUnNmCBNWdRsMbemxjR8GSz==NZa-ykooGFJhg@mail.gmail.com>

Hi all,

Great meeting tonight!  Special thanks to Robert Half Associates for
providing space to have our meeting this month!

thanks to John Clapps for chairing the meeting and to Stephen Britton for
presenting on SEO and Joomla!

I have put some brief minutes up on the website.  If Stephen is able to put
together something online of his presentation, I will be sure to send that
out as well.

Our next meeting will go back to our regular dates, the 2nd thursday of the
month:
Thursday, November 9
at Robert half and associates
You MUST REGISTER to attend this meeting, please complete the registration
form on the website. (http://www.joomlanyc.org)

Thanks again for the newcomers and old timers for taking your time out of
your busy work week to join us!  Looking forward to another great meeting
in November!

thanks,
-- Laura

-- 
I have a new email address: rytech123 at gmail.com

Trainer with www.Video2Brain.com
Board Member of www.JoomlaNYC.org
Trainer for www.JoomlaTraining.com
Sponsor & Coordinator for www.JoomlaDayNYC.com

www.RytechSites.com
Dynamic Websites for your company!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121018/083db0e9/attachment.html>

From ellen.rothwax at gmail.com  Fri Oct 19 12:12:39 2012
From: ellen.rothwax at gmail.com (Ellen Rothwax)
Date: Fri, 19 Oct 2012 12:12:39 -0400
Subject: [joomla] having major issues with hacking and restoring
Message-ID: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>

Hi folks,
Not my day!!!!
 I have been hacked on a couple of my Joomla sites in the past few days.
All are hosted on 1 & 1 , they are 1.5 and 2.5 sites, all the latest
versions.
The hacks are different. One was redirecting to msn.com another messed with
my htaccess file and something in the backend because oddly enough although
I can see it, the dropdown navigation in the backend doesn't work.The
navigation icons in the control panel do, but once you get to a different
page, the save and close buttons don't work. I am having the host roll back
their backups because mine are not helping.
Has anyone had this experience?
Other than using Admin tools and removing references to Joomla, any
suggestions to securing the sites better?

On a different note, I just tried to restore a backup to a backup site on a
site that was not hacked to test it(I am paranoid now that my backups won't
help if they are corrupted). This site has Hikashop and Easyblog on it. The
restored backup (to a new database) isn't working right. It is fine until
you try to navigate to one of these extensions and I get an error:
Multiple Choices
The document name you requested (/index.php) could not be found on this
server. However, we found documents with names similar to the one you
requested.

Available documents:

/index.html (common basename)

Please consider informing the owner of the referring page about the broken
link.


Any ideas why?


Please make my day better!

Ellen


-- 

<http://www.ebrwebsitedesigns.com>
Ellen Rothwax
Web Design and Development
*Don?t say you can?t afford a website. . .you can?t afford not to have one.
*www.ebrwebsitedesigns.com*
*(P) 203 572-5756*
*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/bf92e107/attachment.html>

From unitelny at gmail.com  Fri Oct 19 12:30:24 2012
From: unitelny at gmail.com (Unitel)
Date: Fri, 19 Oct 2012 12:30:24 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
Message-ID: <18DA8933BD5742F38DD53903B0B58D81@OwnerPC>

In case you don't know! I linked to your site by clicking your logo and when
I clicked your menu I got the following response.

 


"Internal Server Error


The server encountered an internal error or misconfiguration and was unable
to complete your request.

Please contact the server administrator, webadmin at kundenserver.de and inform
them of the time the error occurred, and anything you might have done that
may have caused the error.

More information about this error may be available in the server error log.

Additionally, a 500 Internal Server Error error was encountered while trying
to use an ErrorDocument to handle the request."

 

 

 

 

Best regards,

 

Marcos Miranda 

---

 

  _____  

From: joomla-bounces at lists.nyphp.org [mailto:joomla-bounces at lists.nyphp.org]
On Behalf Of Ellen Rothwax
Sent: Friday, October 19, 2012 12:13 PM
To: joomla at lists.nyphp.org
Subject: [joomla] having major issues with hacking and restoring

 

Hi folks,
Not my day!!!!
 I have been hacked on a couple of my Joomla sites in the past few days. All
are hosted on 1 & 1 , they are 1.5 and 2.5 sites, all the latest versions.
The hacks are different. One was redirecting to msn.com another messed with
my htaccess file and something in the backend because oddly enough although
I can see it, the dropdown navigation in the backend doesn't work.The
navigation icons in the control panel do, but once you get to a different
page, the save and close buttons don't work. I am having the host roll back
their backups because mine are not helping.
Has anyone had this experience? 
Other than using Admin tools and removing references to Joomla, any
suggestions to securing the sites better?

On a different note, I just tried to restore a backup to a backup site on a
site that was not hacked to test it(I am paranoid now that my backups won't
help if they are corrupted). This site has Hikashop and Easyblog on it. The
restored backup (to a new database) isn't working right. It is fine until
you try to navigate to one of these extensions and I get an error:
Multiple Choices
The document name you requested (/index.php) could not be found on this
server. However, we found documents with names similar to the one you
requested.

Available documents:

/index.html (common basename)

Please consider informing the owner of the referring page about the broken
link.

 

Any ideas why?

 

Please make my day better!

Ellen



-- 

 <http://www.ebrwebsitedesigns.com> 
Ellen Rothwax
Web Design and Development
Don't say you can't afford a website. . .you can't afford not to have one.
www.ebrwebsitedesigns.com
(P) 203 572-5756

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/492ff80d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 3357 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/492ff80d/attachment.gif>

From matt at betweenbrain.com  Fri Oct 19 13:01:56 2012
From: matt at betweenbrain.com (Matt Thomas)
Date: Fri, 19 Oct 2012 13:01:56 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
Message-ID: <CAOXGsbLrynxJA9AbNi__VcazVxwC04djPo54wOcBdb3A8bPw7w@mail.gmail.com>

On Fri, Oct 19, 2012 at 12:12 PM, Ellen Rothwax <ellen.rothwax at gmail.com>wrote:

>
> Other than using Admin tools and removing references to Joomla, any
> suggestions to securing the sites better?


Having used 1&1 in the past, and having sites hacked when using them, I
changed to a different host and most of my security issues when away. I now
host my own sites on servers that I build and stop most exploits long
before they even get to the website. Any good host will do that too.

Make sure all *extensions* are up to date, not listed at
http://docs.joomla.org/Vulnerable_Extensions_List and passwords are strong.
I know that /administrator on my servers get hit with dictionary
attacks<http://en.wikipedia.org/wiki/Dictionary_attack> 100's
of times a day and using Admin Tools secret URL helps with that.

But, your host needs to be doing something better to prevent this behavior
before it gets to your site.

Hope that helps!

Best,

Matt Thomas
Founder betweenbrain <http://betweenbrain.com/>?
Lead Developer Construct Template Development
Framework<http://construct-framework.com/>
Phone: 203.632.9322
Twitter: @betweenbrain
Github: https://github.com/betweenbrain
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/257df671/attachment.html>

From daveb at dslprime.com  Fri Oct 19 13:16:44 2012
From: daveb at dslprime.com (Dave Burstein)
Date: Fri, 19 Oct 2012 13:16:44 -0400
Subject: [joomla] Sucuri.net solved my hacking problem
Message-ID: <CAAUuzMTqFn++PgKc+uTNFxvWvhwiUsbtTZbjDUrTMcUQ9Y6eAQ@mail.gmail.com>

I went through hell for two days as I cleaned up each site, then it
was re-infected. Sucuri charges $89 for one site, $189 (or similar)
for five. My experience was that I needed to clear all sites or I
couldn't prevent being re-infected.

   It was definitely worth paying them when I had a multi-site infection.

db
On Fri, Oct 19, 2012 at 12:30 PM,  <joomla-request at lists.nyphp.org> wrote:
> Send Joomla mailing list submissions to
>         joomla at lists.nyphp.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         http://lists.nyphp.org/mailman/listinfo/joomla
> or, via email, send a message with subject or body 'help' to
>         joomla-request at lists.nyphp.org
>
> You can reach the person managing the list at
>         joomla-owner at lists.nyphp.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Joomla digest..."
>
>
> Today's Topics:
>
>    1. having major issues with hacking and restoring (Ellen Rothwax)
>    2. Re: having major issues with hacking and restoring (Unitel)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 19 Oct 2012 12:12:39 -0400
> From: Ellen Rothwax <ellen.rothwax at gmail.com>
> To: joomla at lists.nyphp.org
> Subject: [joomla] having major issues with hacking and restoring
> Message-ID:
>         <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ at mail.gmail.com>
> Content-Type: text/plain; charset="windows-1252"
>
> Hi folks,
> Not my day!!!!
>  I have been hacked on a couple of my Joomla sites in the past few days.
> All are hosted on 1 & 1 , they are 1.5 and 2.5 sites, all the latest
> versions.
> The hacks are different. One was redirecting to msn.com another messed with
> my htaccess file and something in the backend because oddly enough although
> I can see it, the dropdown navigation in the backend doesn't work.The
> navigation icons in the control panel do, but once you get to a different
> page, the save and close buttons don't work. I am having the host roll back
> their backups because mine are not helping.
> Has anyone had this experience?
> Other than using Admin tools and removing references to Joomla, any
> suggestions to securing the sites better?
>
> On a different note, I just tried to restore a backup to a backup site on a
> site that was not hacked to test it(I am paranoid now that my backups won't
> help if they are corrupted). This site has Hikashop and Easyblog on it. The
> restored backup (to a new database) isn't working right. It is fine until
> you try to navigate to one of these extensions and I get an error:
> Multiple Choices
> The document name you requested (/index.php) could not be found on this
> server. However, we found documents with names similar to the one you
> requested.
>
> Available documents:
>
> /index.html (common basename)
>
> Please consider informing the owner of the referring page about the broken
> link.
>
>
> Any ideas why?
>
>
> Please make my day better!
>
> Ellen
>
>
> --
>
> <http://www.ebrwebsitedesigns.com>
> Ellen Rothwax
> Web Design and Development
> *Don?t say you can?t afford a website. . .you can?t afford not to have one.
> *www.ebrwebsitedesigns.com*
> *(P) 203 572-5756*
> *
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/bf92e107/attachment-0001.html>
>
> ------------------------------
>
> Message: 2
> Date: Fri, 19 Oct 2012 12:30:24 -0400
> From: "Unitel" <unitelny at gmail.com>
> To: "'NYPHP SIG: Joomla'" <joomla at lists.nyphp.org>
> Subject: Re: [joomla] having major issues with hacking and restoring
> Message-ID: <18DA8933BD5742F38DD53903B0B58D81 at OwnerPC>
> Content-Type: text/plain; charset="us-ascii"
>
> In case you don't know! I linked to your site by clicking your logo and when
> I clicked your menu I got the following response.
>
>
>
>
> "Internal Server Error
>
>
> The server encountered an internal error or misconfiguration and was unable
> to complete your request.
>
> Please contact the server administrator, webadmin at kundenserver.de and inform
> them of the time the error occurred, and anything you might have done that
> may have caused the error.
>
> More information about this error may be available in the server error log.
>
> Additionally, a 500 Internal Server Error error was encountered while trying
> to use an ErrorDocument to handle the request."
>
>
>
>
>
>
>
>
>
> Best regards,
>
>
>
> Marcos Miranda
>
> ---
>
>
>
>   _____
>
> From: joomla-bounces at lists.nyphp.org [mailto:joomla-bounces at lists.nyphp.org]
> On Behalf Of Ellen Rothwax
> Sent: Friday, October 19, 2012 12:13 PM
> To: joomla at lists.nyphp.org
> Subject: [joomla] having major issues with hacking and restoring
>
>
>
> Hi folks,
> Not my day!!!!
>  I have been hacked on a couple of my Joomla sites in the past few days. All
> are hosted on 1 & 1 , they are 1.5 and 2.5 sites, all the latest versions.
> The hacks are different. One was redirecting to msn.com another messed with
> my htaccess file and something in the backend because oddly enough although
> I can see it, the dropdown navigation in the backend doesn't work.The
> navigation icons in the control panel do, but once you get to a different
> page, the save and close buttons don't work. I am having the host roll back
> their backups because mine are not helping.
> Has anyone had this experience?
> Other than using Admin tools and removing references to Joomla, any
> suggestions to securing the sites better?
>
> On a different note, I just tried to restore a backup to a backup site on a
> site that was not hacked to test it(I am paranoid now that my backups won't
> help if they are corrupted). This site has Hikashop and Easyblog on it. The
> restored backup (to a new database) isn't working right. It is fine until
> you try to navigate to one of these extensions and I get an error:
> Multiple Choices
> The document name you requested (/index.php) could not be found on this
> server. However, we found documents with names similar to the one you
> requested.
>
> Available documents:
>
> /index.html (common basename)
>
> Please consider informing the owner of the referring page about the broken
> link.
>
>
>
> Any ideas why?
>
>
>
> Please make my day better!
>
> Ellen
>
>
>
> --
>
>  <http://www.ebrwebsitedesigns.com>
> Ellen Rothwax
> Web Design and Development
> Don't say you can't afford a website. . .you can't afford not to have one.
> www.ebrwebsitedesigns.com
> (P) 203 572-5756
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/492ff80d/attachment.html>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: image001.gif
> Type: image/gif
> Size: 3357 bytes
> Desc: not available
> URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/492ff80d/attachment.gif>
>
> ------------------------------
>
> _______________________________________________
> Joomla mailing list
> Joomla at lists.nyphp.org
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> End of Joomla Digest, Vol 70, Issue 10
> **************************************



-- 
Editor, DSL Prime, Fast Net News, Net Policy News and A Wireless Cloud
Author with Jennie Bourne  DSL (Wiley, 2002) and Web Video: Making It
Great, Getting It Noticed (Peachpit, 2008)


From scott at wolpow.com  Fri Oct 19 13:39:20 2012
From: scott at wolpow.com (Scott Wolpow)
Date: Fri, 19 Oct 2012 13:39:20 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
Message-ID: <50819048.8020407@wolpow.com>

I suggest using Bluehost.com and siteground.com as they were  our sponsors.
With bluehost.com when you have an issue, let me know about it after 
talking to support.

I have worked with C level management for almost 10 years now.

SW
On 10/19/2012 12:12 PM, Ellen Rothwax wrote:
> Hi folks,
> Not my day!!!!
>  I have been hacked on a couple of my Joomla sites in the past few 
> days. All are hosted on 1 & 1 , they are 1.5 and 2.5 sites, all the 
> latest versions.
> The hacks are different. One was redirecting to msn.com 
> <http://msn.com> another messed with my htaccess file and something in 
> the backend because oddly enough although I can see it, the dropdown 
> navigation in the backend doesn't work.The navigation icons in the 
> control panel do, but once you get to a different page, the save and 
> close buttons don't work. I am having the host roll back their backups 
> because mine are not helping.
> Has anyone had this experience?
> Other than using Admin tools and removing references to Joomla, any 
> suggestions to securing the sites better?
>
> On a different note, I just tried to restore a backup to a backup site 
> on a site that was not hacked to test it(I am paranoid now that my 
> backups won't help if they are corrupted). This site has Hikashop and 
> Easyblog on it. The restored backup (to a new database) isn't working 
> right. It is fine until you try to navigate to one of these extensions 
> and I get an error:
> Multiple Choices
> The document name you requested (/index.php) could not be found on 
> this server. However, we found documents with names similar to the one 
> you requested.
>
> Available documents:
>
> /index.html (common basename)
>
> Please consider informing the owner of the referring page about the 
> broken link.
>
>
> Any ideas why?
>
>
> Please make my day better!
>
> Ellen
>
>
>
> -- 
>
> <http://www.ebrwebsitedesigns.com>
> Ellen Rothwax
> Web Design and Development
> */Don't say you can't afford a website. . .you can't afford not to 
> have one.
> /*www.ebrwebsitedesigns.com <http://www.ebrwebsitedesigns.com>*/
> /*(P) 203 572-5756*/
> /*
>
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

-- 
Scott Wolpow
718 275 7765
-------------------
I am participating in the
MS Charity Bike ride to raise
Money for this good cause,
can you please support my ride. 
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354>
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/aacbc4a6/attachment.html>

From wkamm at rvyriptide.org  Fri Oct 19 15:21:55 2012
From: wkamm at rvyriptide.org (Bill Kamm)
Date: Fri, 19 Oct 2012 15:21:55 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CAOXGsbLrynxJA9AbNi__VcazVxwC04djPo54wOcBdb3A8bPw7w@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
	<CAOXGsbLrynxJA9AbNi__VcazVxwC04djPo54wOcBdb3A8bPw7w@mail.gmail.com>
Message-ID: <CAMd9GUupy+0eUksxTyY_VJzY_uZBF+Az6F09jCn3+kHTuYRfkw@mail.gmail.com>

I also had a bad experience with 1 and 1, but not with site hacking.  When
I tried to transfer my domain name to a different registrar, the offshore
people I talked to dragged their feet, promising everything but delivering
nothing.  They had all kinds of excuses for not releasing the domain name.
It took several weeks to accomplish it.  They were very unprofessional and
for their size, surprisingly seemed like a small mom and pop company, with
no established procedures in place.

Bill

On Fri, Oct 19, 2012 at 1:01 PM, Matt Thomas <matt at betweenbrain.com> wrote:

> On Fri, Oct 19, 2012 at 12:12 PM, Ellen Rothwax <ellen.rothwax at gmail.com>wrote:
>
>>
>> Other than using Admin tools and removing references to Joomla, any
>> suggestions to securing the sites better?
>
>
> Having used 1&1 in the past, and having sites hacked when using them, I
> changed to a different host and most of my security issues when away. I now
> host my own sites on servers that I build and stop most exploits long
> before they even get to the website. Any good host will do that too.
>
> Make sure all *extensions* are up to date, not listed at
> http://docs.joomla.org/Vulnerable_Extensions_List and passwords are
> strong. I know that /administrator on my servers get hit with dictionary
> attacks <http://en.wikipedia.org/wiki/Dictionary_attack> 100's of times a
> day and using Admin Tools secret URL helps with that.
>
> But, your host needs to be doing something better to prevent this behavior
> before it gets to your site.
>
> Hope that helps!
>
> Best,
>
> Matt Thomas
> Founder betweenbrain <http://betweenbrain.com/>?
> Lead Developer Construct Template Development Framework<http://construct-framework.com/>
> Phone: 203.632.9322
> Twitter: @betweenbrain
> Github: https://github.com/betweenbrain
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/3b83158f/attachment.html>

From scott at wolpow.com  Fri Oct 19 15:41:36 2012
From: scott at wolpow.com (Scott Wolpow)
Date: Fri, 19 Oct 2012 15:41:36 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CAMd9GUupy+0eUksxTyY_VJzY_uZBF+Az6F09jCn3+kHTuYRfkw@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
	<CAOXGsbLrynxJA9AbNi__VcazVxwC04djPo54wOcBdb3A8bPw7w@mail.gmail.com>
	<CAMd9GUupy+0eUksxTyY_VJzY_uZBF+Az6F09jCn3+kHTuYRfkw@mail.gmail.com>
Message-ID: <5081ACF0.4070901@wolpow.com>

All United Internet companies are scammy.

Once had to deal with a mail hosting company. Lousy service, staff were 
clueless.
Turns out to be Untied Internet.

SW
On 10/19/2012 3:21 PM, Bill Kamm wrote:
> I also had a bad experience with 1 and 1, but not with site hacking.  
> When I tried to transfer my domain name to a different registrar, the 
> offshore people I talked to dragged their feet, promising everything 
> but delivering nothing.  They had all kinds of excuses for not 
> releasing the domain name.  It took several weeks to accomplish it.  
> They were very unprofessional and for their size, surprisingly seemed 
> like a small mom and pop company, with no established procedures in place.
>
> Bill
>
> On Fri, Oct 19, 2012 at 1:01 PM, Matt Thomas <matt at betweenbrain.com 
> <mailto:matt at betweenbrain.com>> wrote:
>
>     On Fri, Oct 19, 2012 at 12:12 PM, Ellen Rothwax
>     <ellen.rothwax at gmail.com <mailto:ellen.rothwax at gmail.com>> wrote:
>
>
>         Other than using Admin tools and removing references to
>         Joomla, any suggestions to securing the sites better?
>
>
>     Having used 1&1 in the past, and having sites hacked when using
>     them, I changed to a different host and most of my security issues
>     when away. I now host my own sites on servers that I build and
>     stop most exploits long before they even get to the website. Any
>     good host will do that too.
>
>     Make sure all _*extensions*_ are up to date, not listed at
>     http://docs.joomla.org/Vulnerable_Extensions_List and passwords
>     are strong. I know that /administrator on my servers get hit with
>     dictionary attacks
>     <http://en.wikipedia.org/wiki/Dictionary_attack> 100's of times a
>     day and using Admin Tools secret URL helps with that.
>
>     But, your host needs to be doing something better to prevent this
>     behavior before it gets to your site.
>
>     Hope that helps!
>
>     Best,
>
>     Matt Thomas
>     Founder betweenbrain <http://betweenbrain.com/>^(TM)
>     Lead Developer Construct Template Development Framework
>     <http://construct-framework.com/>
>     Phone: 203.632.9322 <tel:203.632.9322>
>     Twitter: @betweenbrain
>     Github: https://github.com/betweenbrain
>
>     _______________________________________________
>     New York PHP SIG: Joomla! Mailing List
>     http://lists.nyphp.org/mailman/listinfo/joomla
>
>     NYPHPCon 2006 Presentations Online
>     http://www.nyphpcon.com
>
>     Show Your Participation in New York PHP
>     http://www.nyphp.org/show_participation.php
>
>
>
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php

-- 
Scott Wolpow
718 275 7765
-------------------
I am participating in the
MS Charity Bike ride to raise
Money for this good cause,
can you please support my ride. 
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354>
<http://main.nationalmssociety.org/site/TR/Bike/NYNBikeEvents?px=2240208&pg=personal&fr_id=18354> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/f771d8d3/attachment.html>

From owain.baber at mihia.co.uk  Fri Oct 19 15:57:57 2012
From: owain.baber at mihia.co.uk (Owain M. Baber)
Date: Fri, 19 Oct 2012 20:57:57 +0100
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <18DA8933BD5742F38DD53903B0B58D81@OwnerPC>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
	<18DA8933BD5742F38DD53903B0B58D81@OwnerPC>
Message-ID: <00ae01cdae34$09c7e4c0$1d57ae40$@mihia.co.uk>

The reason you're getting 500 errors is because of a misconfiguration
concerning SEO friendly URLs, for example
http://www.ebrwebsitedesigns.com/the-process will result in an error 500,
http://www.ebrwebsitedesigns.com/index.php/the-process will display the page
correctly (note the index.php within the URL). It is most likely your
.htaccess file, make sure you have renamed it from htaccess.txt or if it
doesn't exist download another copy or restore it from backup.

 

Regards

 

OMB

 

From: joomla-bounces at lists.nyphp.org [mailto:joomla-bounces at lists.nyphp.org]
On Behalf Of Unitel
Sent: 19 October 2012 17:30
To: 'NYPHP SIG: Joomla'
Subject: Re: [joomla] having major issues with hacking and restoring
Importance: High

 

In case you don't know! I linked to your site by clicking your logo and when
I clicked your menu I got the following response.

 


"Internal Server Error


The server encountered an internal error or misconfiguration and was unable
to complete your request.

Please contact the server administrator, webadmin at kundenserver.de and inform
them of the time the error occurred, and anything you might have done that
may have caused the error.

More information about this error may be available in the server error log.

Additionally, a 500 Internal Server Error error was encountered while trying
to use an ErrorDocument to handle the request."

 

 

 

 

Best regards,

 

Marcos Miranda 

---

 

  _____  

From: joomla-bounces at lists.nyphp.org [mailto:joomla-bounces at lists.nyphp.org]
On Behalf Of Ellen Rothwax
Sent: Friday, October 19, 2012 12:13 PM
To: joomla at lists.nyphp.org
Subject: [joomla] having major issues with hacking and restoring

 

Hi folks,
Not my day!!!!
 I have been hacked on a couple of my Joomla sites in the past few days. All
are hosted on 1 & 1 , they are 1.5 and 2.5 sites, all the latest versions.
The hacks are different. One was redirecting to msn.com another messed with
my htaccess file and something in the backend because oddly enough although
I can see it, the dropdown navigation in the backend doesn't work.The
navigation icons in the control panel do, but once you get to a different
page, the save and close buttons don't work. I am having the host roll back
their backups because mine are not helping.
Has anyone had this experience? 
Other than using Admin tools and removing references to Joomla, any
suggestions to securing the sites better?

On a different note, I just tried to restore a backup to a backup site on a
site that was not hacked to test it(I am paranoid now that my backups won't
help if they are corrupted). This site has Hikashop and Easyblog on it. The
restored backup (to a new database) isn't working right. It is fine until
you try to navigate to one of these extensions and I get an error:
Multiple Choices
The document name you requested (/index.php) could not be found on this
server. However, we found documents with names similar to the one you
requested.

Available documents:

/index.html (common basename)

Please consider informing the owner of the referring page about the broken
link.

 

Any ideas why?

 

Please make my day better!

Ellen



-- 

 <http://www.ebrwebsitedesigns.com> 
Ellen Rothwax
Web Design and Development
Don't say you can't afford a website. . .you can't afford not to have one.
www.ebrwebsitedesigns.com
(P) 203 572-5756

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/a76011ec/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 3357 bytes
Desc: not available
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/a76011ec/attachment.gif>

From gjschaller at psi-13.com  Fri Oct 19 16:04:59 2012
From: gjschaller at psi-13.com (Geoffrey Schaller)
Date: Fri, 19 Oct 2012 16:04:59 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <00ae01cdae34$09c7e4c0$1d57ae40$@mihia.co.uk>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
	<18DA8933BD5742F38DD53903B0B58D81@OwnerPC>
	<00ae01cdae34$09c7e4c0$1d57ae40$@mihia.co.uk>
Message-ID: <CABr9Rm=zztOx7oyrMAT2wT6eO26Gs2ew+-Rye4j8XdfVDrKC6g@mail.gmail.com>

As someone who has yet to be hacked (knock on wood), I'd like to ask the
group - what is best practice to prevent this sort of thing?

   - I already have Akeeba Backup and Admin Tools installed
   - I run backups on a daily (DB) and weekly (whole site / server) basis,
   and store them offsite.
   - I've used Admin Tools to secure the ID of the default Admin / Super
   User account.
   - All of my extensions are up to date, and none are on the Vulnrable
   Extensions list.

I've seen a few anti-hacking tools on the JED - are they needed?  Is there
something else I should be installing, or a specific option I should use
when configuring my Joomla sites?

-Geoffrey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/906ef023/attachment.html>

From rytech123 at gmail.com  Fri Oct 19 16:08:25 2012
From: rytech123 at gmail.com (Laura Gordon)
Date: Fri, 19 Oct 2012 16:08:25 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CABr9Rm=zztOx7oyrMAT2wT6eO26Gs2ew+-Rye4j8XdfVDrKC6g@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
	<18DA8933BD5742F38DD53903B0B58D81@OwnerPC>
	<00ae01cdae34$09c7e4c0$1d57ae40$@mihia.co.uk>
	<CABr9Rm=zztOx7oyrMAT2wT6eO26Gs2ew+-Rye4j8XdfVDrKC6g@mail.gmail.com>
Message-ID: <CABbkB_ftYtg0wF8TifTH3QKduFRe6JaTn+6AJQdo_uOoMBq5rg@mail.gmail.com>

Use a GOOD HOST...

Call you host ahead of time and ask, 'do you support joomla', also find out
their backup procedures...how many backups do they keep, how easy is it to
restore?  All companies handle this very differently, some may charge you
$15 others $150, and others it can be backups by the hour, and you can just
select one...


-- Laura

On Fri, Oct 19, 2012 at 4:04 PM, Geoffrey Schaller <gjschaller at psi-13.com>wrote:

> As someone who has yet to be hacked (knock on wood), I'd like to ask the
> group - what is best practice to prevent this sort of thing?
>
>    - I already have Akeeba Backup and Admin Tools installed
>    - I run backups on a daily (DB) and weekly (whole site / server)
>    basis, and store them offsite.
>    - I've used Admin Tools to secure the ID of the default Admin / Super
>    User account.
>    - All of my extensions are up to date, and none are on the Vulnrable
>    Extensions list.
>
> I've seen a few anti-hacking tools on the JED - are they needed?  Is there
> something else I should be installing, or a specific option I should use
> when configuring my Joomla sites?
>
> -Geoffrey
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>



-- 
I have a new email address: rytech123 at gmail.com

Trainer with www.Video2Brain.com
Board Member of www.JoomlaNYC.org
Trainer for www.JoomlaTraining.com
Sponsor & Coordinator for www.JoomlaDayNYC.com

www.RytechSites.com
Dynamic Websites for your company!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/b1d46489/attachment.html>

From matt at betweenbrain.com  Fri Oct 19 16:14:29 2012
From: matt at betweenbrain.com (Matt Thomas)
Date: Fri, 19 Oct 2012 16:14:29 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CABbkB_ftYtg0wF8TifTH3QKduFRe6JaTn+6AJQdo_uOoMBq5rg@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
	<18DA8933BD5742F38DD53903B0B58D81@OwnerPC>
	<00ae01cdae34$09c7e4c0$1d57ae40$@mihia.co.uk>
	<CABr9Rm=zztOx7oyrMAT2wT6eO26Gs2ew+-Rye4j8XdfVDrKC6g@mail.gmail.com>
	<CABbkB_ftYtg0wF8TifTH3QKduFRe6JaTn+6AJQdo_uOoMBq5rg@mail.gmail.com>
Message-ID: <CAOXGsbJxsSCDdtsF7o1cbVS5HQSpYu1HD9HO+jsd8VKokzD55A@mail.gmail.com>

Take a look at
http://docs.joomla.org/Security_Checklist/Hosting_and_Server_Setup for some
other good tips when choosing a provider.

Best,

Matt Thomas
Founder betweenbrain <http://betweenbrain.com/>?
Lead Developer Construct Template Development
Framework<http://construct-framework.com/>
Phone: 203.632.9322
Twitter: @betweenbrain
Github: https://github.com/betweenbrain



On Fri, Oct 19, 2012 at 4:08 PM, Laura Gordon <rytech123 at gmail.com> wrote:

> Use a GOOD HOST...
>
> Call you host ahead of time and ask, 'do you support joomla', also find
> out their backup procedures...how many backups do they keep, how easy is it
> to restore?  All companies handle this very differently, some may charge
> you $15 others $150, and others it can be backups by the hour, and you can
> just select one...
>
>
> -- Laura
>
> On Fri, Oct 19, 2012 at 4:04 PM, Geoffrey Schaller <gjschaller at psi-13.com>wrote:
>
>> As someone who has yet to be hacked (knock on wood), I'd like to ask the
>> group - what is best practice to prevent this sort of thing?
>>
>>    - I already have Akeeba Backup and Admin Tools installed
>>    - I run backups on a daily (DB) and weekly (whole site / server)
>>    basis, and store them offsite.
>>    - I've used Admin Tools to secure the ID of the default Admin / Super
>>    User account.
>>    - All of my extensions are up to date, and none are on the Vulnrable
>>    Extensions list.
>>
>> I've seen a few anti-hacking tools on the JED - are they needed?  Is
>> there something else I should be installing, or a specific option I should
>> use when configuring my Joomla sites?
>>
>> -Geoffrey
>>
>> _______________________________________________
>> New York PHP SIG: Joomla! Mailing List
>> http://lists.nyphp.org/mailman/listinfo/joomla
>>
>> NYPHPCon 2006 Presentations Online
>> http://www.nyphpcon.com
>>
>> Show Your Participation in New York PHP
>> http://www.nyphp.org/show_participation.php
>>
>
>
>
> --
> I have a new email address: rytech123 at gmail.com
>
> Trainer with www.Video2Brain.com
> Board Member of www.JoomlaNYC.org
> Trainer for www.JoomlaTraining.com
> Sponsor & Coordinator for www.JoomlaDayNYC.com
>
> www.RytechSites.com
> Dynamic Websites for your company!
>
>
>
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/0ce82fc8/attachment.html>

From davidalanroth at gmail.com  Fri Oct 19 17:33:58 2012
From: davidalanroth at gmail.com (David Roth)
Date: Fri, 19 Oct 2012 17:33:58 -0400
Subject: [joomla] having major issues with hacking and restoring
In-Reply-To: <CABr9Rm=zztOx7oyrMAT2wT6eO26Gs2ew+-Rye4j8XdfVDrKC6g@mail.gmail.com>
References: <CALfVZ388aQO=jX+e-3V0mgb2sYkGoYm78Mm=70wqNtEjfAW+XQ@mail.gmail.com>
	<18DA8933BD5742F38DD53903B0B58D81@OwnerPC>
	<00ae01cdae34$09c7e4c0$1d57ae40$@mihia.co.uk>
	<CABr9Rm=zztOx7oyrMAT2wT6eO26Gs2ew+-Rye4j8XdfVDrKC6g@mail.gmail.com>
Message-ID: <CAN7=Vv9Vod5z-CcfArOk2vYnd+33wFY4gs9hteM8g8ORv9jyyQ@mail.gmail.com>

If the fear is that the hacking will come in through Joomla's Admin, my
advice is to protect /administrator with .htaccess. This puts another login
layer before even getting to the back-end prompt.

Long complex passwords are better. When it comes to selecting a password
for the MySQL database user, make it very long and cryptic. After all, you
won't have to be repeatedly typing that password after installation, so you
won't be troubled with a complex password to remember. Change passwords
frequently. If you use Google Calendar, put a reminder in there to change
passwords periodically.

If someone is hacking in through a method that has nothing to do with your
Joomla installation, but the web hosting service itself, then bolt to a
better service. Web hosting is very cheap now and there is competition so
look to upgrade if you can. Even though I'm not a fan of most shared
hosting services, there should at the very least be a "jail" shell for
shared users. This means that each user can't see anyone else's files or
processes running.

David Roth


On Fri, Oct 19, 2012 at 4:04 PM, Geoffrey Schaller <gjschaller at psi-13.com>wrote:

> As someone who has yet to be hacked (knock on wood), I'd like to ask the
> group - what is best practice to prevent this sort of thing?
>
>    - I already have Akeeba Backup and Admin Tools installed
>    - I run backups on a daily (DB) and weekly (whole site / server)
>    basis, and store them offsite.
>    - I've used Admin Tools to secure the ID of the default Admin / Super
>    User account.
>    - All of my extensions are up to date, and none are on the Vulnrable
>    Extensions list.
>
> I've seen a few anti-hacking tools on the JED - are they needed?  Is there
> something else I should be installing, or a specific option I should use
> when configuring my Joomla sites?
>
> -Geoffrey
>
> _______________________________________________
> New York PHP SIG: Joomla! Mailing List
> http://lists.nyphp.org/mailman/listinfo/joomla
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121019/6f4e74ee/attachment.html>

From snewfeld at zebrasystems.com  Thu Oct 25 12:10:54 2012
From: snewfeld at zebrasystems.com (Stewart Newfeld)
Date: Thu, 25 Oct 2012 16:10:54 -0000
Subject: [joomla] Free Beginners Website Design with Joomla Course
In-Reply-To: <008f01cdad4f$9dfc1f20$d9f45d60$@com>
References: <008f01cdad4f$9dfc1f20$d9f45d60$@com>
Message-ID: <000001cdb2cb$4cbfb5f0$e63f21d0$@com>

Hi Joomla People,

 

Please help me find students.

 

I am offering a free "Beginners Website Design with Joomla" course running 5
Tuesday evenings, 7-9PM, Oct. 30 - Nov. 7, 2012 at

 

xCubicle
25 Essex Street
(Lower East Side)
New York, NY 10002

 

The class will be limited to 14 students.

 

Prerequistes include:

*	Computer literacy, - you can create new directories and store and
find your documents. Send email messages with attachments.
*	Desire to do more than 2 hours per week of homework
*	Students must bring their own wireless-capable PC or MAC laptop to
class.
*	Students must obtain a copy of the course book: Joomla! Explained by
Stephen Burge, which is usually in stock at your local Barnes & Noble and
online booksellers.

I have posted the details including a full syllabus, my bio, and more  at
<http://websitestudies.com/ny/> http://websitestudies.com/ny/ including a
link to meetup where people can sign up.

 

*	 <http://www.meetup.com/New-York-Website-Study-Group/>
http://www.meetup.com/New-York-Website-Study-Group/

 

Feel free to forward this email to anyone.

 

This is my personal adventure done independently of our Joomla NYC Users
Group, but I hope my students will want to join the group and our community.

 

Thanks.  

 

Stewart Newfeld



Zebra Systems, Inc.

Computer Network & Website Support

131 Joralemon Street, Apt. 52

Brooklyn, NY 11201

www.zebrasystems.com

212.675.8414

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121025/f258ec0e/attachment.html>

From compustretch at gmail.com  Fri Oct 26 15:23:36 2012
From: compustretch at gmail.com (forest mars)
Date: Fri, 26 Oct 2012 15:23:36 -0400
Subject: [joomla] Installing Joomla 2.5.6 in Acquia Drupal Dev Desktop
Message-ID: <CA+q4bwP0DikZbumDbSkL=uTVqdw_m6FLVveBdWkOCmA+1qxm7A@mail.gmail.com>

Installing Joomla 2.5.6 in Acquia Drupal Dev Desktop

*http://danreb.com/content/installing-joomla-256-acquia-drupal-dev-desktop*





Forest Mars
-- 
"In theory, theory and practice are exactly the same.
In practice, they're completely different."
------------------------------------------------------------------
This email is:
[   ]  private: do not forward
[ x ]  o.k. to forward
[   ]  o.k. to blog
[   ] ask first
-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and
its affiliated companies. (Diffie-Helman/DSS-only version)

iQA/AwUBRkjTLDbz7LySoccvEQJDcQCguZZj4M4kOVOlOX4CtbgR0rppsdovAjra
3RRXIlkdzuYI0YJz4WyvKlTn
=MLhk
-----END PGP SIGNATURE-----
------------------------------------------------------------------
The New TLDs are Here!
Switch to Name.Space: http://namespace.org/switch
Support new domains & keep free media free! Register yours today!
https://secure.name-space.com/registry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121026/87069a38/attachment.html>

From snewfeld at zebrasystems.com  Mon Oct 29 10:43:13 2012
From: snewfeld at zebrasystems.com (Stewart Newfeld)
Date: Mon, 29 Oct 2012 10:43:13 -0400
Subject: [joomla] Free Joomla Class filling up
Message-ID: <00e901cdb5e3$b9be1be0$2d3a53a0$@com>

Hi Joomla Group,

 

Registration for the Free 5-Tuesday evenings "Beginning Website Design with
Joomla" class went live on meetup.com at 8PM last night and 8 people
registered since then.

 

Space is limited to 14 people, so if you are interested act now.

 

http://www.meetup.com/New-York-Website-Study-Group/

 

http://www.websitestudies.com/ny/course-details

 

 

Stewart Newfeld



Zebra Systems, Inc.

Computer Network & Website Support

131 Joralemon Street, Apt. 52

Brooklyn, NY 11201

www.zebrasystems.com

212.675.8414

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nyphp.org/pipermail/joomla/attachments/20121029/a401502b/attachment.html>