Summary

Joomla! is a secure platform with a robust framework that allows us to deliver safe applications to our users. But as with any other tool, if we do not pay attention to the details, we might include vulnerabilities in our code.

In this chapter, we learned about important security practices that allow for safer coding in Joomla!. First, we learned how to filter the requests we receive in our extension through the entry points we defined in our component. Then, we focused on how to secure our queries to the database using prepared statements and also casting our values to the specific types. Finally, we provided some tips to handle our static assets securely, looked at how to prevent random access to our PHP files, and learned how to automatically check our extensions using the JED Checker component.

With that, we have developed a fully equipped project manager, added automatic tests, and hardened ourselves against vulnerabilities. In the next chapter, we will look at all...