If you have - or want to have - multiple #Joomla installs on one web hosting account, avoid nesting them inside of the main Joomla install. Not only is this a better way to manage and keep track of the files of multiple Joomla installs, it will keep them separated and help avoid all sites being compromised if one of them is hacked or infected with malware. How to install and setup multiple Joomla sites in different subdomains is what is what today's #maintenancemonday is all about.
00:00:00 โ Intro,sponsors and topic
00:00:51 โ Nested Installs Explained
00:02:03 โ Security Risks
00:04:36 โ Hosting Best Practices
00:09:19 โ Configuration Tips
00:10:57 โ Subdomain Restrictions
00:15:07 โ Changing Hosting Providers
00:16:03 โ FTP & Security
00:20:12 โ Additional Risks
00:22:00 โ Maintenance Challenges
00:23:50 โ Recommendations
00:25:00 โ Q&A: Business Practices (Fixed from 24:60)
00:27:33 โ Case Study
00:31:06 โ Pricing & Contracts
00:33:25 โ Legal Compliance
00:34:30 โ Security Tools
00:39:54 โ Privacy & Tracking
00:42:35 โ Industry Trends
00:49:15 โ Complexity & Opportunities
00:52:11 โ Future Predictions
00:54:17 โ Wrap-Up
Summary
1.Introduction & Topic Overview:
The stream introduces "Maintenance Monday #37," focusing on the critical best practice of avoiding nested Joomla installations.
2.Understanding the Problem:
The host defines what a nested install is (e.g., installing multiple Joomla sites inside subfolders of one hosting account) and explains the core security risk: if one site is compromised, all others in the shared space are vulnerable.
3.Demonstrating the Risk with Tools:
The video uses the MyJoomla.com audit tool to show how easily such risky configurations can be detected and highlights how they increase the overall attack surface.
4.Hosting & Organization Best Practices:
The key recommendation is to use separate hosting accounts or carefully isolated folders for each Joomla site. This simplifies maintenance, prevents cross-site contamination, and allows for secure, restricted FTP access per client.
5.Maintenance Challenges:
The host discusses the practical difficulty of keeping multiple, intertwined Joomla sites updated and the severe risk of forgotten, outdated installations leading to malware infections.
6.Business & Client Management:
The discussion shifts to the business side, covering how to structure maintenance contracts, price services (hourly vs. monthly), and educate clients on the necessity of ongoing updates for security and legal compliance.
7.Legal & Compliance Drivers:
Emphasis is placed on using data protection regulations (like GDPR) as a compelling reason for clients to invest in professional maintenance, highlighting the developer's liability for protecting customer data.
8.Privacy & Technical Standards:
Additional best practices are covered, such as hosting third-party resources (like fonts) locally to ensure privacy compliance and implementing strong spam protection.
9.Industry Trends & Opportunities:
The conversation explores how increasing website complexity, SEO demands, and strict privacy laws are creating growing opportunities for professional maintenance and security services.
10.Conclusion & Upcoming Content:
The stream wraps up with community chat and teases future content, including a tutorial on two-factor authentication and an interview about a Joomla client dashboard.
Please send any feedback or bug reports or queries to;
Contact Tim Davis โบ
Joomla Training Cohort โบ https://cybersalt.com/jtc
Add comment