@JoomReem

Building the unbreakable web. 🛠️ Joomla Development + Automation workflows. Turning 'manual data entry' into history.

joomreem.com
Joined March 2013
  • Tweets2K
  • Following458
  • Followers345
272Media
From 24.6s to 2.4s. 🤯 I was reviewing the beta test data from Richard, and I realized I had to share this before the launch closes today. He tested JR Image Optimizer on his site's 13 slowest pages.
1
143
"Long awaited replacement for RokSprocket" ⭐⭐⭐⭐⭐ A new JED review of JR Prism. Trevor's feature request became the Strips layout in 1.3. Thanks, Trevor! extensions.joomla.org/extens… #Joomla #Joomla5 #Joomla6
10
Still on RokSprocket? JR Prism 1.3 is out: 8 layouts for your Joomla content, styled by your own template. New: Strips, a horizontal scrolling row. Lite free · Pro $24/yr for all your sites joomreem.com/jr-prism-pro-1-…
18
JR Prism 1.2.0 is out. A customer asked for the article date. Now every layout can show the date, author, category and hits under each item. Lite and Pro. Off by default, so nothing changes until you turn it on. #Joomla
1
1
18
Release notes and docs: joomreem.com/jr-prism

JR Prism - Joomla Content Showcase Module

JR Prism showcases your Joomla content in responsive grids, carousels, tabs, mosaics, and more. The modern, maintained RokSprocket replacement. Free Lite.

joomreem.com
4
JoomReem retweeted
Joomla!@joomlaSep 30
Known issue with 5.4.9 Web Services API PATCH requests fail: Trying to update an item (for example, a banner or a user entry) via Web Services API fails with a fatal error. The fix for this problem is documented here: manual.joomla.org/updates/53… #Joomla #CMS #OpenSource #Release
Announcement for Joomla! 6.1.4 & 5.4.9

ALT Announcement for Joomla! 6.1.4 & 5.4.9

5
12
727
🚨 Last day. The 21% Joomla birthday discount ends tonight. Code JOOMLA21 → joomreem.com/extension-store #Joomla
13
48 hours left. ⏰ After Sep 20, the 21% birthday discount is gone. Code JOOMLA21 → joomreem.com/extension-store #Joomla #JoomlaExtensions
9
⏳ One week left. 21% off all JoomReem extensions ends Sep 20. Code: JOOMLA21 joomreem.com/extension-store #Joomla
17
Joomla site slowing down as the database grows? "Add more caching" is not the fix. By default #Joomla stores sessions in the database, so every visitor competes with your content queries. Move the Session Handler to Filesystem or Redis first. It fixes a lot on its own. #MySQL
1
19
Full playbook: joomreem.com/joomla-resource… #Joomla #MySQL

How to Optimize Joomla Performance With a Large MySQL Database

Joomla slowing down under a large MySQL database? Fix session storage, find the real slow queries, block bad bots, and cut page weight the right way.

joomreem.com
10
Joomla's core "System - HTTP Headers" plugin is more capable than people give it credit for. Full CSP builder, HSTS, COOP, referrer policy, all in the UI. But it has two gaps worth knowing. #Joomla
1
37
more replies
And a gotcha that bites people: Joomla's CSP nonce is 64 bytes, not the 16 you see in most CSP examples online. Copy a generic nonce rule and it will not match.
1
14
I wrote up the exact config for all of it: joomreem.com/joomla-resource…

What Joomla's HTTP Headers Plugin Can (and Can't) Do: X-Content-Type-Options, CORP, and the CSP...

A practical look at Joomla's core System - HTTP Headers plugin: which security headers it covers, which two it doesn't (yet), and how to fill the gaps.

joomreem.com
6
Even if someone steals your Joomla admin password, this stops them getting in. 2-minute walkthrough: add a passkey as a second layer of login with Joomla's built-in Passkeys plugin. Password first, then your phone or fingerprint confirms it. #Joomla #WebSecurity #Passkeys
1
26
Second factor, not passwordless. Your password stays. Hardening help: joomreem.com/services?utm_so… #Joomla #WebSecurity #Passkeys

Services

Joomla 3 is end of life. I migrate and modernise Joomla sites: core upgrade, template, dead-extension replacement, and custom dev, with near-zero downtime.

joomreem.com
16
A Joomla site on the latest core, fully patched, behind a strict WAF — got hacked anyway. It surfaced on the community forums, and the chain is worth walking. 🧵 #Joomla
1
32
Core Smart Search (com_finder) was feeding user-controlled input into a third-party plugin capable of executing PHP inside content. The real hole: a legitimate capability + an unexpected input path = RCE. The WAF blocked some attempts, missed the encoded one.
1
12
From there: RCE → defines.php rewritten → persistent access. "Patched + WAF" ≠ "safe." Your real attack surface is every capability a site has turned on, not just the CVEs you're missing. I broke down the full chain + a hardening checklist: joomreem.com/joomla-resource…

How a "Secure" Joomla Site Got Hacked Anyway: A Real Attack Chain

A Joomla site with a WAF and updated core still got hacked. Here's the exact attack chain, why the WAF didn't stop it, and the checklist that would have.

joomreem.com
1
35
Joomla's 21st birthday gift is still on: 21% off every JoomReem extension. 🎉 Code JOOMLA21 at checkout. Ends Sep 20. 👉 joomreem.com/extension-store #Joomla #JoomlaExtensions
27
Load more