Joomla is now shipped with additional security hardenings in the default htaccess.txt and web.config.txt files. These hardenings disable the so called MIME-type sniffing feature in web browsers. The sniffing leads to specific attack vectors, where scripts in normally harmless file formats (eg images) will be executed, leading to Cross-Site-Scripting vulnerabilities.
The security team recommends to manually apply the necessary changes to existing .htaccess or web.config files, as those files can not be updated automatically.
Changes for .htaccess
Add the following lines before \"## Mod_rewrite in use.\":
<IfModule mod_headers.c>\nHeader always set X-Content-Type-Options \"nosniff\"\n</IfModule>
Changes for web.config
Add the following lines right after \"</rewrite>\":
<httpProtocol>\n <customHeaders>\n <add name=\"X-Content-Type-Options\" value=\"nosniff\" />\n </customHeaders>\n</httpProtocol>" +COM_CPANEL_MSG_ADDNOSNIFF_BODY="
Joomla is now shipped with additional security hardenings in the default htaccess.txt and web.config.txt files. These hardenings disable the so called MIME-type sniffing feature in web browsers. The sniffing leads to specific attack vectors, where scripts in normally harmless file formats (eg images) will be executed, leading to Cross-Site-Scripting vulnerabilities.
The security team recommends to manually apply the necessary changes to existing .htaccess or web.config files, as those files can not be updated automatically.
Changes for .htaccess
Add the following lines before \"## Mod_rewrite in use.\":
<IfModule mod_headers.c>\nHeader always set X-Content-Type-Options \"nosniff\"\n</IfModule>
Changes for web.config
Add the following lines right after \"</rewrite>\":
<httpProtocol>\n <customHeaders>\n <add name=\"X-Content-Type-Options\" value=\"nosniff\" />\n </customHeaders>\n</httpProtocol>" COM_CPANEL_MSG_ADDNOSNIFF_TITLE=".htaccess & web.config Security Update" COM_CPANEL_MSG_HTACCESS_BODY="A change to the default .htaccess and web.config files was made in Joomla! 3.4 to disallow folder listings by default. Users are recommended to implement this change in their files. Please see this page for more information." COM_CPANEL_MSG_HTACCESS_TITLE=".htaccess & web.config Update" diff --git a/plugins/sampledata/testing/language/en-GB/en-GB.plg_sampledata_testing.ini b/plugins/sampledata/testing/language/en-GB/en-GB.plg_sampledata_testing.ini index a69641de99df5..d10807abeffb5 100644 --- a/plugins/sampledata/testing/language/en-GB/en-GB.plg_sampledata_testing.ini +++ b/plugins/sampledata/testing/language/en-GB/en-GB.plg_sampledata_testing.ini @@ -69,7 +69,7 @@ PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTACT_CONTACT_7_NAME="Shop Address" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTACT_CONTACT_7_SUBURB="Our Province" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTACT_CONTACT_7_TELEPHONE="555-555-5555" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_00_FULLTEXT="" -PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_00_INTROTEXT="
All components are also used in the administrator area of your website. In addition to the ones listed here, there are components in the administrator that do not have direct front end displays, but do help shape your site. The most important ones for most users are
The media manager component lets you upload and insert images into content throughout your site. Optionally, you can enable the flash uploader which will allow you to to upload multiple images. Help
The extensions manager lets you install, update, uninstall and manage all of your extensions. The extensions manager has been extensively redesigned, although the core install and uninstall functionality remains the same as in Joomla! 1.5. Help
The menu manager lets you create the menus you see displayed on your site. It also allows you to assign modules and template styles to specific menu links. Help
The global configuration is where the site administrator configures things such as whether search engine friendly urls are enabled, the site meta data (descriptive text used by search engines and indexers) and other functions. For many beginning users simply leaving the settings on default is a good way to begin, although when your site is ready for the public you will want to change the meta data to match its content. Help
The banners component provides a simple way to display a rotating image in a module and, if you wish to have advertising, a way to track the number of times an image is viewed and clicked. Help
The redirect component is used to manage broken links that produce Page Not Found (404) errors. If enabled it will allow you to redirect broken links to specific pages. It can also be used to manage migration related URL changes. Help
" +PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_00_INTROTEXT="All components are also used in the administrator area of your website. In addition to the ones listed here, there are components in the administrator that do not have direct front end displays, but do help shape your site. The most important ones for most users are
The media manager component lets you upload and insert images into content throughout your site. Optionally, you can enable the flash uploader which will allow you to to upload multiple images. Help
The extensions manager lets you install, update, uninstall and manage all of your extensions. The extensions manager has been extensively redesigned, although the core install and uninstall functionality remains the same as in Joomla! 1.5. Help
The menu manager lets you create the menus you see displayed on your site. It also allows you to assign modules and template styles to specific menu links. Help
The global configuration is where the site administrator configures things such as whether search engine friendly urls are enabled, the site meta data (descriptive text used by search engines and indexers) and other functions. For many beginning users simply leaving the settings on default is a good way to begin, although when your site is ready for the public you will want to change the meta data to match its content. Help
The banners component provides a simple way to display a rotating image in a module and, if you wish to have advertising, a way to track the number of times an image is viewed and clicked. Help
The redirect component is used to manage broken links that produce Page Not Found (404) errors. If enabled it will allow you to redirect broken links to specific pages. It can also be used to manage migration related URL changes. Help
" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_00_TITLE="Administrator Components" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_01_FULLTEXT="" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_01_INTROTEXT="This module shows a list of the calendar months containing archived articles. After you have changed the status of an article to archived, this list will be automatically generated. Help
The Joomla Project consists of all of the people who make and support the Joomla Web Platform and Content Management System.
Our mission is to provide a flexible platform for digital publishing and collaboration.
The core values are:
In our vision, we see:
There are millions of users around the world and thousands of people who contribute to the Joomla Project. They work in three main groups: the Production Working Group, responsible for everything that goes into software and documentation; the Community Working Group, responsible for creating a nurturing the community; and Open Source Matters, the non profit organization responsible for managing legal, financial and organizational issues.
Joomla is a free and open source project, which uses the GNU General Public License version 2 or later.
" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_47_TITLE="The Joomla! Project" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_48_FULLTEXT="" -PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_48_INTROTEXT="P The quick brown fox ran over the lazy dog. THE QUICK BROWN FOX RAN OVER THE LAZY DOG.
P The quick brown fox ran over the lazy dog. THE QUICK BROWN FOX RAN OVER THE LAZY DOG.
The new user manager will let you manage who has access to what in your site. You can leave access groups exactly the way you had them in Joomla 1.5 or make them as complicated as you want. You can learn more about how access control works in on the Joomla! Documentation site
In Joomla 1.5 and 1.0 content was organized into sections and categories. From 1.6 forward sections are gone, and you can create categories within categories, going as deep as you want. The sample data provides many examples of the use of nested categories.
All layouts have been redesigned to improve accessibility and flexibility.
Updating your site and extensions when needed is easier than ever thanks to installer improvements.
" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_49_INTROTEXT="
If you are an experienced Joomla! 1.5 user, this Joomla site will seem very familiar. There are new templates and improved user interfaces, but most functionality is the same. The biggest changes are improved access control (ACL) and nested categories. This release of Joomla has strong continuity with Joomla! 1.7 while adding enhancements.
" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_49_TITLE="Upgraders" PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_50_FULLTEXT="" -PLG_SAMPLEDATA_TESTING_SAMPLEDATA_CONTENT_ARTICLE_50_INTROTEXT="Default on:
Default off:
Two new plugins are available but are disabled by default.
Default on:
Default off:
Two new plugins are available but are disabled by default.
The users extension lets your site visitors register, login and logout, change their passwords and other information, and recover lost passwords. In the administrator it allows you to create, block and manage users and create user groups and access levels. Help
Please note that some of the user views will not display if you are not logged-in to the site.
"