Joomla! 4.2.8 is now available. This is a security release for the 4.x series of Joomla! which addresses a critical security vulnerability in the web services API. We strongly recommend that you update your sites immediately.
This release only contains the security fix; no other changes have been made compared to the Joomla! 4.2.7 release. After the release, we strongly advise you to renew the passwords for all credentials that are stored in the global site configuration, namely:
- database
- SMTP
- Redis
- HTTP proxy
The issue has been reported in a responsible disclosure process, there have been no signs of exploitation on public sites.
Security issues fixed with 4.2.8
- [20230201] - Core - Improper access check in webservice endpoints
Click or press here for full release information.
It's extremely important to keep your Joomla installation, and extensions up to date to minimise the risk of your site being compromised, you should also check that you are not using vulnerable extensions by visiting Joomla! Vulnerable Extensions List.
Many site owners are totally unaware of the status of their Joomla websites, databases, and hosting environments, the potential risks of being compromised, and the implications of private personal data held. Also many site owners are paying extortionate hosting fees for below standard services running on out of date and insecure hosting environments.
What Joomla Support Services do you provide?
Supporting, building, hosting, maintaining and optimising and all kinds of Joomla websites since 2005 we have gained vast experience. This combined with our Joomla Website Support System enables us to work very efficiently with any Joomla related project.
We have worked on several hundred Joomla websites ranging from sites with a few pages to sites with several hundred thousand pages including multi language sites. Taking on all kinds of Joomla related projects, including;
- Adding additional functionality.
- Adding content delivery networks.
- Adding E-Commerce along with shopping carts.
- Adding multiple anti-spam solutions.
- Adding payment gateways.
- Adding user management and subscription memberships.
- Building new Joomla websites.
- Customising Joomla extensions.
- Customising Joomla templates.
- Developing all kinds of forms including API integrations and auto field population using GeoIP services.
- Developing custom Joomla extensions.
- Developing custom Joomla templates.
- Implementing GDPR compliance.
- Implementing HTTP security headers.
- Joomla Extension Installation and configuration.
- Joomla Installation and configuration on your hosting.
- Joomla search engine marketing,
- Joomla search engine optimisation.
- Joomla site backup restoration on your hosting.
- Joomla version updates
- Joomla website speed optimisation.
- Making Joomla websites responsive and mobile friendly.
- Malware removal including file and database cleanup.
- Migrating existing websites to Joomla including WordPress and none CMS websites.
- Producing AMP versions of Joomla websites.
- Resolving security-related issues.
- SSL certificate installation.
along with support and training, and anything required to keep Joomla Websites fast, functional, secure, and stable.
Once you become a customer you get access to a Highly Experienced Joomla Developer and;
- Access to our secure private support helpdesk site where access credentials are kept along with tasks and changes which are documented in detail.
- Use of our ticketing system where bugs can be reported, questions asked, and additional features can be requested.
Do you take backups?
Yes, prior to making any changes to your Joomla website;
- We ensure you have an adequate backup system in place and take a backup of the site and database. Our preferred backup component is Akeeba Backup Professional for Joomla! (Commercial License $55), If your site doesn't already have it we will Install and configure it on your website.
- When a site has major issues or requires major extension upgrades, major Joomla version upgrades, template or template framework upgrades, major PHP version changes etc.. we clone the site and produce a test site to test changes prior to making changes to your live site. We are very experienced and understand which updates are safe and which updates cause problems. We prefer to put a test site on a sub domain to achieve some separation from a live site but this all depends on your hosting setup.
We have several VPS servers including a development Ubuntu/Plesk server with big storage attached where most Joomla sites we manage transfer an encrypted backup to each day. Apart from backup storage this is very useful to spin up a copy of a site for development, Joomla or PHP updates etc. This is useful if your host only allows one database for example and a test site is required for major updates, also on some occasions we have set up an older PHP version that most hosts don't allow so we can restore an old broken site for development.
Can you update our Joomla version and extensions?
Yes, for Joomla version updates order our hourly Joomla Specialist Support and Maintenance service, press the add to cart button, select a minimum of one hour and submit a ticket on our helpdesk.
Once you become a customer you get access to a Highly Experienced Joomla Developer and;
- Access to our secure private support helpdesk site where access credentials are kept along with tasks and changes which are documented in detail.
- Use of our ticketing system where bugs can be reported, questions asked, and additional features can be requested.
Once an order is placed for the first time and paid for we create you a user account on our secure private support helpdesk site where we will request information which you can provide securely, Your access credentials will be emailed to you as soon as your account is created.
Prepaid support it given high priority, with all of our hourly support time is charged in 10 minute increments and the week ends each Sunday at midnight UK time. All time is logged in your private area on our secure private support helpdesk and detailed invoices are issued weekly along with account statements.
What about major Joomla updates, rebuilds and redesigns?
If you are considering major updates and getting your site stable, fast, secure and to the Latest Joomla version see our Joomla Website and Hosting Audit service. Our full audit of the Joomla Website and Hosting including extensions, templates, overrides, SEO status, page delivery speed status, configuration and security.
Following the audit and testing you will receive a detailed report including the status of your site and your hosting along with detailed recommendations and options for updating your site including templates and extensions.
You can then address the issues yourself, use your existing developer or use our Joomla Specialist services to ensure that your site is stable and secure and your hosting is adequate and configured correctly.
Once you become a customer you get access to a Highly Experienced Joomla Developer and;
- Access to our secure private support helpdesk site where access credentials are kept along with tasks and changes which are documented in detail.
- Use of our ticketing system where bugs can be reported, questions asked, and additional features can be requested.
I have an Urgent Joomla website problem, can you help?
Yes, we have a Joomla Website and Hosting Diagnostics service for these situations. We analyse the Joomla website errors if web pages are broken or a site is down and create a detailed report with a list of recommendations for resolving issues on the site. If we have a solution that can be applied quickly even as a temporary fix we will fix the issue for you.
Based on the analysis you will be provided with a detailed report and a list of recommendations for resolving issues on the site. You can then address the issues yourself, use your existing developer or use our Joomla Specialist services.
Includes;
- Access to our secure private support helpdesk site where all analysis, testing, recommendations, and changes are documented in detail.
- Use of our ticketing system where bugs can be reported, questions asked, and additional features can be requested.
Once an order is placed for the first time and paid for we create you a user account on our secure private support helpdesk site where we will request information which you can provide securely, Your access credentials will be emailed to you as soon as your account is created.
Please note that even though we produce and maintain Joomla websites in multiple languages for multiple clients worldwide our native language is English.
Do you provide ongoing Joomla Support and Maintenance?
Yes we provide ongoing Joomla Support and Maintenance Services to keep your Joomla website and extensions up to date. Once a site is added to our support system we usually agree a maximum monthly spend which will never be exceeded without prior authorisation and the site is kept up to date on a regular basis.
Contact us to discuss ongoing Joomla Support and Maintenance Services.
Related Content
The Joomla Project is pleased to announce the release of Joomla 5.3, the latest minor version in the Joomla 5 series.This release focuses on thoughtfu...
The Joomla! Project is pleased to announce the release of Joomla 5.2.6 and Joomla 4.4.13. This is a security release for the 5.x and 4.x series of Joo...
Let's celebrate! The Joomla! Project is pleased to announce the release of Joomla 5.2.5 and Joomla 4.4.12. This is a security and bugfix release for t...
Let's celebrate! The Joomla! Project is pleased to announce the release of Joomla 5.2.4 and Joomla 4.4.11. This is a security and bug fix release for ...
