Hidden in plain site – joomla! hidden secrets for code monkeys
8 likes1,909 views
The document provides a collection of Joomla code snippets and techniques, including file uploads, URI manipulation, image processing, and database handling. It covers using various libraries and classes for functionality like HTTP requests, Punycode encoding, and CAPTCHA validation. Additionally, it discusses integrations with popular services, database exports/imports, and custom application types in Joomla.
![$image = new JImage(__DIR__ . '/image.jpg');
$image->createThumbs([
'640x480', '320x200', '160x100', ‘80x50'
], JImage::SCALE_FILL, __DIR__ . '/thumbs');
Image manipulation
Thumbnails](https://image.slidesharecdn.com/hiddeninplainsitejoomlahiddensecretsforcodemonkeys-150531102302-lva1-app6892/85/Hidden-in-plain-site-joomla-hidden-secrets-for-code-monkeys-15-320.jpg)
![$config = [
'dbinstaller_directory' => '/path/to/xml/files',
'option' => 'com_example'
];
$schemaUpdater = new FOFDatabaseInstaller($config);
// Install or update schema
$schemaUpdater->updateSchema();
// Remove the schema
$schemaUpdater->removeSchema();
XML-based schema updates
using FOFDatabaseInstaller](https://image.slidesharecdn.com/hiddeninplainsitejoomlahiddensecretsforcodemonkeys-150531102302-lva1-app6892/85/Hidden-in-plain-site-joomla-hidden-secrets-for-code-monkeys-21-320.jpg)
Hidden in plain site – joomla! hidden secrets for code monkeys
- 1. Hidden in plain site Joomla! hidden secrets for code monkeys
- 4. Input $app = JFactory::getApplication(); $option = $app->input ->getCmd(‘option’);
- 5. File uploads with security check $app = JFactory::getApplication(); $option = $app->input->files ->get('file', array());
- 6. File uploads without security check $app = JFactory::getApplication(); $option = $app->input->files ->get('file', array(), 'raw');
- 7. Date and Time $dateString = '2015-05-31 12:00:00'; $date = JFactory::getDate($dateString); $format = JText::_('DATE_FORMAT_LC2'); echo $date->format($format);
- 8. URI manipulation $uri = JUri::getInstance(); $uri->setVar('joomla', 'rocks'); echo $uri->toString();
- 11. $http = JHttpFactory::getHttp(); $response = $http->get('http://www.joomla.org/ download.html'); $this->out("HTTP Code: " . $response->code); $this->out("Headers:n" . print_r($response- >headers, true)); HTTP Transfers without the pain of cURL and stream contexts
- 12. $stream = new JStream(); $stream->open(JPATH_SITE . '/tmp/temp.gz', 'w', false, null, false, false, true); $stream->write($buffer); $stream->chmod(); $stream->close(); Stream file I/O with transparent GZip / BZip2 support
- 13. JArchive::extract($archiveName, $targetFolder); Extract archives zip, tar, tar.gz / tgz, tar.bz2 / tbz
- 14. JStringPunycode::emailToPunycode('üser@êxαmpłe.com' ); // üser@xn--xmpe-fpa54cg0l.com JStringPunycode::urlToPunycode('http:// www.παράδειγμα.com'); // http://www.xn--hxajbheg2az3al.com JStringPunycode::fromPunycode('http://www.xn-- hxajbheg2az3al.com'); // http://www.παράδειγμα.com UTF-8 Domains a.k.a. “Punycode” or IDNA conversion
- 15. $image = new JImage(__DIR__ . '/image.jpg'); $image->createThumbs([ '640x480', '320x200', '160x100', ‘80x50' ], JImage::SCALE_FILL, __DIR__ . '/thumbs'); Image manipulation Thumbnails
- 16. $image = new JImage(__DIR__ . '/image.jpg'); $newImage = $image ->filter('grayscale') ->rotate('10', 0xFFFFFF, true) ->resize(320, 200); $newImage->toFile( __DIR__ . ‘/altered.png', IMAGETYPE_PNG ); Image manipulation Alter and convert images
- 19. $patcher = JFilesystemPatcher::getInstance(); $patcher ->reset() ->addFile( __DIR__ . ‘/file1.patch', JPATH_BASE, 1 ); $patcher->apply(); Apply patch files JFilesystemPatcher
- 20. $schemaUpdater = JSchemaChangeset::getInstance( $db, '/path/to/sql/files' ); $errors = $schemaUpdater->check(); $schemaUpdater->fix(); Update the schema or get a list of errors (changes not applied)
- 21. $config = [ 'dbinstaller_directory' => '/path/to/xml/files', 'option' => 'com_example' ]; $schemaUpdater = new FOFDatabaseInstaller($config); // Install or update schema $schemaUpdater->updateSchema(); // Remove the schema $schemaUpdater->removeSchema(); XML-based schema updates using FOFDatabaseInstaller
- 22. $db = JFactory::getDbo(); $exporter = $db->getExporter(); $xml = $exporter->asXml(); Exporting the database Here Be Dragons!
- 23. $db = JFactory::getDbo(); $importer = $db->getImporter(); $importer->from($xml); // Bug: mergeStructure is protected. Sad panda :( // $importer->mergeStructure(); $reflection = new ReflectionObject($importer); $method = $reflection->getMethod('mergeStructure'); $method->setAccessible(true); $method->invoke($importer); Importing the database Here Be Dragons!
- 24. Dial the awesome to eleven!
- 26. JFacebook JLinkedin JGoogle JTwitter JMediawiki JOpenstreetmapJOauth1Client JOauth2Client Services Lots of!
- 27. Cryptography JKeychain & JCrypt • 3DES • Blowfish • Rijndael256 (AES) • Simple (don’t use) • mcrypt
- 28. // Set up $plugin = JFactory::getApplication()->getParams() ->get('captcha', JFactory::getConfig()->get('captcha')); $captcha = JCaptcha::getInstance($plugin, array( 'namespace' => 'myComponent' )); // Show echo $captcha->display('mycaptcha', 'mycaptcha'); // Validate $code = JFactory::getApplication()->input->get('mycaptcha'); if (!$captcha->checkAnswer($code)) { throw new RuntimeException('Bots not welcome', 403); } CAPTCHA Keep bots away
- 29. $less = new JLess(); $less->ccompile($lessFile, $cssFile); Compile LESS to CSS Server-side, cached
- 30. $pathway = JFactory::getApplication() ->getPathway(); $pathway->addItem('MyItem', $url); Manipulate breadcrumbs Custom, in-component pathways
- 32. More than a CMS Custom application types • JApplicationCLI • JApplicationWeb • JApplicationDaemon
- 33. Photos by Smithsonian Institution, National Museum of American History
- 34. May the Core be with you
- 35. The End