Since there have recently been many hacks of joomla websites through 3rd party components, does anyone analyze the components before they are listed on the extensions site?
And when an extension is found to be vulnerable, does anyone remove it from the downloads until there is a fix?
approval and removal of extensions
Moderators: tydust, LorenzoG, timothy.stiffler
-
brokengecko
- Joomla! Fledgling
- Posts: 2
- Joined: Sun Aug 21, 2005 10:38 pm
Re: approval and removal of extensions
The Editorial Team cannot test each extension. We rely on users to post reviews or report issues with the extensions which we review. If an extension is clearly a security risk we generally unpublish the listing and contact the developers.
brokengecko wrote:Since there have recently been many hacks of joomla websites through 3rd party components, does anyone analyze the components before they are listed on the extensions site?
And when an extension is found to be vulnerable, does anyone remove it from the downloads until there is a fix?
http://gigcalendar.net: the world's first free solution for maintaining a touring calendar for Joomla!
Re: approval and removal of extensions
^^
Maybe we should have some sort of extension test team to test for functionality and check to make sure that its not full of security holes.
Maybe we should have some sort of extension test team to test for functionality and check to make sure that its not full of security holes.
Have a question? Visit the Joomla! FAQ first to see if has been answered already.
http://docs.joomla.org/FAQs
JoomlaPack - an Open Source Backup Component for Joomla!- http://www.joomlapack.net
http://docs.joomla.org/FAQs
JoomlaPack - an Open Source Backup Component for Joomla!- http://www.joomlapack.net
-
brad
- Joomla! Hero
- Posts: 2212
- Joined: Fri Aug 12, 2005 12:38 am
- Skype: tested
- Location: Sydney - Australia
- Contact:
Re: approval and removal of extensions
igeoffi wrote:^^
Maybe we should have some sort of extension test team to test for functionality and check to make sure that its not full of security holes.
Wonderful idea, however we are stretched for resources as usual. Would you like to join one of the working groups to assist?
Last edited by brad on Sun Jul 23, 2006 6:26 am, edited 1 time in total.
Brad Baker - Joomla! Core Team, Sites & Infrastructure.
http://www.rochen.com - Managed Dedicated, Reseller & Multiple Domain Hosting.
http://www.joomlatutorials.com <-- Joomla! 1.5 & 1.0.x
^New Joomla 1.5 Tutorials are out!
http://www.rochen.com - Managed Dedicated, Reseller & Multiple Domain Hosting.
http://www.joomlatutorials.com <-- Joomla! 1.5 & 1.0.x
^New Joomla 1.5 Tutorials are out!
Re: approval and removal of extensions
igeoffi wrote:^^
Maybe we should have some sort of extension test team to test for functionality and check to make sure that its not full of security holes.
That is essentially what is happening. We have the entire Joomla userbase as a test group helping us watch all of the published extensions. Feel free to use the "Report Extension" feature to alert the editorial team of any issues.
http://gigcalendar.net: the world's first free solution for maintaining a touring calendar for Joomla!
Re: approval and removal of extensions
brad wrote:igeoffi wrote:^^
Maybe we should have some sort of extension test team to test for functionality and check to make sure that its not full of security holes.
Wonderful idea, however we are stretched for resources as usual. Would you like to join one of the working groups to assist?
I wouldn't mind helping out.
Have a question? Visit the Joomla! FAQ first to see if has been answered already.
http://docs.joomla.org/FAQs
JoomlaPack - an Open Source Backup Component for Joomla!- http://www.joomlapack.net
http://docs.joomla.org/FAQs
JoomlaPack - an Open Source Backup Component for Joomla!- http://www.joomlapack.net
-
brad
- Joomla! Hero
- Posts: 2212
- Joined: Fri Aug 12, 2005 12:38 am
- Skype: tested
- Location: Sydney - Australia
- Contact:
Re: approval and removal of extensions
igeoffi, I have sent you PM and email.... 
Brad Baker - Joomla! Core Team, Sites & Infrastructure.
http://www.rochen.com - Managed Dedicated, Reseller & Multiple Domain Hosting.
http://www.joomlatutorials.com <-- Joomla! 1.5 & 1.0.x
^New Joomla 1.5 Tutorials are out!
http://www.rochen.com - Managed Dedicated, Reseller & Multiple Domain Hosting.
http://www.joomlatutorials.com <-- Joomla! 1.5 & 1.0.x
^New Joomla 1.5 Tutorials are out!
-
maxfiles
Re: approval and removal of extensions
I like that idea.
I have writen two extensions, and would like to know if my programming skills need more work, I wrote the homeland security mod, and another google pagerank mod, both under this username in extensions area.
I would be happy to see if I am good at my programming skills.
Max
I have writen two extensions, and would like to know if my programming skills need more work, I wrote the homeland security mod, and another google pagerank mod, both under this username in extensions area.
I would be happy to see if I am good at my programming skills.
Max
