Slashdot Mirror


Learning Joomla! Extension Development

Michael J. Ross writes "One of the most powerful and popular content management systems (CMSs) is Joomla, a superior derivative of Mambo. Out of the box, Joomla makes it relatively easy to build Web sites that allow collaborative editing of content, attractive styling via prebuilt templates, and many more features. A Joomla-based site can be further improved by adding custom modules, components, and other extensions to the CMS, without any modification to the core Joomla code. A resource that explains how to do this, is Learning Joomla! 1.5 Extension Development: Creating Modules, Components, and Plugins with PHP, by Joseph L. LeBlanc." Read on for the rest of Michael's review. Learning Joomla! 1.5 Extension Development author Joseph L. LeBlanc pages 176 publisher Packt Publishing rating 8 reviewer Michael J. Ross ISBN 1847191304 summary A practical tutorial for creating Joomla! 1.5 extensions

The book is put out by Packt Publishing, under the ISBNs 1847191304 and 978-1-847191-30-4. The publisher maintains a page on their site dedicated to the book, where visitors can read summaries of the chapters and the overall book, order the e-book version (in PDF format) at a discount, download the book's sample source code, read and submit errata and feedback, and download a sample chapter, namely, "Chapter 1: Joomla! Extension Development: An Overview" (also in PDF format). Note that, as of this writing, the errata and feedback do not have their own links, but are located on the page accessible via the link "Code download," which should be clarified.

The book's title page bills it as "A practical tutorial for creating your first Joomla! 1.5 extensions with PHP," and that is exactly what the book is. Rather than organizing the information in a cookbook style — which is quite popular in programming books nowadays — this particular one uses a narrative approach, in which the author illustrates the concepts by stepping the reader through an example project. He begins with a clean install of Joomla, without any of the sample data, and shows how to "build extensions to create, find, promote, and cross-link restaurant reviews."

The nine chapters of the book are organized in a logical manner, and in the order that the typical developer would go about extending a Joomla-based site: overview; Joomla's component structure and registration; backend and front-end development; module development; using the model-view-controller design pattern (MVC); creating plug-ins; adding configurability for the extensions that you have created; packaging the extension elements for use by other Joomla developers.

In explaining the key concepts and procedures for building custom extensions to a Joomla site, the author takes a methodical approach, with a healthy balance between exposition, sample code, and illustrative figures. The chapters read quickly, and the code changes from one section to the next are helpfully bolded. The chapter summaries, as with most programming books, add no value, and could be beneficially dropped, thereby saving space.

The author states in the first chapter that there are three types of extensions within Joomla: components, modules, and plug-ins. This could be confusing to anyone who has read the articles that help introduce Joomla to the new developer, and are contained in the sample data found in Joomla version 1.5. Those articles include one titled "Extensions," which lists two additional extension types — templates and languages — not considered such by LeBlanc. However, that article does not make clear as to why templates and languages should even be considered extensions, which seems counterintuitive at first glance.

The presentation of all of the material in LeBlanc's book is not perfect, but it is certainly more than adequate. It is unfortunate that the book does not have a lay-flat binding, which tends to be more of a problem with slender volumes such as this one (176 pages), since much thicker books have more weight to keep both sides down on the table at the same time when the book is open. All of the screenshots have a bit too much pixelation, which makes the smallest text within the screenshots more difficult to read. However, none of that text is unreadable. The book's text outside of the screenshots is quite easy to read, with a generously-sized font and a logical layout of each page's material. Almost every page has two horizontal lines, one at the top, and one at the bottom; they serve no purpose, and could be eliminated to save ink and space, as could the brackets around every page number. The same is true for the much larger and thicker brackets used to delineate warnings, notes, tips, and tricks. There were a few other very minor flaws in the book. For instance, in the information about the reviewer, "MySQL" is misspelled. In the Table of Contents, the "Available Toolbar Buttons" line appears to be one font size too small, and thus inconsistent with the other subsection heads. All of these weaknesses are of little consequence and could be fixed in the next edition.

Even if a reader initially had no interest in developing their own extensions to Joomla, this book could easily spark their interest, given that the book shows just how powerful those extensions can be, as well as how doable they are, by any competent programmer familiar with PHP and MySQL. In fact, even if the reader were to later decide that they had no interest in creating any extensions, they could still benefit from the book's discussion of how components are structured within Joomla — a more clear explanation than anything I have seen in the official Joomla documentation. Joomla may be an excellent CMS, but the documentation quality does not come close to the value of Joomla itself. That is why there is such a great need for books such as this one.

Although Learning Joomla! 1.5 Extension Development: Creating Modules, Components, and Plugins with PHP has some weaknesses — as do most if not all technical books nowadays — for any developer interested in getting the most out of Joomla by building custom extensions, LeBlanc's contribution should prove especially informative and useful.

Michael J. Ross is a Web developer, freelance writer, and the editor of PristinePlanet.com's free newsletter.

You can purchase Learning Joomla! 1.5 Extension Development from amazon.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

92 comments

  1. Ending your product name with an explanation point by Anonymous Coward · · Score: 4, Funny

    should be punishable by death.

  2. Re:Ending your product name with an explanation po by Kjuib · · Score: 1, Funny

    maybe not death... but at least torture... it is legal now...

    --
    - Your stupidity got you into this mess, why can't it get you out? -Will Rogers
  3. Re:Ending your product name with an explanation po by Doctor+Memory · · Score: 2, Funny

    But! It! Works! For! Yahoo! !!

    --
    Just junk food for thought...
  4. Re:Ending your product name with an explanation po by Nos. · · Score: 3, Interesting

    What about your province?

  5. Never used it myself. by SatanicPuppy · · Score: 1

    How does it compare with Drupal or PHP-Nuke? Never found all that many differences between the PHP based CMS's (Can you say SQL injection?), and the best java ones aren't open source.

    --
    ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    1. Re:Never used it myself. by Dekortage · · Score: 4, Informative

      I've used Typo3, Joomla, and Drupal. I would say that Joomla is the easiest to set up and use, but it also less customizable (although it seems to have more e-commerce plugins than some of the others). If it does what you need it to, Joomla is great. I haven't used PHP-Nuke in years but my impression is that (again) Joomla is superior in ease of use and inferior in flexibility.

      The CMS Matrix has a summary of features (which can be compared against other CMS systems in its list).

      --
      $nice = $webHosting + $domainNames + $sslCerts
    2. Re:Never used it myself. by Anonymous Coward · · Score: 0

      What do you mean?

      Liferay portal http://www.liferay.com/ is up there with the best, Open Source, and Java.

      (Also InfoWorld's 2007 Technology Of The Year Award, "Best Open Source Portal")

    3. Re:Never used it myself. by klenwell · · Score: 2, Informative

      Joomla's admin controls definitely look slick, but I quickly noticed the inflexibility, too. Also, its lack of support for granular privileges was one of the things that turned me off of it. I think there's an extension, but I prefer Drupal's built-in support.

      Thanks for the link to the CMS Matrix site. I'd been looking for something like this.

      --
      Innovation makes enemies of all those who prospered under the old regime... -- Machiavelli
    4. Re:Never used it myself. by bertboerland · · Score: 2, Informative

      Maybe you ought to *REALLY* checkout Drupal. It has nothing to do with the *nukes( and is a very solid and clean content management framework used by many high end companies around the world).

      --
      -- for undocumented cisco commands, take a peek @ dotu
    5. Re:Never used it myself. by yuda · · Score: 3, Informative

      I've used all three 'nuke, drupal and joomla. We started migrating sites from nuke 3 or 4 years back as we found nuke was lax on security issues and one site in particular was hacked 3 or 4 times in as many months. Personally I'm not such a great fan of Drupal, the majority of drupal sites have a very generic feel and tends to take a lot of extra work to get something that looks nice (especially if you're wanting a forum) in saying that it's a pretty solid cms, easily customisable and we didn't run into the same problems with security as nuke. I've only had a real quick play round with joomla. Personally I think form an end user point of view it's more intuitive and easier to use out of the box than drupal but I found it much harder to customise than drupal. I wouldn't go back to using nuke after the experience I had, I still use drupal for some sites but for a site that you don't want to spend a great deal of time or effort customising for the end user I would say joomla is the way to go.

    6. Re:Never used it myself. by Just+Some+Guy · · Score: 3, Informative

      How does it compare with Drupal or PHP-Nuke?

      I haven't used Joomla!, but I'm absolutely in love with Drupal. It's very easy to administer (if you're at least a little tech-savvy) and has modules available for just about anything you might ask of it.

      For example, at my personal site, I have a personalized home page with all the content I would normally have on iGoogle or My Yahoo!. If you were actually logged in as me, that page would also have my stock quotes and weather information.

      I liked it well enough to convert most sites I host to it (and it has great support for virtual hosting) because I found that I was spending more time managing the management system than the content in my old setups, where Drupal just gets out of the way and makes it easy maintain. Again, I love it.

      Oh, and there are plenty of nice themes floating around. I really don't like the ones that come with it any more than some of the other posts, but it's easy enough to drop in another.

      --
      Dewey, what part of this looks like authorities should be involved?
    7. Re:Never used it myself. by rk · · Score: 1

      I'm a pretty big fan of Drupal myself (the only thing I've got against it is I don't care for PHP much), but I've got to agree with you that the Drupal forum module, while basically functional, is really ugly.

      I like SMF for a forum app, and there is a pretty good SMF bridge Drupal module that handles user synchronization between the two, and gives you few nifty blocks for showing recent posts and other SMF information in Drupal sidebars. It's worked pretty well for me in a couple projects.

    8. Re:Never used it myself. by yuda · · Score: 1

      Yeah I really like SMF as a forum app. Personally it's more intuitive to admin and seems as easy for jo public to use as say PHPBB. I can't say I've played around with the SMF Drupal bridge module - the last time I looked at it, the module was very buggy and hard to use. It's good to hear they've ironed they issues out.

      I've switched a couple of forums from PHPBB to SMF and haven't had many complaints from people using the site apart from the "it doesn't look like phpbb" type of complaint

    9. Re:Never used it myself. by Anonymous Coward · · Score: 0

      Drupal's not bad.

      Joomla and Mambo are crap.

      CMS Made Simple is the best if you want XHTML strict and CSS, but the community is a lot smaller than Drupal (which is a close second in terms of quality). For both of them, the weak point is the modules. Some are well written, some are crap.

    10. Re:Never used it myself. by Propaganda13 · · Score: 2, Informative
      http://www.opensourcecms.com/ has live demos for around 50 CMS plus blog, e-commerce, forums, etc.

      I was going to play around with Joomla! and SMF, but the bridge had been discontinued.

      For those who wonder why we have had to come to such a decision, we have had input from both the Joomla! project and the FSF directly, and it is the stance of both Joomla! and the FSF that the use of a bridge into a GPL-licensed system constitutes the creation of a combined work. This forced us to reconsider our development of the bridge and look for ways we could accomplish the task while still respecting the licensing of both projects. Ultimately, that proved impossible. When discussing with the FSF, they stated that the bridge and SMF would fall under the GPL license, and there is no workaround.


      I didn't see it as a combined work, and I wanted the functionality to play around with so I caved and went with Mambo. (I use IceWeasel if that's any consolation)

      While it is fairly easy to use, the way the default homepage is sorta hardwired was a little bit of an issue. As stated in other posts, the differences between components, modules, and even mambots isn't obvious or explained. Templates and layouts aren't hard to adjust if you're used to using CSS, though better doc in the default css pages would be helpful.

      Sidenote: I had some issues with the bridge, but got it worked out. The instructions seemed to have left out a few things to check.
    11. Re:Never used it myself. by tyrione · · Score: 1

      Holy sh*t that CMS Matrix site is an abortion on UI design.

  6. OK, seriously. by Pojut · · Score: 2, Funny

    What the fuck people. Feisty Fawn? Joomla? why is it that the geekier you have to be to use something, the more it sounds like it was named by someone sipping on meth/mescaline/LSD cocktails?

    1. Re:OK, seriously. by Anonymous Coward · · Score: 0

      why is it that the geekier you have to be to use something, the more it sounds like it was named by someone sipping on meth/mescaline/LSD cocktails?

      I think you answered your own question there, mate.

    2. Re:OK, seriously. by LWATCDR · · Score: 1

      Yea Longhorn, Vista, Silverlight, Oracle, Excel, Access, SAP, and Delphi are so much more descriptive and less geeky.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    3. Re:OK, seriously. by Pojut · · Score: 1

      Never said that they were...I just didn't feel like listing more than two examples:-)

    4. Re:OK, seriously. by SatanicPuppy · · Score: 1

      Criticism about Joomla's name makes sense, but criticism about Feisty doesn't really...Most projects have a distinctive name that is wildly different from the actual market name. Here you might see someone talking about "Feisty Fawn" (Ubuntu 7.4) or "Longhorn" (Windows Vista) or "Moonshine" (Fedora 7) but you won't see any of those products marketed by anything other than their actual brand name.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    5. Re:OK, seriously. by colin_s_guthrie · · Score: 4, Informative

      IIRC the name "Joomla" roughly means "community" in I think Swahili. This was chosen at the point when Joomla forked from Mambo due to issues over the formation of a for-profit foundation to commercialise Mambo. The main developers thought that this was diverging away from community feel of the project and so the name they gave to the fork reflected this sentiment: that they really care about the community.

      As for the exclamation mark, well I have no idea!

    6. Re:OK, seriously. by everphilski · · Score: 1

      Well if we are talking about product names...
      Longhorn is a codename.
      SAP and Oracle are company names, and products inherit from that.
      Access makes sense. Think about it.
      Vista, Silverlight, Excel, Delphi - OK maybe you have a point. Vista conjures up certain thoughts and feelings (or it is supposed to). Not sure about silverlight or Delphi (but wasn't there an oracle at the last one? :P). Excel? Well maybe people who use it, excel at what they do :P

    7. Re:OK, seriously. by garnetlion · · Score: 2, Funny

      Please, real geeks write their own CMS from their GUI-less Slack or Debian box.

    8. Re:OK, seriously. by jimstapleton · · Score: 1
      Well, if you insist...

      -> Silverlight
      That's a very visual name so to speak, inspiring thoughts of majesty and beuty, isn't silverlight a visually oriented tech? ./sarcasm --on
      -> Oracle
      Hmm, getting information. Nope, don't see what that has to do with oracles...

      -> Access
      Data accession, and access... Nope, don't see a pater there either

      -> SAP
      That's an acronym:
      SAP

      SAP was founded in 1972 as Systemanalyse und Programmentwicklung by five former IBM engineers in Mannheim, Baden-Württemberg (Dietmar Hopp, Hans-Werner Hector, Hasso Plattner, Klaus Tschira, and Claus Wellenreuther).[1] The acronym was later changed to stand for Systeme, Anwendungen und Produkte in der Datenverarbeitung ("Systems, Applications and Products in Data Processing").


      System analysis and programming, later Systems, Applications, and Products in Data Processing

      Yeah, those don't make sense either... ./sarcasm --off

      The rest you mentioned, I'll agree with (Vista might be a touch of a strech, since vista=view, and the main changes in that particular OS that they were talking about were visual...)
      --
      34486853790
      Connection too slow for X forwarding? Try "ssh -CX user@host"
    9. Re:OK, seriously. by ceeam · · Score: 1

      What would _you_ call them?

    10. Re:OK, seriously. by Pojut · · Score: 1

      Something like FORTRAN or COBOL...you know, a name that is an acronym that describes exactly what the hell it does.

    11. Re:OK, seriously. by Otter · · Score: 2, Interesting
      Excel? Well maybe people who use it, excel at what they do :P

      "Excel" is a pun on "cell", as in a spreadsheet cell.

      I'd used to think it was a clever name, but given that it invariably comes up in these "Why does every open-source project have such a stupid name?" "Oh yeah, what does 'Excel' have to do with spreadsheets?" arguments, the pun seems to be lost on pretty much everyone.

      That said, one doesn't have insist that software be named something like "Content Management System" to agree that "Joomla!" is a horrible name. All these CMS's have awful gibberish names that are impossible to keep straight: was this book about Drupal, Zomplog or Pheap?

    12. Re:OK, seriously. by gobbo · · Score: 2, Interesting

      Well if we are talking about product names...
      Longhorn is a codename.

      Point of trivia: the Longhorn Saloon and Grill is the name of the bar that used to be (or still is, haven't worked there in 18 years) at the base of Whistler and Blackcomb. The bar is right between the two mountains, so it's a pretty good pun... though it implies that Vista was conceived and coded under the influence.

      Anyway, give me goofy names like drupal or dabbledb over iNames like iWork, iLife, iLose, Pages, Numbers, etc. (non-troll disclaimer: iUse all of the above).

    13. Re:OK, seriously. by KingSkippus · · Score: 2, Insightful

      Aw, come on, do you have a dog? If so, what did you name him (or her)? "Dog?"

      I feel sorry for your kids.

      "Hi there, little girl, what's your name?"

      "Daughter."

      If you owned an automobile company, we'd be driving Cars that come in imaginative models like the Red Car and the Gray Car.

      Point is, hardly anything is simply given a descriptive name of what it is. It's boooring. These days in the age of "Cingular" and "Accenture", it's the rare exception that they are. Good or bad, it's the way it is.

    14. Re:OK, seriously. by poot_rootbeer · · Score: 1

      SAP and Oracle are company names, and products inherit from that.

      Sort of: the company that originally produced the Oracle RDBMS was named "Software Development Laboratories", and then "Relational Software", before ultimately renaming itself after its flagship product.

    15. Re:OK, seriously. by Pojut · · Score: 1

      In the words of George Carlin,

      "Hi, we're the JOHNSONS....WHAT'S HIS NAME?"

      "Ball sniffer."

    16. Re:OK, seriously. by LWATCDR · · Score: 1

      "-> Silverlight
      That's a very visual name so to speak, inspiring thoughts of majesty and beuty, isn't silverlight a visually oriented tech? "
      Please it sounds like an super hero. "Hey Sliverlight you and Yellowjacket go cover the bank while Dr. Magic and I take care of the super tanker."

      "-> Oracle
      Hmm, getting information. Nope, don't see what that has to do with oracles..."
      Greek mytholgy reference? Yea that isn't geeky.

      "-> Access
      Data accession, and access... Nope, don't see a pater there either".
      Yea it was such a good name that Microsoft used it twice! Once for a terminal program and once for Database.

      "> SAP
      That's an acronym:"
      And what is more geeky than an acronym?

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    17. Re:OK, seriously. by LWATCDR · · Score: 1

      Longhorn may be a codename but Microsoft used it in public a lot. To me a codename should only be used internally.

      "SAP and Oracle are company names, and products inherit from that." Actually Oracle was the product name the company changed it's name to that of it's flagship product. It is a Greek mythology reference so I put that high up on the geek scale.

      Access is just annoying since it is the second Microsoft product to use that name. The first was a terminal emulator.
      And yes there was an Oracle at Delphi.

      If you want to go on with other dumb tech product names that we don't think are dumb anymore how about the Apple, Macintosh, iPod, iPhone, Leopard, Panther, and Cheetah. Two fruits, two nouns with an i stuck on them, and three large cats.
      The whole point is that product names only sound strange until they are familiar. Thare are just so many logical names you can give a database, word processor, content management system, or goodness knows how many other programs. Of course back in the crazy .net times I wanted to start a company called Enanogentec.com just to see how much venture captial would get thrown at me.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    18. Re:OK, seriously. by poot_rootbeer · · Score: 1

      Here you might see someone talking about "Feisty Fawn" (Ubuntu 7.4) or "Longhorn" (Windows Vista) or "Moonshine" (Fedora 7) but you won't see any of those products marketed by anything other than their actual brand name.

      Are "Ubuntu" and "Vista" and "Fedora" any better?

    19. Re:OK, seriously. by philam3nt · · Score: 1

      It's still there, I was definitely inebriated at TELUS yelling at Rahzel from their outside seating this April. It's a great spot to find, visit the Village before the 2010 games blow everything wide open.

      --

      If I had a sig, this is where it would be.
    20. Re:OK, seriously. by jimstapleton · · Score: 1

      pardon, I never claimed they weren't geeky, I just claimed they weren't nonsensical, and did in fact imply what the product was about.

      --
      34486853790
      Connection too slow for X forwarding? Try "ssh -CX user@host"
    21. Re:OK, seriously. by bl1st3r · · Score: 1

      Joomla translates to "sentence" in Arabic. At least that is what my wife says.

      -E

      --
      hrrm.
    22. Re:OK, seriously. by scottwnelson · · Score: 1

      I tried using Mambo before and it was so difficult to customize. You have to be specially trained to understand the framework. I hope this new thing is different. It's not that I don't appreciate a free and useful tool... it's just that when they expect you to learn a whole new language to do anything with it that isn't out-of-the-box is when I get peeved. Then you either have to pay for expensive training (with cash or time or both) or hire someone at crazy rates who already has the specialized knowledge to do stuff with it. Racket.

  7. Re:Ending your product name with an explanation po by SatanicPuppy · · Score: 5, Funny

    Ending your province with an exclamation point is almost as annoying as putting sound on your webpage.

    --
    ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
  8. Vulnerabilties for all. by TechyImmigrant · · Score: 1

    >Out of the box, Joomla makes it relatively easy to build Web sites that allow collaborative editing of content, attractive styling via prebuilt templates, and many more features.

    I.E.

    Makes it relatively easy to put together a website that allows lots of attackers to inject their data into the system, exploiting vulnerabilities you are completely unaware of, embedded in the guts of a multi megabyte codebase you downloaded and threw into cgi-bin.

    --
    Evil people are out to get you.
    1. Re:Vulnerabilties for all. by August+Lilleaas · · Score: 1

      Second (upto fiftyfiving) that. I run tons of Joomla sites, and most of them are unproblematic. As soon as the hackers gets started, though, things start to get seriously smelly. One of my sites gets SQL injected at least once a day. I did everything google, joomla.org and other resources told me about patching Joomla, but I still get 'em. I don't regret switching to Ruby on Rails.

    2. Re:Vulnerabilties for all. by jafiwam · · Score: 1

      Haha.

      I came in here to post similar snark, however parent did it way better than I ever could.

      I get approached by "developers" wanting to put Joomla on my server periodically.

      I always tell them "until the fundamental security flaws of PHP and CMS in general are fixed, that crap is not getting put on a web server I am responsible for running".

      All those technologies just hide the security responsibilities, or shove them off on some poor server admin when the "developer" in question is too ignorant to deal with them themselves. Every one of those type things you add, means another thread of upgrades, patches, fixes, and adjustments and another threat vector to deal with. Meanwhile, the "build every site with the same damn tools no matter the situation developer" walks off with a pile of cash, leaving you to try to do support for whatever the tiny monthly hosting fee you happen to be getting.

      I am not saying they should build a CMS from scratch every time, but when every major release ever put out (and some minor) have server-killing security holes in them what makes you think THIS release won't have one too?

      Ok, so I added some of my own snark. You can mod me down now. :)

    3. Re:Vulnerabilties for all. by Stewie241 · · Score: 1

      I always tell them "until the fundamental security flaws of PHP and CMS in general are fixed, that crap is not getting put on a web server I am responsible for running".

      Which security flaws are these?

    4. Re:Vulnerabilties for all. by jafiwam · · Score: 1

      There was a Slashdot article about one of the PHP core developer guys quitting in disgust (paraphrased) due to the lack of concern for keeping it secured. When the people that wrote the stuff in the first place say it's insecure, it's insecure as far as I am concerned.

      Search "PHP security" for several sites that lay it out in detail, including the "Month of PHP bugs blog". Same with Joomla, people wondering about the lack of easy security in the product are not hard to find.

      Joomla! version list had "critical vulnerabilities" on every version except for the current release when I looked at it. I saw that on a list of "get these previous downloads", each had a warning about "xyz bug" after it.

      I am not a security expert by any means, therefore, skipping these products because I am aware that "inexperienced admin + insecure software = disaster" makes me a better admin. You might be able to get by with one of those things.. both... good luck.

      My point was more about developers though, every one of which thinks the shit they use is the best shit and everybody should use it. When there are 15, 20, or 40 such products pretty soon you gotta support every pile of junk ever created or start saying "no" when they want the latest and greatest SQL injection tool on the server.

      Google yourself and make your own opinion about the security issues. I, was personally horrified at the thought of putting it on my servers, thus I didn't.

    5. Re:Vulnerabilties for all. by sloanster · · Score: 1

      cgi-bin? hmm, not too familiar with php, are we?

    6. Re:Vulnerabilties for all. by kuzb · · Score: 1

      I take it you've never gone through the changelog for Ruby on Rails either. They have their share of security flaws.

      --
      BeauHD. Worst editor since kdawson.
    7. Re:Vulnerabilties for all. by TechyImmigrant · · Score: 2, Informative

      >cgi-bin? hmm, not too familiar with php, are we?

      Yes, I've done my share of PHP. It can go in cgi-bin as much as it can go anywhere else.

      If computer security is your profession (as it is mine) then you might be aware that a not uncommon technique is to configure the web server to disallow the execution of any code, including PHP, outside of a specific place such as cgi-bin. Thus reducing the attackable footprint.

      --
      Evil people are out to get you.
    8. Re:Vulnerabilties for all. by August+Lilleaas · · Score: 1

      Who hasn't? I'd dare to say you're less likely to get SQL injections on a Rails app than on a Joomla installation, though. Rails is also pretty young. Perhaps it'd be equally common for rails app to get injected if you saw Rails apps as often as you saw Joomla installations, though. And, of course, a not-so-advanced rails developer might think that this - SomeModel.find(:all, :conditions => "foo = #{params[:bar]}") - is a good idea, and screw every effort the Rails framework made to prevent injections.

      Anyway, you're right.

    9. Re:Vulnerabilties for all. by ooh456 · · Score: 1

      "I always tell them "until the fundamental security flaws of PHP and CMS in general are fixed, that crap is not getting put on a web server I am responsible for running."

      Wow, I would so not hire you to run my web servers ;) Neither would Yahoo, Flickr, Digg, or about 10 million other companies using php and/or CMS. How do you find work? Displaying static html pages for Amish people?

    10. Re:Vulnerabilties for all. by jafiwam · · Score: 1
  9. EXCUSE ME! CMS IS RESERVED FOR VM/CMS! by Anonymous Coward · · Score: 3, Funny



    CMS is part of VM/370 AKA VM/CMS

    PLEASE DO NOT use this term for your crummy microcomputer "products".

    TIA.

    1. Re:EXCUSE ME! CMS IS RESERVED FOR VM/CMS! by cygtoad · · Score: 1

      CMS also stands for Centers for Medicare and Medicade Services. If you are going to complain about the use of Acronyms by others, you are going to be one frustrated individual.

    2. Re:EXCUSE ME! CMS IS RESERVED FOR VM/CMS! by mcho · · Score: 1

      Lord Baltimore someone else has heard of Centers for Medicare and Medicaid Services (CMS)! NPI! :)

    3. Re:EXCUSE ME! CMS IS RESERVED FOR VM/CMS! by Anonymous Coward · · Score: 0

      Nooooooo, CMS purists shouldnt give in to Bush name changes! CMS is still the Center for Healthcare Financing!

    4. Re:EXCUSE ME! CMS IS RESERVED FOR VM/CMS! by kaizendojo · · Score: 1

      Why not just post a reply that says, "Hi, I am old and retired and have anger issues." Would be essentially the same thing.

  10. Level of detail by Dekortage · · Score: 1

    There were a few other very minor flaws in the book. For instance, in the information about the reviewer, "MySQL" is misspelled. In the Table of Contents, the "Available Toolbar Buttons" line appears to be one font size too small, and thus inconsistent with the other subsection heads. All of these weaknesses are of little consequence and could be fixed in the next edition.

    These are problems, but jeez -- why mention them in a book review? And he left out whether or not the colors in the logo were 100% accurate to Joomla's CMYK specifications....

    --
    $nice = $webHosting + $domainNames + $sslCerts
  11. Powerful! Popular! Superior! by Anonymous Coward · · Score: 3, Insightful

    One of the most powerful and popular content management systems (CMSs) is Joomla, a superior derivative of Mambo.

    I mean, it's great that the reviewer has found their soulmate and everything, but I'm having a hard time expecting much in the way of objectivity from this review...

    1. Re:Powerful! Popular! Superior! by Von+Rex · · Score: 1

      I! take! products! much! more! seriously! when! they! abuse! exclamation! marks!

    2. Re:Powerful! Popular! Superior! by skelly33 · · Score: 1

      Take, for example, the impending release of Joomla 2.0 which is based on MVC architecture and will not only completely negate the value of this book, but will also likely (if it is in keeping with the Mambo developers' release history) completely invalidate any and all current components/extensions requiring everyone start from the ground, up. Again.

  12. Saving space? by mcho · · Score: 1

    The chapter summaries, as with most programming books, add no value, and could be beneficially dropped, thereby saving space.

    Your review could be beneficially dropped, thereby saving space.

    I'm the guy who writes those chapter summaries, you insensitive clod!

    1. Re:Saving space? by eln · · Score: 4, Funny

      Some of those, commas could, be dropped too, thereby saving space, and making the sentence look, less like it was written, by William, Shatner.

  13. Re:Ending your product name with an explanation po by Anonymous Coward · · Score: 0, Flamebait

    Probably, but they are in Canada, isn't that punishment enough, eh?

  14. You are so right by PCM2 · · Score: 4, Funny

    Even if a reader initially had no interest in developing their own extensions to Joomla, this book could easily spark their interest, given that the book shows just how powerful those extensions can be

    Oh, completely. I started writing i18n add-ons for Zope and Plone the same way. I was on the BART train, heading to Oakland to catch an A's game, and I wanted something to read, so I looked under the seat and the Zope book was there. I had absolutely no interest in Python-based content management systems -- seriously, I didn't even have a Web site -- but I scraped the gum off the front cover and started reading anyway, and after a few stops I was hooked. I ended up taking the book into the Coliseum with me and had my first ZPT code written before the 4th inning.

    --
    Breakfast served all day!
    1. Re:You are so right by fishdan · · Score: 4, Funny

      Right! I had a similar thing happen to me! I was on my way to JavaOne, also taking BART, when I started reading about the BALCO scandal. I had absolutely no interest in baseball -- I had never even played little league, but I started reading and after a few stops I was hooked. I ended up going to the A's game that afternoon, and by the 4th inning, they brought me in as middle relief.

      --
      Nothing great was ever achieved without enthusiasm
    2. Re:You are so right by Squalish · · Score: 1

      A meme is born.

      --
      People in Soviet Russia, however, appear to be afflicted with amusing juxtapositions of the aforementioned situation
    3. Re:You are so right by kaizendojo · · Score: 1

      Also, right! Similar thing happened to me; I was on the BART and started reading this thread on my PDA. I had absolutely no interest in replying, I rarely reply to /. threads in the first place. But after a few threads I was hooked. I ended up losing my job because I spent to much time trying to come up with funny replies and in a few weeks, CmdrTaco showed up and offered me a moderator job.

      Reminds me of that scene in "Blazing Saddles" in the town meeting where everyone agrees with the preceeding speaker, and everyone's named Johnson... "Howard Johnson's Right!"

  15. Drupal by Slashdot+Parent · · Score: 2, Informative

    For What It's Worth, I've never used Joomla, but I do have a few Drupal sites. Druapl definitely takes the security of the platform seriously, and they fix up vulnerabilities quickly.

    Over the security mailing list, I haven't seen an SQL injection attack in as long a I can remember. Lately, it's all been XSS. Anyhow, they're good about getting the word out to Drupal admins whenever anything is discovered in Drupal core or contributed modules.

    Joomla probably has something similar, but I don't know about such things.

    --
    They don't grade fathers, but if your daughter's a stripper, you fucked up. --Chris Rock
  16. Re:Ending your product name with an explanation po by Abcd1234 · · Score: 4, Informative

    Just to make it clear to any idiot mods who might attempt to give the parent a +1 Insightful/Interesting, Saskatchewan doesn't include an exclamation point in it's name. That's merely a marketing gimmick on their provincial website (and trust me, Saskatchewan can use all the marketing gimmicks it can get ;).

  17. If its so popular... by gravis777 · · Score: 1

    "One of the most powerful and popular content management systems (CMSs) is Joomla, a superior derivative of Mambo If its so popular, why have I never heard of it, and why do you need to explain what it is?
    1. Re:If its so popular... by Corona4456 · · Score: 1

      Joomla! 1.0 was exactly the same as Mambo (just look at the code and you'll see). On the other hand, Joomla! 1.5 has been completely rewritten from the ground up. It's coding styles and structure remind me a lot of Java for some reason... must be the whole JClass naming convention. However, they have adapted the MVC pattern to every aspect of the CMS now that it has made creating components and modules (with the new structure) quite more complex. The nice part of it though is that you can separate the interface and the backend pretty easily so that changes to the front end don't create changes for the backend (MVC pattern's goal). They have also added a nice API reference: http://api.joomla.org/ which makes developing a hell of a lot easier. If you just wanted to learn the basics of creating a Joomla! extension go here http://dev.joomla.org/component/option,com_jd-wiki /Itemid,32/. So far I like 1.5 but they have quite a few bugs to work out and there isn't an actual release yet so that makes sense as to why :).

      --
      -- Corona
  18. Re:Ending your product name with an explanation po by FesterDaFelcher · · Score: 2, Informative

    Not knowing the difference between "explanation" and "exclamation" should be punishable by death.

    --
    My user number is prime. Is yours?
  19. fatally flawed by ceejayoz · · Score: 2, Insightful

    Any content management system that needs to replace wholesale the main content capability to be able to categorise content in more than one category (or more than two levels of categorisation) is fatally flawed. I was assigned to a project in Joomla and within a week was begging (successfully) to use anything else - WordPress, Drupal, anything.

    Very happy with Drupal now. The default install is bare-bones, by design, but you can duplicate all the Joomla functionality with a few of the modules on drupal.org and you're up and running, without the absurd restrictions, underpowered plugin hooks (something like nine in 1.x?) and godawful ugly outputted code.

  20. Re:Ending your product name with an explanation po by Qbertino · · Score: 1

    It's not an exclaimation point. It's an upsidedown 'i'. It's better than the other option iJoomla, if you ask me. :-)

    --
    We suffer more in our imagination than in reality. - Seneca
  21. Re:Ending your product name with an explanation po by Anonymous Coward · · Score: 1, Insightful

    Compared to the Americans, I think Canadians have it good. Let's go down the US checklist: 1) Start pointless wars with other countries costing billions of dollars, and ensuring that the people of those places are able to pass more hate for them on to the next generation. Pass that war effort cost on to the taxpayers! 2) Privatized medical system, making it so HMOs can deny you care and bill you on the silliest of claims. 3) A president so bent on his own acquisition of wealth that he's willing to sacrifice the value of your dollar to get more. Stick that in your haliburton and smoke it. 4) A government that supports invasive and unconstitutional tactics on it's own people to meet it's own agenda 5) A charter of rights which seems to be suspendable any time someone with enough power sees fit. 6) A country that rewards it's 'heros' by crapping on them when they are no longer needed. 7) A population of people too complacent to do anything about their own corrupt system. Yeah, I'm pretty sure Canadians have it better. Please try again!

  22. Cutefulness vs. Usefulness by Ilan+Volow · · Score: 2, Interesting

    Informative titles are one of the most basic usability principles. Any programmer who can't grasp something this basic is probably going to have a lot of other usability issues with their software.

    Case in point, we have a product named "Joomla". The Joomla administration has links to sections ambigously titled "Modules" and "Components". What's the difference between the two? Don't they refer to the same thing? And "mambots"--need I say more?

    --
    Ergonomica Auctorita Illico!
    1. Re:Cutefulness vs. Usefulness by DNS-and-BIND · · Score: 1

      Yeah, hear hear. I used Joomla for a bit, and components, modules, and mambots don't make any sense, nor does the name have anything to do with their function. Freaking annoying as hell. Stupid geeks, they're usually so exact when it comes to naming things. Why are these programmers such idiots when it comes to creating a meaningful and consise name?

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
  23. What the hell... by atmurray · · Score: 1

    ...is this just advertising on slashdot? Is this *really* news?

    1. Re:What the hell... by l-ascorbic · · Score: 1

      It's a book review, dear. Now you go back to bed.

  24. Re:Ending your product name with an explanation po by Anonymous Coward · · Score: 0

    But the really special treatment should be reserved for people that begin their product name with a period.

  25. Drupal by CritterNYC · · Score: 1

    I checked out Drupal and Mambo/Joomla for a large site I setup and went with Drupal. Joomla's URL aliasing setup was awful compared to Drupal. It makes sense since Mambo (on which Joomla is based) originally only supported it as a commercial add-on created by one of its core developers. With Drupal, friendly URLs were built in from the beginning.

    Basically, Joomla is easier to setup and add modules... but nowhere near as customizable or as extensible as Drupal. If you don't mind doing a little bit more learning up front, you can do far more with Drupal.

  26. Framework fatigue by wintermute42 · · Score: 1

    Spring, Struts, Ruby on Rails, AJAX, JavaServer Faces and on and on. I'm starting to feel framework fatigue. Yet another book, on yet another framework. Before you've even mastered the current frameworks, there's another one. Sorry, I'm suffering from framework fatigue.

    1. Re:Framework fatigue by ooh456 · · Score: 1

      Joomla is not a framework... it's a CMS. Big difference there.

    2. Re:Framework fatigue by Anonymous Coward · · Score: 0

      Actually with 1.5, Joomla is a framework with a CMS built on top of it. The devs are considering breaking the two apart into distinct projects. But I agree with the first poster; there are too many frameworks around. If you're going to redesign the whole thing (and generally break compatibility with existing extensions) why not use something like Cake or the Zend Framework and be done with it. That's where Mambo's headed (Cake) and I think they are going in the right direction.

  27. Re:Ending your product name with an explanation po by Dylan2000 · · Score: 2, Funny

    that just means it's hidden

    --
    Build your own website - full service homepage system your m
  28. Re:Ending your product name with an explanation po by Ugot2BkidNme · · Score: 1

    Seriously realeasing a book before Joomla! 1.5 is even released that is pretty bad.

  29. don't forget the idiot mascots by cinnamon+colbert · · Score: 1

    u gotta remember, these are teenagers who haven't grown up and think sci fi series like stargate sg1 are well acted and well scripted.

  30. Q: Why is starting in the Subject: line annoying? by DNS-and-BIND · · Score: 1

    A: Because it breaks the flow of a message.

    --
    Shutting down free speech with violence isn't fighting fascism. It IS fascism!
  31. Re:Ending your product name with an explanation po by Anonymous Coward · · Score: 0

    Unlike Westward Ho! in England or Saint-Louis-du-Ha! Ha! in Quebec which do include exclamation points in their names. The annoyance level of such namings is left as an exercise for the gentle reader.