Add extension not auto-updatable warning

[NetVicious]

Hi!

I got one site hacked due to one old extension not upgraded from a lot of time because this extension don't had the auto-upgrade feature integrated on Joomla 2.5 (jdownloads extension).

I thought I was secure because Joomla show me all extensions were updated, but I discovered in a bad way this it's a false sense of secured Joomla.

I see on the http://extensions.joomla.org site there is a feature which shows it's the extension uses updater or not.

I will love to see that information in a new column on our Extensions Management web page to see at a glance which extensions I should check externally to avoid security problems.

Regards,

[micokelana]

Joomla extensions update cycle is different with the core joomla. So if there is no auto update feature from the extension you have to check manually from the extension developer website.

[NetVicious]

Hi micokelana,

Thanks for answer.

Yes I know it (in the hard way).

I'm only asking to see on the Manage Extensions page in our installed Joomla! one new column with a little icon which show us if the extension uses the Joomla Updater or not. If not, a click on that icon should redirect us to the Extensions website.

Without this help we need to check each extension on the Extension Developer website to see if it's using Updater or not.

[mandville]

i suppose if you signed up for their newsletter then it would tell you they had updated

[NetVicious]

I don't see any mailing list on it's site. And extensions.joomla.org seems on the same situation, no way to receive a warning about new versions of only one extension.

I saw there exists http://extensions.joomla.org/newsletter but there are hundreds of extensions on the site and it could be very spammy.

I'm only suggesting a way to know easily which extensions are covered into the updater and which others not.

The information it's published on each extension on it's xml manifest file within the <updateUrl> tag. It's only a new column on the manager of the extensions or it could be published on another page showing only the extensions which are not using the Updater.