Joomla Resources

Still running RokSprocket? Its development stopped after Joomla 3, so it won't work on Joomla 4, 5, or 6 - and it's usually the one extension holding a site back from upgrading. Here's the modern, maintained alternative, and how to switch in minutes.

A lot of Joomla sites run fine until the database gets big: thousands of articles, hundreds of thousands of related rows, and suddenly peak-hour load times creep up even with caching turned on and unused extensions removed. The usual advice ("enable caching, trim plugins") isn't wrong, but it treats the symptom. If your database is genuinely large, the fix has to happen closer to the database itself — starting with where Joomla stores its session data.

Joomla's core System - HTTP Headers plugin makes it easy to switch on several important security headers without touching server config files. But its coverage has real edges: two commonly requested headers are missing entirely, and one setting - the CSP nonce length - looks odd until you see the code behind it.

A site owner ran Joomla 5, kept it patched, and sat behind a WAF configured at a strict paranoia level. It still got hacked. Here's exactly how the attacker got in, why a WAF alone wasn't enough to stop it, and the concrete steps that would have.

Mystery spam that looks like it comes from your Joomla site is almost always your own forms being abused as a relay, not a full compromise. Here's how to find the leak and shut it for good.

I started with Joomla in 2006, back when it was still Joomla 1.0. Twenty one years later, it is the platform I build my work and my business on. That feels like a good reason to stop and look back, so let me tell you how a CMS became such a big part of my story.