security cms - opensoure2day event

87
Web Technology & Open Source CMS Security http://slideshare.net/akarawuth

Upload: akarawuth-tamrareang

Post on 16-Jul-2015

230 views

Category:

Internet


0 download

TRANSCRIPT

Page 1: Security CMS - Opensoure2Day event

Web Technology & Open Source CMS Security

http://slideshare.net/akarawuth

Page 2: Security CMS - Opensoure2Day event

About Me

อัครวุฒิ ตำราเรียงAkarawuth Tamrareang

(JoomlaCorner)

[email protected]

twitter: @joomlacornerwww.marvelic.co.th

www.akarawuth.com

Tel : 02 717 1120-1

- กรรมการผู้จัดการ Marvelic Engine Co.,Ltd.

www.marvelic.co.th

- Joomla! Bug Squad : joomla.org - Founder JoomlaCorner.com

- อดีตนายกสมาคมศึกษาและพัฒนาโอเพ่นซอร์ส (OSEDA.or.th)- กรรมการควบคุมจริยธรรม สมาคมผู้ดูแลเว็บไทย

- อดีตกรรมการบริหาร OpenSource Matters Inc. (Joomla Project)

- ผู้อำนวยการฝ่ายเทคโนโลยีสารสนเทศ สมาคมอาสาสมัครบรรเทาสาธารณภัยแห่งประเทศไทย

- ที่ปรึกษาสมาคมการดับเพลิงและช่วยชีวิต

Page 3: Security CMS - Opensoure2Day event

Indus Net Technologies www.indusnet.co.in | +91 33 2357 6070

1. Responsive Design The number of users accessing your website through tablets, iPhones and Android smart- phones is going to increase further.

It is absolutely necessary to have a responsive web design so that your web page adjusts to all screen dimensions or else do not expect visitors to come back after a bad experience.

This overcomes both readability and usability issues. Furthermore, all the features should be smoothly functional as on a desktop.03

02

01

Top Trends to Follow in 2015

Page 4: Security CMS - Opensoure2Day event

Indus Net Technologies www.indusnet.co.in | +91 33 2357 6070

2. Flat DesignFlat design refers to the simplicity of the website and quickness of its response.01

Get rid of textures, shadows, styles and bevels & you are left with flat design, which is quick to load.02

Simple website with clean lines and dynamic colors makes it highly recommended.03

Page 5: Security CMS - Opensoure2Day event

Indus Net Technologies www.indusnet.co.in | +91 33 2357 6070

3. ScrollingThe scrolling site with a number of pages allows you to maximize your SEO tactics effectively.01On the contrary, with increasing number of mobile and tablet users, usual scrolling is not a good idea. Instead, using single page or panels that can be scrolled is a better bet for mobile users.

02

Understand the audience that you are building for. Your audience might use different kinds of screen, requiring different styles of scrolling.03

Page 6: Security CMS - Opensoure2Day event

Indus Net Technologies www.indusnet.co.in | +91 33 2357 6070

4. Typography Typography is the ability to be elegant and add refinement to the fonts.01There are various styles of fonts available that can be used effectively to showcase rich typography.02

Focus on style and usability even when it comes to typography.03

Page 7: Security CMS - Opensoure2Day event

Indus Net Technologies www.indusnet.co.in | +91 33 2357 6070

5. Large Images on the Homepage Use of large and prominent images that explicitly express the idea is on the rise.01A good picture makes more sense for mobile users as the tendency to read content is limited on mobiles.02Large image does not mean high file size in terms of resolution and pixels as it lowers the page upload speed.03Images need not distract the readability of content, rather enhance the experience only when required.04

Page 8: Security CMS - Opensoure2Day event

Indus Net Technologies www.indusnet.co.in | +91 33 2357 6070

6. Webpage Background Background is likely to be dominated by HTML5 videos.01Use of animation, instead of static images in the background, is also gaining a lot of popularity among the experts.02

Many brands have already adopted this design method, which will bloom further in 2015.03

Page 9: Security CMS - Opensoure2Day event

Responsive Web Design

Page 10: Security CMS - Opensoure2Day event

https://www.youtube.com/watch?v=mbJvL61DOZg

What is Responsive Web Design

Page 11: Security CMS - Opensoure2Day event

April 21 Is Your Last Chance for Mobile

Optimization Before 'Mobilegeddon'

For years now, mobile usability has been a factor in Google’s search algorithm. Sites that are optimized suitably for use on mobile devices rank higher than their non-optimized counterparts, even on desktop devices.

Page 12: Security CMS - Opensoure2Day event

Web Technology

- Custom (proprietary) CMS

- Open Source CMS

Page 13: Security CMS - Opensoure2Day event

Open Source CMS

Page 14: Security CMS - Opensoure2Day event

http://google.com/trends

Page 15: Security CMS - Opensoure2Day event

ยังใช้ Joomla! 1.5?

- Joomla 1.5 และ 2.5 สิ้นสุดการให้บริการ

Page 16: Security CMS - Opensoure2Day event

- Updating in Joomla 3 is easy! (One click updates)

ทำไมเราจะต้อง Migration ?

- เรื่องความปลอดภัยSecurity and Extensions vulnerabilities

- Joomla 1.5 และ 2.5 สิ้นสุดการให้บริการ

Page 17: Security CMS - Opensoure2Day event

เตรียมตัวก่อนจะทำการไมเกรด

- ไมเกรดมาเป็น Joomla! เวอร์ชั่นไหนดี 2.5 หรือ 3.x?

- มีงบประมาณในการทำไหม ?

https://docs.joomla.org/Migration

Page 18: Security CMS - Opensoure2Day event

https://docs.joomla.org/What_version_of_Joomla!_should_you_use

Page 19: Security CMS - Opensoure2Day event

10 December 2014 : Good Bye Joomla! 2.5.28.

What does this mean?

End of support refers to when Joomla! no longer provides bug fixes, features, or security updates for a release.

This is the time to make sure you have the latest available update of Joomla. Your website will continue to work as normal.

Page 20: Security CMS - Opensoure2Day event

เตรียมตัวก่อนจะทำการไมเกรด

- ไมเกรดมาเป็น Joomla! เวอร์ชั่นไหนดี 2.5 หรือ 3.x?- มีงบประมาณไหมในการทำไหม ?

https://docs.joomla.org/Migration

- ทำอย่างไรกับ Extensions?

- ทำอย่างไรกับ Templates?- Backup

Page 21: Security CMS - Opensoure2Day event

มีอะไรใหม่ใน Joomla! 3.x

สำหรับท่านที่ยังใช้ Joomla! 2.5.x อยู่

Page 22: Security CMS - Opensoure2Day event

Multilingual Install

Page 23: Security CMS - Opensoure2Day event

Content Versioning

Page 24: Security CMS - Opensoure2Day event

Content Versioning

Page 25: Security CMS - Opensoure2Day event

Content Versioning

Page 26: Security CMS - Opensoure2Day event

Template Editor

Page 27: Security CMS - Opensoure2Day event

Install from Web

Page 28: Security CMS - Opensoure2Day event

Two Factor Authentication

Page 29: Security CMS - Opensoure2Day event

Joomla! is 3.4.1ข้อมูล ณ วันที่ 1 เมษายน 2558

Page 30: Security CMS - Opensoure2Day event

Black-end Isis Template improvements

Slidebar Filters Box in Module Manager

Page 31: Security CMS - Opensoure2Day event

NoCaptcha Buil-in Plugin

In Joomla 2.5 and Joomla 3.3 there were ReCaptcha plugin (service) used to

prevent spammers. And now in Joomla 3.4 you will get NoCaptcha plugin.

Page 32: Security CMS - Opensoure2Day event

Front-end Module Editing Improvements

Page 33: Security CMS - Opensoure2Day event

Front-end Module Editing Improvements

Page 34: Security CMS - Opensoure2Day event

Joomla 3.4 robots.txt Update

A change to the default robots.txt files was made in Joomla! 3.3 to allow Google to access templates and media files by default to improve SEO.

This change is not applied automatically on upgrades and users are recommended to review the changes in the robots.txt.dist file and implement these change in their own robots.txt file.

Page 35: Security CMS - Opensoure2Day event

Joomla 3.4 robots.txt Update

robots.txt.dist robots.txt

Page 36: Security CMS - Opensoure2Day event

Joomla 3.4 - Change

- Weblinks Component Removed from New Installs

- Continued Microdata Implementation in other

Joomla’s core component

- Composer Integration

http://magazine.joomla.org/issues/issue-july-2014/item/2161-practical-use-of-microdata-in-joomla-3-and-2-5

Page 37: Security CMS - Opensoure2Day event

Q&A http://www.joomlacorner.com

http://www.marvelic.co.th

Page 38: Security CMS - Opensoure2Day event

ตัวอย่างเว็บไซต์ ที่พัฒนาด้วย Joomla!

Page 39: Security CMS - Opensoure2Day event
Page 40: Security CMS - Opensoure2Day event

http://www.aerolithe.fr

Page 41: Security CMS - Opensoure2Day event
Page 42: Security CMS - Opensoure2Day event

โรงพยาบาลเมตตาประชารักษ์ (วัดไร่ขิง)

Page 43: Security CMS - Opensoure2Day event
Page 44: Security CMS - Opensoure2Day event

yoga101.co.th

Page 45: Security CMS - Opensoure2Day event

โรงเรียนกวดวิชา โอพลัส : oplus-school.com

Page 46: Security CMS - Opensoure2Day event

Extensions เฉพาะทาง

Page 47: Security CMS - Opensoure2Day event

ProjectFork.net

Page 48: Security CMS - Opensoure2Day event
Page 49: Security CMS - Opensoure2Day event
Page 50: Security CMS - Opensoure2Day event

WordPress for Joomla

Page 51: Security CMS - Opensoure2Day event

stackideas.com

Page 52: Security CMS - Opensoure2Day event

EasyBlog - stackideas.com

Page 53: Security CMS - Opensoure2Day event

สร้างเว็บไซต์ Social Network

Page 54: Security CMS - Opensoure2Day event

Activity Stream

Profile

Page 55: Security CMS - Opensoure2Day event

eCommerce Solutions

Page 56: Security CMS - Opensoure2Day event

• Auction • Billing & Invoices • Credits & Point System • Membership & Subscriptions • Paid Downloads • Payment Gateway • Payment systems • Sale quote • Shopping Cart • webERP

eCommerce

http://extensions.joomla.org

Page 57: Security CMS - Opensoure2Day event

https://www.blackreddesigns.com/store/products/1-flatlia-mobile-extensions/2-rent-a-bike-web-app

Page 58: Security CMS - Opensoure2Day event

citruscart.com

Page 59: Security CMS - Opensoure2Day event

citruscart.com

ENTERPRISE-CLASS E-COMMERCE SOLUTION FOR JOOMLA

Page 60: Security CMS - Opensoure2Day event

virtueMart.net

Page 61: Security CMS - Opensoure2Day event

Integration

Page 62: Security CMS - Opensoure2Day event

Build any Type of Content with CCK

Page 63: Security CMS - Opensoure2Day event

getk2.org

flexicontent.org

seblod.com

Page 64: Security CMS - Opensoure2Day event
Page 65: Security CMS - Opensoure2Day event

ตัวอย่าง FLEXIContent

Page 66: Security CMS - Opensoure2Day event

cmsplugin.com

Page 67: Security CMS - Opensoure2Day event

Takluck ระบบบริหารจัดการสมาชิก

Page 68: Security CMS - Opensoure2Day event

MyContent & Workflow

Page 69: Security CMS - Opensoure2Day event

marvelic.co.th

Page 70: Security CMS - Opensoure2Day event

Joomla Web Package

Source : http://www.youtube.com/watch?v=sWE3Yyxq_Iw

Page 71: Security CMS - Opensoure2Day event
Page 72: Security CMS - Opensoure2Day event
Page 73: Security CMS - Opensoure2Day event
Page 74: Security CMS - Opensoure2Day event

ช่องทางการชำระเงิน ของระบบจองห้องพัก

Page 75: Security CMS - Opensoure2Day event

Secure Your WebSite

Page 76: Security CMS - Opensoure2Day event

เว็บภาครัฐไทยถูกแฮกสูงสุดในอาเซียน ถูกแปลงโฉมหน้าเว็บกว่า 1,400 ครั้งในปีที่ผ่านมา

Page 77: Security CMS - Opensoure2Day event
Page 78: Security CMS - Opensoure2Day event
Page 79: Security CMS - Opensoure2Day event
Page 80: Security CMS - Opensoure2Day event
Page 81: Security CMS - Opensoure2Day event
Page 82: Security CMS - Opensoure2Day event
Page 83: Security CMS - Opensoure2Day event
Page 84: Security CMS - Opensoure2Day event
Page 85: Security CMS - Opensoure2Day event

Google Webmaster Tools

Page 86: Security CMS - Opensoure2Day event

https://www.youtube.com/watch?v=mbJvL61DOZg

Google Webmaster Tools - Help for hacked sites: Overview

Page 87: Security CMS - Opensoure2Day event

Q&A http://www.joomlacorner.com

http://www.marvelic.co.th