JoomReem (@JoomReem) header
JoomReem (@JoomReem) profile picture

JoomReem

@JoomReem

Building the unbreakable web. 🛠️ Joomla Development + Automation workflows. Turning 'manual data entry' into history.

joomreem.com
Joined March 2013
  • Tweets2K
  • Following457
  • Followers348
From 24.6s to 2.4s. 🤯 I was reviewing the beta test data from Richard, and I realized I had to share this before the launch closes today. He tested JR Image Optimizer on his site's 13 slowest pages.
Image from JoomReem (@JoomReem)
Image from JoomReem (@JoomReem)
1
146
Joomla 6.1 includes a Proof of Work captcha. No image puzzles. No API keys. The browser solves a math task, and the visitor does nothing. One trap: on plain HTTP, the box never finishes. Written guide with every setting: joomreem.com/joomla-resource… #Joomla
7
Joomla 6.1 adds Video, Audio and Document custom fields. Pick a file in the Media Manager, type {field 1}, and you get a native HTML5 player. No iframes. Written guide with every setting: joomreem.com/joomla-resource… #Joomla
1
17
RokSprocket is gone. Plain article lists are not enough. JR Prism turns your Joomla articles into 8 layouts. Change the layout in one setting. Lite is free. Pro is $24/yr. joomreem.com/jr-prism?utm_so… #Joomla
26
"Long awaited replacement for RokSprocket" ⭐⭐⭐⭐⭐ A new JED review of JR Prism. Trevor's feature request became the Strips layout in 1.3. Thanks, Trevor! extensions.joomla.org/extens… #Joomla #Joomla5 #Joomla6
Image from JoomReem (@JoomReem)
12
Still on RokSprocket? JR Prism 1.3 is out: 8 layouts for your Joomla content, styled by your own template. New: Strips, a horizontal scrolling row. Lite free · Pro $24/yr for all your sites joomreem.com/jr-prism-pro-1-…
18
JR Prism 1.2.0 is out. A customer asked for the article date. Now every layout can show the date, author, category and hits under each item. Lite and Pro. Off by default, so nothing changes until you turn it on. #Joomla
Image from JoomReem (@JoomReem)
1
1
19
Release notes and docs: joomreem.com/jr-prism

JR Prism - Joomla Content Showcase Module

JR Prism showcases your Joomla content in responsive grids, carousels, tabs, mosaics, and more. The modern, maintained RokSprocket replacement. Free Lite.

joomreem.com
5
JoomReem retweeted
Joomla! (@joomla) profile picture
Joomla!@joomlaSep 30
Known issue with 5.4.9 Web Services API PATCH requests fail: Trying to update an item (for example, a banner or a user entry) via Web Services API fails with a fatal error. The fix for this problem is documented here: manual.joomla.org/updates/53… #Joomla #CMS #OpenSource #Release
Announcement for Joomla! 6.1.4 & 5.4.9

ALT Announcement for Joomla! 6.1.4 & 5.4.9

5
12
772
🚨 Last day. The 21% Joomla birthday discount ends tonight. Code JOOMLA21 → joomreem.com/extension-store #Joomla
Image from JoomReem (@JoomReem)
13
48 hours left. ⏰ After Sep 20, the 21% birthday discount is gone. Code JOOMLA21 → joomreem.com/extension-store #Joomla #JoomlaExtensions
Image from JoomReem (@JoomReem)
9
⏳ One week left. 21% off all JoomReem extensions ends Sep 20. Code: JOOMLA21 joomreem.com/extension-store #Joomla
Image from JoomReem (@JoomReem)
17
Joomla site slowing down as the database grows? "Add more caching" is not the fix. By default #Joomla stores sessions in the database, so every visitor competes with your content queries. Move the Session Handler to Filesystem or Redis first. It fixes a lot on its own. #MySQL
Image from JoomReem (@JoomReem)
1
19
Full playbook: joomreem.com/joomla-resource… #Joomla #MySQL

How to Optimize Joomla Performance With a Large MySQL Database

Joomla slowing down under a large MySQL database? Fix session storage, find the real slow queries, block bad bots, and cut page weight the right way.

joomreem.com
10
Joomla's core "System - HTTP Headers" plugin is more capable than people give it credit for. Full CSP builder, HSTS, COOP, referrer policy, all in the UI. But it has two gaps worth knowing. #Joomla
Image from JoomReem (@JoomReem)
1
37
more replies
And a gotcha that bites people: Joomla's CSP nonce is 64 bytes, not the 16 you see in most CSP examples online. Copy a generic nonce rule and it will not match.
1
14
I wrote up the exact config for all of it: joomreem.com/joomla-resource…

What Joomla's HTTP Headers Plugin Can (and Can't) Do: X-Content-Type-Options, CORP, and the CSP...

A practical look at Joomla's core System - HTTP Headers plugin: which security headers it covers, which two it doesn't (yet), and how to fill the gaps.

joomreem.com
6
Even if someone steals your Joomla admin password, this stops them getting in. 2-minute walkthrough: add a passkey as a second layer of login with Joomla's built-in Passkeys plugin. Password first, then your phone or fingerprint confirms it. #Joomla #WebSecurity #Passkeys
1
26
Second factor, not passwordless. Your password stays. Hardening help: joomreem.com/services?utm_so… #Joomla #WebSecurity #Passkeys
16
A Joomla site on the latest core, fully patched, behind a strict WAF — got hacked anyway. It surfaced on the community forums, and the chain is worth walking. 🧵 #Joomla
Image from JoomReem (@JoomReem)
1
32
Core Smart Search (com_finder) was feeding user-controlled input into a third-party plugin capable of executing PHP inside content. The real hole: a legitimate capability + an unexpected input path = RCE. The WAF blocked some attempts, missed the encoded one.
1
12
From there: RCE → defines.php rewritten → persistent access. "Patched + WAF" ≠ "safe." Your real attack surface is every capability a site has turned on, not just the CVEs you're missing. I broke down the full chain + a hardening checklist: joomreem.com/joomla-resource…

How a "Secure" Joomla Site Got Hacked Anyway: A Real Attack Chain

A Joomla site with a WAF and updated core still got hacked. Here's the exact attack chain, why the WAF didn't stop it, and the checklist that would have.

joomreem.com
1
35
Load more