A video introduction to Watchful

Last week, I interviewed Vic Drover, Watchful’s co-founder. This introduction to Watchful was part of an online Joomla user group, hosted by Joomlashack. Vic talked about the background of Watchful and went over many of the key features. If you’re new to Watchful, or curious about how it can benefit Read more

By Steve Burge, ago

Watchful is Moving HTPASSWD credentials out of your URL

For many years, Watchful has been able to handle private sites protected by basic authentication (also known as htpasswd) by simply incorporating the basic authentication credentials into the site and administrator URL fields. This method involved adding the username and password directly to the URL, like this: user:password @ domain.com Read more

By Vic Drover, ago

New Watchful clients and SSO plugin enhance encryption

We have recently released new versions of our Joomla Client (v1.12.2), WordPress Client (v1.0.2) & the SSO Plugin for Joomla (v1.3). New Joomla & WordPress Clients The updated Joomla and WordPress clients improve the way we authenticate calls from the Watchful server so as to avoid a theoretical timing attack: http://php.net/manual/en/function.hash-hmac.php#111435). Read more

By Vic Drover, ago

Joomla vulnerability requires immediate update

UPDATE, 21-Dec-2015: Please review this updated security announcement. On 14 December 2015, the Joomla project announced a new security vulnerability affecting all current versions of Joomla 1.5 through 3.4.5. This vulnerability has been detected in the wild, has been fully documented publicly, and remains an active threat to the security and Read more

By Vic Drover, ago