Preventing Cracks - Discussion - Joomla! Forum - community, help and support

i think forge should stop serving downloads of insecure components/ modules until component patched.  lot of newbie users trust joomla , don't have technical skill fix issues when can occur.

i think each hacking incident has 3 outcomes---
1. pissed off web admins.
2. pissded off users
3. hit reputation joomla secure.

i think important joomla doesn't end phpbb great use, users choose use else due security issues

troydoogle7 wrote:i think forge should stop serving downloads of insecure components/ modules until component patched.  lot of newbie users trust joomla , don't have technical skill fix issues when can occur.

i think each hacking incident has 3 outcomes---
1. pissed off web admins.
2. pissded off users
3. hit reputation joomla secure.

i think important joomla doesn't end phpbb great use, users choose use else due security issues

hmm. interesting issue. raise valid concerns.

on other side; if security testing done on contributions extensions site time new features users delayed.
there great cost work.
i sure many contributions never see light of day.
great users have security concerns chief priority bad other users not not have access software use.

as works most, i'm not sure if all, extensions have disclaimers "use component @ own risk" or "without warranty". warning , not install confidence in users of software. in open source situation understandable why these policies must exist. i'm not sure tests given software submitted extensions site security.
anyone know?

if security issues concern of user web developer must remember basic principle each new application (3rd party) added site more security holes open up.
if particular application of great security concern might worth consider having integrated outside of joomla site.