The Joomla! Forum ™

Download

Demo


Board index » Joomla! Older Version Support » Joomla! 1.0 » Security - 1.0.x

Forum rules


Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.



Post new topic Reply to topic  Page 1 of 1
  [ 11 posts ] 
  Print view Previous topic | Next topic 
Author Message
whiteboxlabs
 Post subject: Definitive selective SSL
PostPosted: Tue Apr 11, 2006 7:15 pm 
User avatar
Joomla! Intern
Joomla! Intern
Offline

Joined: Wed Aug 24, 2005 7:31 pm
Posts: 63
Hi there I am hoping someone can with some definitive selective ssl questions.  I've scoured the forum and there are lots of possible solutions (which I have tried to no avail), but nothing definitive.

In addition, many of the hacks that worked in $ambo do not work in Joomla!

I am running 1.0.8 on LAMP with a dedicated SSL from Geotrust.

I am also aware this has been promised in Joomla!1.1 as a bot, but last I knew that was still unstable.

The common issues with nearly everyone are as follows:

1)  Securing the login.
2)  Securing the Admin section in it's entirety.
3)  Images throwing non-secure errors (the little IE popup window)
4)  That famous little favicon

Anyone have any definitive answers?
Top
 Profile  
 
pbland
PostPosted: Sun Apr 23, 2006 2:07 am 
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Sun Apr 23, 2006 2:06 am
Posts: 8
whiteboxlabs,

have you received any help from someone? I have the same questions and would be interested in receiving any info.

Thanks,
Paul
Top
 Profile  
 
virtualmaker
PostPosted: Mon Apr 24, 2006 12:34 am 
User avatar
Joomla! Enthusiast
Joomla! Enthusiast
Offline

Joined: Tue Nov 08, 2005 10:44 pm
Posts: 178
Location: Madrid
Hi,

I´m very interested in the same questions too.

Regards.

_________________
http://www.auto-hunter.es
Top
 Profile  
 
pbland
PostPosted: Mon Apr 24, 2006 3:57 am 
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Sun Apr 23, 2006 2:06 am
Posts: 8
I've read numerous posts by people asking similiar questions on how to incorporate ssl properly and most of the posts never received a response. I hope someone can help us all out.

Thanks.
Top
 Profile  
 
stingrey
PostPosted: Mon Apr 24, 2006 7:58 am 
User avatar
Joomla! Hero
Joomla! Hero
Offline

Joined: Mon Aug 15, 2005 4:36 pm
Posts: 2756
Location: Marikina, Metro Manila, Philippines
The short answer is that it is not easy to achieve in Joomla! 1.0.x codebase.  It requires hacking of multiple areas of the core.  Something not for the timid to engage in and makes it difficult to upgrade to future versions within the 1.0.x codebase.

This is because of the use of non-ssl live site path references throughout the code.
In 1.5 codebase this has been cleaned up and the path settings centralized and SSL support being natively handled by the core.

_________________
Rey Gigataras - Joomlatools Team Member
http://www.joomlatools.eu <-- Joomla extensions that just work
http://path.to/rey.gigataras <-- About Me :)
Online Community Manager, Support Engineer, Web Developer, Event Manager, Sports Coach :D
Top
 Profile  
 
whiteboxlabs
PostPosted: Mon Apr 24, 2006 10:24 am 
User avatar
Joomla! Intern
Joomla! Intern
Offline

Joined: Wed Aug 24, 2005 7:31 pm
Posts: 63
stingrey wrote:
The short answer is that it is not easy to achieve in Joomla! 1.0.x codebase.  It requires hacking of multiple areas of the core.  Something not for the timid to engage in and makes it difficult to upgrade to future versions within the 1.0.x codebase.

This is because of the use of non-ssl live site path references throughout the code.
In 1.5 codebase this has been cleaned up and the path settings centralized and SSL support being natively handled by the core.




Any word on 1.5's timeline?
Top
 Profile  
 
stingrey
PostPosted: Mon Apr 24, 2006 10:31 am 
User avatar
Joomla! Hero
Joomla! Hero
Offline

Joined: Mon Aug 15, 2005 4:36 pm
Posts: 2756
Location: Marikina, Metro Manila, Philippines
whiteboxlabs wrote:
Any word on 1.5's timeline?

Joomla! 1.5 is on the Horizon
http://www.joomla.org/content/view/1102/74/

Development Cycle
http://dev.joomla.org/content/view/39/63/

Development Status
http://dev.joomla.org/content/view/1139/82/

_________________
Rey Gigataras - Joomlatools Team Member
http://www.joomlatools.eu <-- Joomla extensions that just work
http://path.to/rey.gigataras <-- About Me :)
Online Community Manager, Support Engineer, Web Developer, Event Manager, Sports Coach :D
Top
 Profile  
 
virtualmaker
PostPosted: Mon Apr 24, 2006 11:18 am 
User avatar
Joomla! Enthusiast
Joomla! Enthusiast
Offline

Joined: Tue Nov 08, 2005 10:44 pm
Posts: 178
Location: Madrid
[/size]]Hi!

Thanks stingrey.

Regards.

_________________
http://www.auto-hunter.es
Top
 Profile  
 
pbland
PostPosted: Mon Apr 24, 2006 9:59 pm 
Joomla! Apprentice
Joomla! Apprentice
Offline

Joined: Sun Apr 23, 2006 2:06 am
Posts: 8
Thanks stingrey, I appreciate your response. I'm looking forward to 1.5.
Top
 Profile  
 
whiteboxlabs
PostPosted: Tue Apr 25, 2006 12:14 pm 
User avatar
Joomla! Intern
Joomla! Intern
Offline

Joined: Wed Aug 24, 2005 7:31 pm
Posts: 63
I've been going through some of the dev site and am really looking forward to the 1.5 version.

It sounds like it will have some significant advancements for building commercial grade sites and applications.

Stingrey... thanks for the update
Top
 Profile  
 
norman
PostPosted: Sun Jun 11, 2006 1:52 pm 
User avatar
Joomla! Enthusiast
Joomla! Enthusiast
Offline

Joined: Thu Aug 18, 2005 2:25 pm
Posts: 107
Location: us
I haven't tried this on a joomla site yet but it works quite well on a mambo site. It will run the entire site in ssl

Put this in your .htaccess
#/administrator/.htaccess
RewriteEngine On
RewriteRule ^/$ /index.php
RewriteCond %{SERVER_PORT} !443$
RewriteRule ^(.*) https://www.your-site.com/$1 [R=301,L]

the atached document is an old security document somewone wrote for Mambo


You do not have the required permissions to view the files attached to this post.

_________________
"The journey is the destination"
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 11 posts ] 


Board index » Joomla! Older Version Support » Joomla! 1.0 » Security - 1.0.x

Who is online

Users browsing this forum: No registered users and 4 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group