For many years, Watchful has been able to handle private sites protected by basic authentication (also known as htpasswd) by simply incorporating the basic authentication credentials into the site and administrator URL fields. This method involved adding the username and password directly to the URL, like this: user:password @ domain.com Read more
We have recently released new versions of our Joomla Client (v1.12.2), WordPress Client (v1.0.2) & the SSO Plugin for Joomla (v1.3). New Joomla & WordPress Clients The updated Joomla and WordPress clients improve the way we authenticate calls from the Watchful server so as to avoid a theoretical timing attack: http://php.net/manual/en/function.hash-hmac.php#111435). Read more
This week the Joomla project released an important update for its 3.6 series: Joomla 3.6.4. Since this version included a patch for an important security issue, Joomla published an announcement a few days prior stating the exact release date and time to help users prepare and plan for the update. Read more
Website developers and owners must remain vigilant to the emerging threats in Joomla and its ecosystem of extensions and templates. Use the Joomla security resources below to learn the best methods of building and maintaining safer websites. 1. Joomla security checklist The Joomla Security Checklist is the perfect place to start when Read more
On 21 December 2015, the Joomla project announced a new security vulnerability affecting all current versions of Joomla 1.5 through 3.4.6. This vulnerability builds on a similar security issue patched one week ago and we recommend that all Joomla websites update immediately. Updating Joomla 3 sites We strongly advise you to update Read more
UPDATE, 21-Dec-2015: Please review this updated security announcement. On 14 December 2015, the Joomla project announced a new security vulnerability affecting all current versions of Joomla 1.5 through 3.4.5. This vulnerability has been detected in the wild, has been fully documented publicly, and remains an active threat to the security and Read more
Every time your Joomla website loads, the template kicks into gear to deliver the desired experience. Given this central role, Joomla template security is one of the key steps to preventing unauthorized access to your web server or the insertion of spam or graffiti on your site. The following tips Read more
On 16 October 2015, the Joomla project announced that three security vulnerabilities had been identified in Joomla 3. Together, the vulnerabilities affect all versions of Joomla between v3.0 and v3.4.4 inclusively. On 22 October 2015, the Joomla project released Joomla 3.4.5 which patches these issues. Just 90 minutes after this release, third-party Read more
Today is Watchful’s three year anniversary of enhancing Joomla website security with centralized updates, backups, and improved management. To celebrate, we are launching our new auditing tool that performs deep scans of your website and file system. The audit not only detects deviations from Joomla best-practices, but also hacked core files, Read more
We are excited to finally announce the public release of our latest tool for Joomla — the website audit! We internally tested the audit tool for months, as well as privately releasing it to our beta testers 4 weeks ago. On Monday we silently released it to the public in Read more