Web Design Blog

The Joomla 3.7 release added new features AND 8 (eight) low-level security patches.

What they should have done, was to release 3.6.6 with all of the security patches as a ‘security’ release.   Then, after the dust settles, release v3.7.0 with the new functionality.  They combined both “security” and “new functionality” into the 3.7 release.  To me, it seems they should have pushed the security patches into 3.6.6 and then the new features into 3.7, rather than a combination. 

The result is a scramble in the Joomla community where everyone rushes to install version 3.7 because it contains security patches.  Then, another scramble to install 3.7.1 because 3.7.0 had a new security issue.  It seems like a racket, no? 

This article was originally posted on SearchEngineLand.com

Google often provides useful information to the SEO community, but columnist Nate Dame argues that ultimately, the company's advice is in their best interest, not yours -- so make sure you understand the nuances.

Last month, Google released a video detailing best practices for hiring an SEO company, and it is positioned to become the go-to guide for hiring an SEO. After all, who better to tell companies what they should look for in an SEO than the operators of the world’s most popular search engine?

Starting in January 2017, any website with a "login" form visible (e.g. Client Logins, Shopping Carts, etc) will show an "insecure" message in the browser's address bar if the site does not have an SSL certificate properly installed and configured.

Particularly for my clients that are security-minded, it's important to consider how to proceed with this information.  Some of my clients already have SSL certificates running on their sites, even ones that don't process credit cards.  For clients who already process credit cards, their sites already have the necessary SSL encryption certificate (https), so this is a non-issue. 

I had been researching this issue for a client and wanted to share it with everyone.  My client and I had been discussing the ability to collect recurring payments via PayPal WITHOUT requiring the user to have an actual PayPal account. 

I recently received an email that is referenced in this forum thread.  I was going to post my response on this other site but it tried to get me to sign up for a premium plan in order to post a response.  Instead, I am posting it here:

Solution after finding myself unable to print multiple lines on my Quickbooks Invoices.  Seems like there are a lot of other people who posted similar problems and Intuit was fairly unresponsive.  Hopefully this video will help shed some light on the issue.  I almost wound up typing an amount and hourly rate for EVERY line on my invoices, even though only 1 line per invoice was actually required.  Yikes! 

I noticed that after installing the Joomla 3.6.4 security patch, the background color of the /administrator control panel login screen changed.  It seems that with today's release of Joomla 3.6.4, and ease of which the exploit can be executed, it's really bad timing to make it so easy for hackers to see whether or not a site has been patched.  This latest Joomla exploit allows for a person to do two things:

I just encountered an issue after upgrading a client's site to Joomla 3.6.4.  I was presented with the following error message on both the front end and back end of the site:

Error displaying the error page: Illegal mix of collations (utf8_unicode_ci,IMPLICIT) and (utf8_general_ci,IMPLICIT) for operation '=' SQL=SELECT id, home, template, s.params FROM #__template_styles as s LEFT JOIN #__extensions as e ON e.element=s.template AND e.type='template' AND e.client_id=s.client_id WHERE s.client_id = 0 AND e.enabled = 1: Illegal mix of collations (utf8_unicode_ci,IMPLICIT) and (utf8_general_ci,IMPLICIT) for operation '=' SQL=SELECT id, home, template, s.params FROM #__template_styles as s LEFT JOIN #__extensions as e ON e.element=s.template AND e.type='template' AND e.client_id=s.client_id WHERE s.client_id = 0 AND e.enabled = 1

I received another "Is this legit?" questions from a client today, and wanted to share so that others can also avoid this.

These people are combining “SEO” with “Registration” in their tactics, which is total shenanigans… it’s like a mechanic telling you that your car needs a new muffler bearing.  There is no such thing. 

I was recently frustrated when trying to find a freely available, open source responsive slider / slideshow plugin for Joomla K2 items.  It seems there are plenty available if you are willing to pay, but for something this simple, I figured I would roll my own and share. 

Notes:

  • This particular example is for using the K2 Joomla component, but the same overall concept will apply to any type of module that supports the standard Joomla template override structure.
  • Since it's hand-coded, it will apply to all versions / platforms of Joomla: 1.5.x, 2.5.x, 3.x
  • See "attachments" area for downloads, including the flexslider library, readme, template override, and new CSS.
  • Click here for demo

Directions:

=============

1.  Add the following jQuery and FlexSlider script to your template’s index.php file:

Latest Comments

Got a similar email that seemed suspicious. Ignored it and they even followed up today.
My organization received one of these emails from "Linda," but uses https://www.bestprosintown.com/p...
Hi Nate, I got the same email template from the same email address today and found you through a ...
Just received one today (16 Aug 2022) from "Mailchimp". Thanks for sharing!
Thanks for posting this. I just got one today. I was 99% sure it was a scam, and your post confirmed...


Design & Development

Wordpress, Drupal, Joomla
New custom websites
Bespoke themes and extensions
Redesigns, upgrades, migrations

Web Design & Development


Optimization & SEO

Let us optimize and manage your overall online presence. We offer full service monthly SEO as well as one-time projects.  

Optimization Plans & Pricing


Maintenance, Patching

White glove monthly backups, security updates, maintenance and testing for your Wordpress, Drupal, or Joomla site.

Maintenance Plans & Pricing


Email Newsletter

Bring your web & marketing performance to the next level: monthly blog post roundup via email.  

Stay in Touch!