Dear friends,
I hope this will be helpful for those who are using joomla for their CMS development especially those who are not vast in prgramming.Please check the vulnerability of that component before you use it on this website:
http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=&filter_exploit_text=joomla+&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=

Save your joomla website from being hacked!

Nice one bro. .

nD not just Joomla, other "Open Source" web apps & 3rd party components too.

Yeah, it is a good post though. Many of use just rush to download components and stuffs. . .

I believe that if you read the fine print of many of those components, you will see a section that says that in order to ensure security, you should always obtain their latest updates. Also, before I get any components, I always go to the official joomla components site and if it isn't listed as "author's favorite", whether it is commercial (in which case, I transfer cost to the client) or free, girlz no dey download am, no matter how many stars wey im get

Good! I like the OP. Keep it up

@noibilism how can i secure my website from been hack, cause one of my website has been hack last mouth and how can one retrieved a hack website

To prevent your joomla website from been hacked,you can take some of the following measures:
1. Change your super administrator from the default username (admin), in fact i always remove it totally, it is the user with the id 62.
2. I dont use nulled components, they're very vulnerable,
3. When you want to use form building components, make sure you verify that component very well by verifying its vulnerability to sql injection.For example i will not advise anybody to use Chronoforms for form building because of its vulnerability, and some other ones too,
4. Check that component very well, before you use it.
5. I always give my joomla backend a "double authorization shield", i.e Go to the file manager on your Control Panel and protect the administrator's folder with a password, just like this http://fountainuniversity.edu.ng/administrator
6. Make sure your Joomla version is up to date
If your site is hacked,
If you have access to the master control panel, change your Cpanel password from there, else ask your hosting provider to change it for you,
Then, you can trace their (the hackers) HTML script from there when you login or reupload the your own index.php file to overwrite what is currently online,
Sometimes hackers go into your admin end and change your template to their own template.
But you can search online to see more resources, if you need help i can help you personally to retrieve your hacked website, (dont worry no fees attached), lols!

Thank you for the info.

@mrperfect i visted ur forum it was nice,

Hello noibilism,

Please i need help on joomla, i have a page that will not just open. kindly help out.

Below is the code:

<?php global $mosConfig_live_site;?><?php if( isset($_SESSION['booking']) );?>
<form method="post" name="booking_display_form"
action="<?php echo cur_page_url(" https="" )="">
<table id="BookingDetails" border="0" width="100%">
<tbody>
<tr>
<td colspan="2">
<h1 class="Main">Your Reservation Details</h1>
</td>
</tr>
<tr>
<td width="30%">Arrival Date</td>
<td><?php echo get_string_from_date($_POST['booking']['startdate']);?></td>
</tr>
<tr>
<td>Departure Date</td>
<td><?php echo get_string_from_date($_POST['booking']['enddate']);?></td>
</tr>
<tr>
<td valign="top">Adults</td>
<td>
<?php $len = count($_POST['adults']['name']);?><?php for($i = 0; $i < $len; $i++);?><?php echo ($i+1).". ".$_POST['adults']['name'][$i]." (".$_POST['adults']['age'][$i]."
";?><?php ;?></td>
</tr>
<tr>
<td valign="top">Children</td>
<td>
<?php $len = count($_POST['children']['name']);?><?php for($i = 0; $i < $len; $i++);?><?php echo ($i+1).". ".$_POST['children']['name'][$i]." (".$_POST['children']['age'][$i]."
";?><?php ;?></td>
</tr>
<tr>
<td colspan="2">
<h1 class="Main">Customer information</h1>
</td>
</tr>
<tr>
<td>Name</td>
<td><?php echo $_POST['customer']['title']." ".$_POST['customer']['firstname']." ".$_POST['customer']['surname'];?></td>
</tr>
<tr>
<td>Address</td>
<td><?php echo $_POST['customer']['address1'];?></td>
</tr>
<tr>
<td>City</td>
<td><?php echo $_POST['customer']['city'];?></td>
</tr>
<tr>
<td>Post Code</td>
<td><?php echo $_POST['customer']['postcode'];?></td>
</tr>
<tr>
<td>Country</td>
<td><?php echo $_POST['customer']['country'];?></td>
</tr>
<tr>
<td>Email Address</td>
<td><?php echo $_POST['customer']['email'];?></td>
</tr>
<tr>
<td>Check all information is correct before completion *</td>
<td><input value="Edit My Details"
onclick="edit_details();" type="button"></td>
</tr>
<?php $obj = new Unit();
global $database;
$Unit = $obj->select_row_query("SELECT `reservation_extras` FROM `".$obj->get_table_name()."` WHERE `id` = '".$_GET['PropertyId']."' AND `published` = 1", 1);
$rexzs=explode(",",$Unit->reservation_extras);
$i=0;
$total_ext=0;
if(!empty($Unit->reservation_extras)||$Unit->reservation_extras=='[end]');
?>
<tr>
<td colspan="2">
<h1 class="Main">Reservation Extras</h1>
</td>
</tr>
<tr>
<td colspan="2">
<table align="center" width="100%">
<tbody>
<tr>
<td align="center"> Description </td>
<td align="center"> ChargeType </td>
<td align="center"> Quantity </td>
<td align="center"> Days </td>
<td align="center"> Cost </td>
<td align="center"> Total </td>
</tr>
<?php foreach($rexzs as $rexz){
$i++;
$rexzz=explode("|",$rexz);
$database->setQuery("SELECT * FROM `jos_bookman_extras` WHERE `id`=".$rexzz[0]);
$exts=$database->loadObjectList();
echo "<tr><td align='center'>";
foreach($exts as $ext){
echo $ext->name;
} echo "<input type='hidden' value='".$ext->name."' name='ext_name".$i."' /></td><td align='center'>";
if($rexzz[1]==1)echo "Daily";else echo "One Time";
echo "<input type='hidden' value='".$rexzz[1]."' name='chargetype".$i."' /></td><td align='center'>";
echo "<select name='quantity".$i."'>";
for($j=0;$j<=$rexzz[3];$j++){
echo "<option ";
if($_POST['quantity'.$i]==$j)echo "selected";
echo " value='".$j."'>0".$j."</option>";
}
echo "</select>";
echo "</td><td align='center'>";
if($rexzz[1]==1){
echo "<select name='days".$i."'>";
for($j=0;$j<=$days;$j++){
echo "<option ";
if($_POST['days'.$i]==$j)echo "selected";
echo " value='".$j."'>0".$j."</option>";
} echo "</select>";
}else echo "<input type='hidden' value='' name='days".$i."' />";
echo "</td><td align='center'> $ ".$rexzz[2];
echo "</td><td align='center'> $ ";
if(!empty($_POST['quantity'.$i])) {
if($_POST['days'.$i]=='') echo ($_POST['quantity'.$i]*$rexzz[2]);
else echo ($_POST['days'.$i]*$_POST['quantity'.$i]*$rexzz[2]);
$total_ext+=$_POST['days'.$i]*$_POST['quantity'.$i]*$rexzz[2];
} else echo "0";
echo "<input type='hidden' name='cost".$i."' value='".$rexzz[2]."' />";
echo "</td></tr>";
;
?>
</tbody>
</table>
<input value="<?php echo $i; ?>" name="ext_count"
type="hidden">
<input style="margin: 10px; float: right;"
value=" Update Total " onclick="update_total();"
type="button"></td>
</tr>
<?php ; ?>
<tr>
<td colspan="2">
<h1 class="Main">Totals ($)</h1>
</td>
</tr>
<tr>
<td>Total Rent Including Taxes</td>
<td><b><?php echo "$ ".number_format($total,2,'.', '');?></b></td>
</tr>
<tr>
<td>Clean Charge</td>
<td><b><?php echo "$ ".number_format($optional,2,'.', '');?></b></td>
</tr>
<tr>
<td>Reservation Extras</td>
<td><b><?php echo "$ ".number_format($extfees,2,'.', '');?></b></td>
</tr>
<tr>
<td colspan="2">&nbsp;</td>
</tr>
<tr>
<td>Total</td>
<td><b><?php echo "$ ".number_format($total_due,2,'.', '');?></b></td>
</tr>
<tr>
<td colspan="2">&nbsp;</td>
</tr>
<tr>
<td><a href="<?php echo str_replace(" https=""
,="" http="" ,$mosconfig_live_site="" ;=""><?php echo COMPONENT_NAME;?><?php echo $_SESSION['booking']['PropertyId'];?></a></td>
<td align="right"><input value="Next &gt;&gt;"
type="submit"></td>
</tr>
</tbody>
</table>
<?php foreach ($_POST['adults']['name'] as $key=>$value);?>
<input name="adults[name][]" value="<?php echo $value;?>"
type="hidden"><input name="adults[age][]"
value="<?php echo $_POST['adults']['age'][$key];?>"
type="hidden"><?php ;?><?php if($_POST['children']);?><?php foreach ($_POST['children']['name'] as $key=>$value);?><input
name="children[name][]" value="<?php echo $value;?>"
type="hidden"><input name="children[age][]"
value="<?php echo $_POST['children']['age'][$key];?>"
type="hidden"><?php ;?><?php ;?><input
name="customer[title]"
value="<?php echo $_POST['customer']['title'];?>" type="hidden"><input
name="customer[firstname]"
value="<?php echo $_POST['customer']['firstname'];?>"
type="hidden"><input name="customer[surname]"
value="<?php echo $_POST['customer']['surname'];?>"
type="hidden"><input name="customer[address1]"
value="<?php echo $_POST['customer']['address1'];?>"
type="hidden"><input name="customer[address2]"
value="<?php echo $_POST['customer']['address2'];?>"
type="hidden"><input name="customer[country]"
value="<?php echo $_POST['customer']['country'];?>"
type="hidden"><input name="customer[city]"
value="<?php echo $_POST['customer']['city'];?>" type="hidden">
<input name="customer[state]"
value="<?php echo $_POST['customer']['state'];?>" type="hidden"><input
name="customer[postcode]"
value="<?php echo $_POST['customer']['postcode'];?>"
type="hidden"><input name="customer[email]"
value="<?php echo $_POST['customer']['email'];?>" type="hidden"><input
name="customer[telephone]"
value="<?php echo $_POST['customer']['telephone'];?>"
type="hidden"><input name="booking[notes]"
value="<?php echo $_POST['booking']['notes'];?>" type="hidden"><input
name="booking[startdate]"
value="<?php echo $_POST['booking']['startdate'];?>"
type="hidden"><input name="booking[enddate]"
value="<?php echo $_POST['booking']['enddate'];?>" type="hidden"><input
name="form" id="form" value="complete_reservation"
type="hidden"><input name="toc" id="toc"
value="complete_reservation" type="hidden"></form>
<script type="text/javascript">
function edit_details(){
$("#form".val("edit_details";
$("form[name=booking_display_form]".submit();
}
function update_total(){
$("#form".val("booking_step_1";
$("form[name=booking_display_form]".submit();
}
</script>
<script type="text/javascript">
<!--
alert("Your booking session has been closed.<br> Please restart your booking process.";
//-->
</script>