Joomla! Discussion Forums

Artio released version 2.0.0 of JoomSEF last night (AEST time) and they still persist with publishing and distributing their JoomSEF component with hidden adverts in the Meta Generator tag.

This time they got a little sneaky in their hidden adverts and hid it a couple of levels down in base64 encoded strings and files.  They have gone to great lengths to hide not only the adverts but their URL translation code in base64 encoded files.  In this release I have also decoded their hidden working code for translating URL's and encoding URL's - the way they have written the code is almost unreadable because of function and variable names but still makes for interesting browsing.

Thanks for another release Artio but again with the Meta Generator tags!? .. I guess there is some flexibility in the GNU/GPL license if they are able to do this !!!

Anyway, download is on my website.  Search "JoomSEF patch" on Google, top result, Kanga Internet.  Free and no obligations but if you think its useful then help support my site by linking to it from your own - 5000 downloads and no one has yet, will you be the first?

Here is a direct link to the download page:
http://www.kangainternet.com/remository ... oad-4.html

Hi Kanga,

Two issues:

* I just updated to 2.0.0 (patched version / before i used pathed version 1.5) and somehow all my links got messed up. I had a backup of links, uploaded it, but somehow my site still displayed the SEF URLs (and not the customs). Any idea why? ( i manually fixed it...which took me hourssss ...but just in case i need to update again later sometime).

* the meta robot tags and so on do not work. Any idea on this?

Thanks

From Artio website ..

What's new in 2.1.0:

    * New feature - 301 redirection functionality
    * Bug fix - mambot PHP4 compatibility problems

What's new in 2.0.2:

    * Bug fix - trailing slash toleration not working correctly
    * Bug fix - "save as custom redirect" not pre-checked on URL customization

What's new in 2.0.1:

    * Bug fix - unistalling plug-in extensions does not remove DB information correctly
    * Bug fix - mambot not working correctly



...... But I have not released a patched version of any of these yet as there might be licensing issues (v2.0.1+) and I am researching this further before releasing any more patches.

Thanks for your reply Kanga. I checked the forums today (Joomla + Artio) and with regards to the Metatag issue id say an upgrade is best. Not sure how you feel about all that... but uh, so yeah i prefer to wait for another one of your polished versions. So please keep us all posted on the licensing issues. 

I have decided to just go ahead and release the 2.1.0 version.  I doubt there will be any backlash from Artio but you never know.  I have read and re-read the GPL several times and there are plenty of points that JoomSEF fits under.

Look for a release on my site tomorrow morning AEST .. 9 hours from now.

Works like a charm *makes a bow*

If you like it then please link to it from your website .. keeps us interested in patching and releasing.

You may also want to cast a vote on JED or write a small review

http://extensions.joomla.org/component/ ... Itemid,35/

Any help in positioning us above Artio in the JED is appreciated ..

the issue is not only about hidden advertising and other shady techniques (see my thread about
the lamers of JoomlaTinyFCK / JTF) but about the overall security of all these 3rd party addons.

can we trust them ?
do we need to read every php files before even installing an addon ?

even the great IRCmaxell cache component has a damn advertising
link at the bottom, Jambook has a hidden link as well in H1 tag, other
adsense modules also have hidden stuff or even replace randomly your adsense
code with theirs.

last i've seen today was JCE developer pretending 20$
for the plugins and locking-in old versions with the excuse
of a bug...

i mean, i don't wanna call them malware or spyware but
as i said already, they should either go commercial
or just release clean addons.

first of all because people have got too used to
free stuff and should be a bit re-educated on the good old
"you get what you pay" motto, secondly on the other
side there are guys pretending to make bucks
publishing a plugin and infesting their site with ads
hiding the download in any way (see the JTC guys).

the fact is, open source is hardly a steady business model,
certain coders should seriously get a life.

i see plenty of serious publishers for joomla components,
take iJoomla and many others for instance.

you CAN make money with joomla, but it seems
many cheap programmers don't have the minimum
required skills to get into the market.

i don't mind paying for something worth
but i really can't tolerate spyware, spam, and
malware.

wonder what unskilled users can do to fight this ?
nothing, they'll have their sites filled of hidden
crap and they probably will never realize it.

I can't comment on the others you speak of but certainly for JoomSEF I think there is a clear business model for any addons or plugins to work with other components.  For example: You install JoomSEF and you want to use it with Virtuemart - there is a commercial plugin.  They currently do this and I presume they make money out of it.

The adverts in the JoomSEF component are to increase their revenue through third party advertisers.  Again its not a huge deal that they include this - even Joomla have their own adverts on first install.  The adverts should be clear and easy enough to turn off like Joomla does with their banners.

Anyway .. I agree there are plenty of commercial components that make money from components.

yes, there's certainly a market for this, at least for some type of important addons,
what i can't stand is spyware and hidden crap and this is happening more and more
often.

Hmm... I have no personal interest whatsoever concerning JCE, but this statement of yours has to be corrected.
It is a known fact that, after the 1.0.13 upgrade, JCE HAD to be updated and older versions can't be used anymore.
The little amount of 20$ for the extended plug-ins is definitely worth it IMO and those who do not need the features may still use the free version which contains all basic plug-ins.

Therefore, it is not an "excuse", as you state. I suggest you verify your facts before posting in these forums.

Another aspect of the rules you seem to ignore: see http://forum.joomla.org/index.php/topic,65.0.html

This is the reason why your post on Tinyfck has been deleted.

Thanks for taking these remarks into consideration.

Hi infograf768,

With all due respect, in whose interest is it to hide bad behavior?

I for one would like to know what/who to look out for when I go on my random travels through the JED.

If something has the potential to tarnish Joomla's reputation, it should be thoroughly uncovered and made public.

This is a public forum where the "defendants" (developers of the dodgy scripts) have a right and opportunity to respond so why not?

As Joomla leaders/moderators, you have a duty to protect your users... allowing members to publish information on crooked developers/scripts is in the greater public interest.

"Bad behaviour" is a very relative matter and it usually quickly degenerates
Our rules are to not allow wall of shame here and keep these forum peaceful.

You are free to discuss these rules directly on the JED forums or with this forum admins.

well i don't have much to add at this point.

of course you're not responsible for 3rd party addons but
unlike a standalone installation, 3rd party addons can easily break
up the whole CMS so in one way or another 3rd party apps
are partially responsible for the good or bad reputation of Joomla itself.

i use many other CMSs and one of the reason i like Joomla is
the huge number of addons.

if it turns out that most of them are crap or unsecure or
containing spyware/malware and that it's even forbidden
to talk about it in this forum, well, thanks for your job
but there's plenty of other good cms around.

as for JCE please have a look at their forum and the many
angry complaints, they clearly talk or "ripoff", not of "bugs"
but what can i know in the end....

[ADDED by MOD (infograf768: the "many" complaints are just a few coming from people confusing free as in free beer with free as in "free open code". Please stop that rant.]

"bad behaviour" : while i certainly agree to avoid useless rants
nobody can deny some 3rd party devs are a bunch of crooks.

feel free to delete this post as well.

.

what i think is clear from this discussion is that components are all lumped together into the JED with no thought or insight on the impact on the end users.  I think it might be of consideration to have segments within the JED for commercial components, spam/advert components and spam/advert free components.

If the JED team were to segregate the components into appropriate groups and seperate directories (that concern end users) then it would be
1. much easier for a Joomla admin to know what they are getting into without having to find out once installed or on a product purchase page
2. limit the exposure of the components that are spam or advertising in disguise at the will of the JED team
3. motivate Joomla component developers to remove spam and adverts from their code because they are hampered or limited in exposure on the JED therefore not getting free traffic from JED

My personal opinion on the ordering for the on page JED directory I am suggesting - in order of importance would be
1. Free components with NO Spam
2. Commercial components
3. Components with Spam

while we certainly agree i don't think the JED guys will.

do you mind if i open a new discussion "joomla 3rd party ad-ware : Who's to blame ? "  ?

you're welcome.

Any suggestion you have concerning the JED organisation, please post, calmly, here:
http://forum.joomla.org/index.php/board,262.0.html

Thanks

merci Jean Marie, mais ma discussion regardant JTF, pas JDE.

JED = Joomla Extension Directory
http://extensions.joomla.org/

I think the JED do a great job .. why would you EVER bag them?!  They provide us with updated joomla components and resources.  They look out for the whole community and they cannot react to an individuals issues without some forethought and understanding.

I do like your fire and think everyone should have an opinion but just because there are issues with independently written components does not mean the JED are at fault.  Take a chill pill joomborg.

i will,
but again i was referrnig to joomlaTinyFCK, not JED (the editor) or JED (extension directory).

by the way,

i'm deeply impressed by the speed my rants moved the waters :

- Jambook has been patched by the author and adware has been removed.
- the other addons i mentioned have been screened and authors contacted
by some joomla devs.


no where else i ever witnessed such a fast and responsive action.
kudos the joomla devs, and sorry for my rant and raves.

Joomborg

You were reffering to a lot of stuff.
Let me repeat again then:
J C E is an editor, J E D is the extension directory, TinyFCK is an editor.

Any comment about an extension present on J E D (the directory), please do in the extension report.
The admins of JED (the directory) will review it and check its validity. If necessary they will act to get a correction.
They already did concerning your other post and thanked you for your report.
EDIT: Just read your post. they do not need a rant on the forums to do that... 
Thanks

Apologies accepted btw. 

I've just finished a Joomla site with the Artio installed and the pages converted over to static file names.  After looking at the source code, I realize this advertising within the meta tags.  I don't mind Artio being list but it just blows me away to see "Plastic and Cosmetic Surgery" added to it.

So just today, I found this patch. I wanted to know if I have to backup my html file library, uninstall the old Artio and next install the new 'patched' version and then import the html file library??

Thanks.

it is always wise to backup before doing any installs or upgrades anyway so as a matter of course then yeah, why not, this way you are covered should anything unforeseen happen - I doubt it though! 

I have never bothered when installing or upgrading joomsef and have never had any issues with my own Joomsef patched versions.  Always better to be cautious though ..

Hi there cdiprose, this is a cool modification. I was really thinking of leaving ArtioSEF in favour of another tool.
I will link to your site - what keyword text/phrase do you want in the link?

Hi! I have Joomla 1.5 RC3 and I try to install this wonderful plugin but I have this errors:



Please, anyone can help me? 

JoomSEF 2.0.x is only for Joomla 1.0.xx.