CustomCSS

CustomCSS Plugin

This Joomla plugin lets you load a custom.css / custom.min.css when the template does not support that out of the box.

Sponsoring and Donation

You use this extension in an commercial context and / or want to support me and give something back?

There are two ways to support me right now:
- This extension is part of , write bug fixes, improving features and maintain my extensions.
- You just want to send me an one-time donation? Great you can do this via .

Thanks for your support!

Feature

This plugin checks whether a custom.css (or custom.min.css) file exists at /templates/"templatename"/css or /administrator/templates/"templatename"/css. If present, it will be loaded to the site.
- With a custom.css you can overwrite the template css files.
- This file will not be touched by an update.
- To use the plugin please activate it. Control Pannel --> Extensions --> Plugins --> System - Template custom.css.

Update Server

Please note that my update server only supports the latest version running the latest version of Joomla and atleast PHP 7.0.
Any other plugin version I may have added to the download section don't get updates using the update server.

Issues / Translations

You have found an Issue, you have done a translation or have a question / suggestion regarding the plugin?
or submit a pull request with the proposed changes.

Details: Category: Latest Extensions

PrivacyCheckbox

PrivacyCheckbox Plugin

This Joomla plugin lets you create new fields of type 'privacycheckbox' in any extensions where custom fields are supported.

Sponsoring and Donation

You use this extension in an commercial context and / or want to support me and give something back?

Thanks for your support!

Feature

This plugin allows you to creates a single checkbox field in any form that supports custom fields e.g. in the contact form where you can make sure the privacy message is checked. But this also allow any other single checkbox usecase. Over the core plugin this allows to use a `` tag inside of the message to be shown to the user. Any other html tag is going to be removed.

Configuration

Initial setup the plugin with the example for the contact form

Download the latest version of the plugin: https://github.com/zero-24/plgfieldsprivacycheckbox/releases/latest
Install & Enable the plugin
Create a new custom field for the email form of the contact component

Components -> Contacts -> Fields Select the contect Mail from the dropdown Create the custom field using New Set the desired title for the field Set the type to privacycheckbox Add your desired text to the Checkbox Note field (You can include links using the `` tag) Add your desired text to the Email Text field Go to the permission tab and allow Public to Edit Custom Field Value Save & Close See the Joomla Core Contact Form extended with our consent field

Option descriptions

Checkbox Note

This is the message showed next to the checkbox containing your message about privacy.

Email Text

This is the message included in the email send to the user next to the custom field. Per default it is just checked.

Implement multilanguage

This field support two different ways to be translated into different languages.

Using a language string

For the checkbox note you can add any string you want and override them with the desired text foreach language.

For example for the Checkbox Note text:
- Enter the self defined Language Constant PLG_FIELDS_PRIVACYCHECKBOX_CUSTOM_CONTENT (it works with any string)
- Go to the Language Overrider: Extensions -> Language(s) -> Overrides.
- Select your desired target language
- Create the Language Constant by using New
- The field Language Constant contain the constant we set in the plugin settings
- The field Text contain the override per language.
- Save & Close
- Select the next language and so on.

The plugin read the translation from the overrides and fallback to the en-GB value.

Using the language assignment field

As this plugin is a fields plugin you can assign a language to the field. So in case of multilanguage you can create a field that is assigned to de-DE and another one that is assigned to en-GB with the desired texts configured in the plugin.

Global Plugin Options

All field plugins have the possibility to be configured with global default options.

To configure this please go to the Plugin Configuration:
- Extensions -> Plugins
- Use the search tools to filter for Type == fields
- You will find the Fields - Privacy Checkbox plugin
- Edit the plugin

There you find both the Checkbox Note and the Email Text field to be configured globally.

Update Server

Issues / Translations

You have found an Issue, you have done a translation or have a question / suggestion regarding the plugin?
or submit a pull request with the proposed changes.

Details: Category: Latest Extensions

JED Team Meeting - March 27th, 2020

The Joomla! Extensions Directory (JED) team met on March 27th, 2020, at 15hs UTC, via Glip to discuss our progress of current tasks.

In attendance: Anibal Sanchez, Jaz Parkyn, Carlos Cámara, Hugh Douglas-Smith, Luca Marzo, and Mark Lee.
Absent: Dénes Székely, Daniel Dubois,Tony Partridge and Troy Hall.

...

Details: Category: JBlogs

HttpHeader

HttpHeader Plugin

This Joomla Plugin implements an UI Layer for the HTTP Security headers so everyone can set and configure them from the backend.

Sponsoring and Donation

You use this extension in an commercial context and / or want to support me and give something back?
There are two ways to support me right now:
- This extension is part of , write bug fixes, improving features and maintain my extensions.
- You just want to send me an one-time donation? Great you can do this via .

Thanks for your support!

Features

This Joomla Plugin helps you to set the following HTTP Security Headers.
- Strict-Transport-Security
- Content-Security-Policy
- Content-Security-Policy-Report-Only
- X-Frame-Options
- X-XSS-Protection
- X-Content-Type-Options
- Referrer-Policy
- Expect-CT
- Feature-Policy

This plugin also comes with some easy defaults for:
- X-Frame-Options
- X-XSS-Protection
- X-Content-Type-Options
- Referrer-Policy

Configuration

Initial setup the plugin

Download the latest version of the plugin: https://github.com/zero-24/plgsystemhttpheader/releases/latest
Install the plugin using Upload & Install
Enable the plugin form the plugin manager

Now the inital setup is completed and you can start configure the headers.

Default Headers

Please note that by default the following headers und values are set:
X-Frame-Options: SAMEORIGIN
More Infos: https://scotthelme.co.uk/hardening-your-http-response-headers/#x-frame-options
X-XSS-Protection: 1; mode=block
More Infos: https://scotthelme.co.uk/hardening-your-http-response-headers/#x-xss-protection
X-Content-Type-Options: nosniff
More Infos: https://scotthelme.co.uk/hardening-your-http-response-headers/#x-content-type-options
Referrer-Policy: no-referrer-when-downgrade
More Infos: https://scotthelme.co.uk/a-new-security-header-referrer-policy/

You can allways choose to disable or change the value for one of those by changing the plugin configuration.

Option descriptions

Force HTTP Header

Using this you can set different values from the default ones and also force headers. The supported headers are:
- Strict-Transport-Security
- Content-Security-Policy
- Content-Security-Policy-Report-Only
- X-Frame-Options
- X-XSS-Protection
- X-Content-Type-Options
- Referrer-Policy
- Expect-CT
- Feature-Policy

Here you can also decide whether the header is applyed only to the frontend and or only the backed or both sites.

HTTP Strict Transport Security (HSTS)

This option activates 'Strict Transport Security' and allows the configuration of the value of that header including Include subdomains, Maximum registration time (max-age) and Preload.

HSTS means that your domain can no longer be called without HTTPS. Once added to the preload list, this is not easy to undo. Domains can be removed, but it takes months for users to make a change with a browser update. This option is very important to prevent for recording.

Content Security Policy (CSP)

With this option the Content-Security-Policy rule can be set individually including an dedicated subform for the the different directives as well as setting the rules in Report-Only mode.

Translations

This plugin is translated into the following languages:
- de-DE by @zero-24
- en-GB by @zero-24 & @brianteeman
- fr-FR by @Sandra97 & @YGomiero
- it-IT by @jeckodevelopment
- nl-NL by @pe7er

You want to contribute a translation for an additional language? Feel free to create an Pull Request against the master branch.

Update Server

Issues / Pull Requests

You have found an Issue or have an question / suggestion regarding the plugin, or do you want to propose code changes?
or submit a pull request with the proposed changes against the master branch.

Beyond this repo

This plugin has been included in the Joomla Core ( and extended by the new com_csp component for to core distribution.

Special Thanks

David Jardin - @snipersister - https://www.djumla.de/ & Yves Hoppe - @yvesh - https://compojoom.com/

For giving me the inspiration for the plugin and their feedback on the actual implementation. Thanks :+1:

Details: Category: Latest Extensions

Joomla Officer Replacement Elections - Nominee Announcement 2020

We are happy to announce that the nominations for Group 2 Officers replacements have been finalised. The following individuals have proposed their nominations, according to the new Nomination process. Included are their Manifestos and the timeline for the election for their role.