Even if you may think that your site has nothing worth stealing, there are for sure tens of attempts daily that you are not even aware of. A lot of so called "script kiddies" are running automated intrusion attempts on lists of sites, lists that may include your website. Securing your Joomla website is a blend of careful planning, making sure you run the latest software versions, and always keeping up with the latest community announcements. There are some tips that help you secure your website and allow you to have a better protection against attackers.

On November 11th, our Team uncovered a major vulnerability in the OpenCart based Joomla Extensions MijoShop and AceShop that allows any malicious user to get access to your website.

The threat level is very high and we urge any user that has a live installation of these two 3rd-party extensions to act immediately! We advise that users should ask the developers of these extensions for a security-update, but in the meantime we provide an easy fix for both extensions, in order to help the webmasters community.

We have confirmed the vulnerability in MijoShop version 2.4.x and 2.5.x, Aceshop version 4.1.x
At the moment of the discovery the latest versions (all affected) were MijoShop 2.5.1 and Aceshop 4.1.3

Update - Mijoshop 2.5.2 is out including the fix for this issue. We urge users that have active subscription to download the official update from the developer website.

Join us at the Joomladay UK 2011 on 24-25th September in London! Our staff
members will be attending the Event and will be available for questions
and idea exchanges with you or your colleagues!

You can meet Erik and Alex and have a chat with them about Joomla and other topics!

ImageImage
 
Erik Folberth

Alexandru Dinoci

 

Also in order to celebrate the event we offer great Deals on our products!
(Check our newsletter, or if you did not receive it - drop us a line through our contact form! )

 

 

The latest Social Community Joomla Extension - Love Factory 2.4.0 allows users to interact in the same way they are used on larger dating or social networking sites, allowing also to use the full power of Joomla features. Using a templating system (in this case we have a simple and an advanced system) your web site will keep a coherent look and a nice web 2.0 feeling. Read more..

Love Factory 2.4.0 released on August 18, 2011.   

  • Support for Joomla 1.7.x.

Love Factory 2.3.7 released on August 1, 2011.  

  • Fixed issues regarding Google map location on user profile view in backend, tags on notifications emails, deleting videos, display banned users on dashboard, dashboard payments, gallery, text field on advanced search page using slider, search condition on text field, random members module (members displayed on rows), create new group link shown when users were not allowed to create new groups, admin creating group from backend with no Love Factory profile (photo, link), backend dashboard latest reports (report type not defined).

Love Factory 2.3.6 released on June 23, 2011.      

  • New feature: Love Factory Latest Viewed: visits are no longer stored in session, but in the database; added date display mode option; added show unique/all option.
  • New feature: possibility to select where to redirect the user after logging in using the Login Form (not the module); requires the Love Factory System plugin to be enabled.
  • Fixed issues regarding display mode in Love Factory Profile Visitors module, My Friends pagination, default language for email notifications, "&" in members map members links.

Love Factory 2.3.5 released on June 9, 2011.       

  • New feature: option to show unique visitors or all visits on the Profile Visitors module.  
  • New feature: Info Bar enabled by default.
  • New feature: added pagination to the Random Members module.
    New feature: email notifications enabled by default for new users.
  • Fixed issues regarding pagination on Latest Members module, permissions when creating the user folder on registration, email notifications field disabled if email notifications are disabled from settings, last seen on field value.

Love Factory 2.3.4 released on April 27, 2011.      

  • New feature: members with same location shown as list (with pagination) in Members' Map and Radius Search page.
  • New feature: member's info shown as tool tip in Members' Map and Radius Search page.
  • New feature: display x number of groups per page.
  • Fixed issues regarding using location fields to determine user position and user location is empty (remove old location), sending multiple notification mails to admins when user changes membership, payment when gender pricing is enabled, swf-upload when system language plugin is enabled, empty option line for fields, template, photo comment add when system language plugin enabled, registration mail as html format, height field when set to metric, spacer field on edit and search page, users not active for "Session Lifetime" minutes (from Global Configuration) will be shown as offline, spacer field update, users online search condition, main photo upload field on the registration page (when not required and user doesn't upload a photo), profile status update with UTF-8 characters, Latest Members module display under IE 7, etc.

Love Factory 2.3.3 released on April 8, 2011.     

  • New feature: option to show/hide members with default membership from searches: quick and advanced (enable/disable option in back-end settings). 
  • Fixed issues regarding user profile page link, membership plans page (no. of months, smarty display), payment gateway confirmation (dispaly no. of months), swfuploader debug mode, main photo upload on fill-in page IE 7, missing language strings.

Love Factory 2.3.2 released on April 6, 2011.    

  • New feature: Location Fields are now set in the Integration zone for Google Maps: city, state, country.

Love Factory 2.3.1 released on April 4, 2011.   

  • Fixed issues regarding added blank option to date of birth, in case date of birth is not required, users are not assigned a default birth date, AJAX search for friends on Top Friends page.
 Love Factory

Collection Factory allows collectors to create and maintain a user-friendly database of their collected items, organizing them in unlimited categories and subcategories (nested model) and including various statistical and financial reports, helping to keep evidence of owned items, but also keeping record of the missing ones.

For e-Commerce purposes, the collector has only to enable the built-in cart feature of component, then Collection Factory will offer also a full Shopping-Cart solution, with ordering system, payment gateways and invoices. Main component features are:

  • unlimited category levels,
  • personalized fields for collecting purposes,
  • extended search and filtering options,
  • Shopping cart with payment gateways Paypal, Moneybookers and bank wire,
  • categories module, search module, multiple module for user criteria, random module
  • bulk upload supporting CSV files
  • export as XLS,
  • statistical and financial reports,
  • backup/restore,
  • customizable language and CSS files.
 Collection Factory

For a complete description, please check the "User's Guide" PDF document (approx 3.3MB).

Collection Factory 2.1.0 released on May 24, 2010.

    New features: Favorites list added to the menu module.
    Community Builder plugin: Orders History (each user can see only his own orders).
    Community Builder plugin: Favorites Items (the administrator can set if the list is private or public).

Collection Factory 2.0.0 released on March 31, 2010.


    Redeveloped for Joomla 1.6.x.