<noinclude>{{Joomla version|version=4.x}}{{Joomla version|version=5.x}}</noinclude>
<noinclude><languages /></noinclude>

== Introduction ==

The Content Dashboard is accessed via the icon to the right of the Content menu item. It is a square of four squares. The dashboard contains three panels corresponding to the three subsections of the Content menu. These panels cannot be edited or unpublished. The dashboard may also contain additional panels with information about the site. New installations show '''Popular Articles''' and '''Recently Added Articles'''. You can add more panels by selecting the '''+''' icon in the vacant '''Add module to the dashboard''' panel.

== Screenshot ==

[[File:J4.x-content-dashboard-en.png|border|800px]]

<noinclude>
[[Category:Joomla!_4.x{{#translation:}}]]
[[Category:Joomla!_5.x]]
</noinclude>

J4.x:Components Dashboard

2024-01-31T16:26:27Z

Webby1212: Add J5.x version and category

<noinclude>{{Joomla version|version=4.x}}{{Joomla version|version=5.x}}</noinclude>
<noinclude><languages /></noinclude>

== Introduction ==

To open the Components Dashboard select the dashboard icon to the right of the Components menu item in the Administrator menu. The default dashboard contains panels for each of the components in the Components menu list. The panels show the sub-menu links for each component. None can be edited or unpublished.

== Screenshot ==

[[File:J4.x-componsnts-dashboard-en.png|border|800px]]

<noinclude>
[[Category:Joomla!_4.x{{#translation:}}]]
[[Category:Joomla!_5.x]]
</noinclude>

User:Webby1212

2024-01-31T16:17:36Z

Webby1212:

Keyboard Shortcuts

2024-01-31T15:46:10Z

Webby1212: Add J5 category

<noinclude>{{Joomla version|version=4.x}}{{Joomla version|version=5.x}}</noinclude>
<noinclude><languages /></noinclude>
<translate>
== Introduction == 


Since Joomla! 4.2.0 (and a GSoC project in 2021) users can use their keyboard on the Administrator site to cause certain actions. For example, saving the current page, going to the home dashboard or opening the options. There is also an overview with all the possible shortcuts, which opens up by pressing '''''J''''' and '''''X''''' sequentially (not at the same time!). Unless you change the plugin settings you must press the keys within 2 seconds.


The feature is enabled by default. It can be disabled or configured under {{rarr|Administrator,System,Plugins,System - Keyboard Shortcuts}}. Currently the only configuration is the timeout how long the system will wait for your next key input. By default it waits for 2000 milliseconds (2 seconds).

== Default Shortcuts in Joomla == 


* J + A - Save current content
* J + S - For Save & Close
* J + Q - Cancels the current page
* J + N - Presses the ''New'' button
* J + F - Sets focus on the Search field
* J + O - Goes to Options
* J + H - Help window opens (could trigger a browser pop-up warning)
* J + M - Toggles the menu bar
* J + X - Displays a list of available Shortcuts
* J + D - Goes directly to the Home Dashboard

== Third Party Shortcuts == 


Other developers can add their shortcuts too. The Joomla plugin calls the ''onLoadShortcuts'' Event, which can be used by other plugins as well. The event needs to be added to the list of ''getSubscribedEvents'' inside the plugin. The assigned function could look like this:


<syntaxhighlight lang="php">
public function onLoadShortcuts(EventInterface $event): void {
$shortcuts = $event->getArgument('shortcuts');
$exampleShortcuts = array('example' => (object)['shortcut' => 'E', 'title' => 'Great Example', 'selector' => '#menu-collapse']);
$event->setArgument('shortcuts', array_merge($shortcuts, $exampleShortcuts));
}
</syntaxhighlight>


Pay close attention to the array_merge part: When the already existing shortcuts are not merged with the new ones, the old ones are overwritten.


Developers can provide an array with shortcut objects:


<syntaxhighlight lang="php">{ shortcut: string, selector: string, title: string }</syntaxhighlight>


* The ''Shortcut'' needs to be a keyboard input, separated by a plus e.g. "Y" or "ALT + Z + 7" (currently there is really no filtering). Keep in mind that every shortcut sequence will start with '''''J'''''.
* ''Selectors'' are CSS-selectors or URLs to specify the target. When it is an input element, the shortcut gives focus as it is the case for the search field. Otherwise the element will be clicked or the URL will be called.
* The ''Title'' will be displayed in the overview. It could be the name of the target for example.

== Backgrounds == 


Some may wonder about the decision to use sequential shortcuts or the ''J'' as the start instead of Ctrl or something else. The main reasons are accessibility and the avoidance of interruption by other software. For example Ctrl + S would be nice for saving an article, but is already used by browsers. The same can happen for screen readers or password managers etc. So the safer option was to use something Joomla specific like the J at the start.


Now the other problem is that it is not always possible to press more than one key at once. Windows has the Sticky Key mode for this, but it is only working for modifier keys like Shift, Ctrl and Alt. So the plugin uses sequentially input right from the start which makes it usable by more people even without the help of OS-modes.
</translate>
<noinclude>
[[Category:Joomla!_4.x]]
[[Category:Joomla!_5.x]]
</noinclude>

J4.x:Http Header Management

2024-01-31T15:32:14Z

Webby1212: Amend double entry "set set" to specify in section Content Security Policy (CSP) Configuration. Amend {{Joomla version|version=4.x}} to {{Joomla version|version=4.x}} {{Joomla version|version=5.x}}. Add J5.x category

<noinclude><languages /></noinclude>
<noinclude>{{Joomla version|version=4.x}}{{Joomla version|version=5.x}}</noinclude>
{{Top portal heading|color=white-bkgd|icon=magic|icon-color=#5091cd|size=3x|text-color=#333|title=<translate>

Tutorial<br />How to Use the New HTTP Header Management in Joomla 4.0</translate>}}

<translate> As of Joomla 4.0, Joomla introduced an HTTP Header Management System. This System is designed to help site owners to configure the HTTP Security Headers from the Backend</translate>

<translate> In this tutorial, you will find information on how to set up this new system on your site.</translate>

<translate>
==Plugin== 
</translate>

<translate>
===System - HTTP Headers (plg_system_httpheaders)=== 
</translate>
<translate> Navigate to {{rarr|System,Plugins,System - HTTP Headers}} to access the plugin configuration.</translate>

<translate>
===Plugin Configuration=== 
</translate>

<translate> From this page you can choose to enable the headers written to the server configuration files (''.htaccess'' and ''web.config'') and configure whether the following HTTP headers are enabled</translate>
* [https://scotthelme.co.uk/hardening-your-http-response-headers/#x-frame-options X-Frame-Options]
* [https://scotthelme.co.uk/a-new-security-header-referrer-policy/ Referrer-Policy]
* [https://www.chromestatus.com/feature/5432089535053824 Cross-Origin-Opener-Policy]

<translate> Using the ''Force Header'' form you can also force the following headers with its values:</translate>
* [https://scotthelme.co.uk/hsts-the-missing-link-in-tls/ Strict-Transport-Security]
* [https://scotthelme.co.uk/content-security-policy-an-introduction/ Content-Security-Policy]
* [https://scotthelme.co.uk/content-security-policy-an-introduction/#testingapolicy Content-Security-Policy-Report-Only]
* [https://scotthelme.co.uk/a-new-security-header-expect-ct/ Expect-CT]
* [https://scotthelme.co.uk/a-new-security-header-feature-policy/ Feature-Policy & Permissions-Policy]
* [https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-to Report-to]

[[File:Plg-system-httpheaders-options-<translate> en</translate>.png|center|800px]]

<translate>
===Strict-Transport-Security (HSTS) Configuration=== 
</translate>

<translate> From this page you can choose to enable the Strict-Transport-Security (HSTS) header as well as configure the ''max-age'' value, whether subdomains should be included and whether you want to be added to the browsers Preload List.</translate>

[[File:Plg-system-httpheaders-options-hsts-<translate> en</translate>.png|center|800px]]

===Content-Security-Policy (CSP) Configuration===

From this page you can choose to enable and configure the Content-Security-Policy (CSP) header set by the plugin.

[[File:Plg-system-httpheaders-options-csp-en.png|center|800px]]

Once enabled you can set the client where you want to enforce the configured CSP, allowing you to specify ''site'', ''administrator'' or ''both''.

The following settings need a bit more explanation, that's also the reason there are additional descriptions on all of them.

The final option called ''Add Directive'' allows you to configure the ''allowlist'' per directive as you need them. For example the directive ''script-src'' where the option ''Value'' you enter the origins you want to allow to load scripts from.

<translate>
==Notes== 
</translate>
<translate>

When you have configured some HTTP Security Headers directly on the server, our tooling might create double entries.


Check the output of your HTTP Headers after configuring in the browser console. In Google Chrome: Inspect > Network > the output under Headers. You can than disable the headers that cause double entries. Also check the console of your browser for possible errors.

==Extension Developers== 
</translate>
<translate> As you might know the big security advantage concerning Content Security Policy jumps in when we can use the Header to block all inline JavaScript and inline CSS affecting for example JavaScript event handlers via HTML attributes.</translate>
With this browser protection enabled we will block inline JavaScript and inline CSS usage also for your extensions. That protection is not enabled by default but can be enabled by your users.

For 4.0 it is recommended to get the frontend of your extension running with strict Content Security Policy enabled. For 4.1 compatibility it is recommended that this also applies to your backend.

<translate> It is still a requirement to have inline JavaScript and CSS. For that reason we have implemented nonce and hash support into our Document APIs. When you use them the core will make sure they are whitelisted but we will still block anything malicious to protect our sites.</translate>

=== Important Notes for Extension Developers ===
Starting with Joomla 4.0, Content Security Policy:
* is shipped by the core
* is disabled by default
* can be enabled by your users
* it is strongly recommended that your extension frontend works with 4.0 with Content Security Policy enabled
* it is recommended that your extension backend works with 4.1 with Content Security Policy enabled

With strict Content Security Policy enabled the following features will be blocked:
* the execution of JavaScript via the HTML event handlers (''onXXX'' handlers like ''onClick'' and similar)
* the execution of in-page JavaScript not passed to the page via the Document API
* the execution of JavaScript code injected into DOM APIs such as ''eval()''
* the usage of inline in-page CSS not passed to the page via the Document API
* the usage of inline CSS using the HTML style attribute

<translate> To get your extensions to work even with strict Content Security Policy enabled, use the Document API to apply your inline JavaScript and CSS. Check the examples below.</translate>

<translate>
===Adding JavaScript Using the Joomla API=== 
</translate>

<syntaxhighlight lang="php">
use Joomla\CMS\Factory;

/** @var Joomla\CMS\WebAsset\WebAssetManager $wa */
$wa = Factory::getApplication()->getDocument()->getWebAssetManager();

// Add JavaScript from URL
$wa->registerAndUseScript('com_example.sample', 'https://example.org/sample.js', [], ['defer' => true]);

// Add inline JavaScript
$wa->addInlineScript('
document.addEventListener("DOMContentLoaded", function(event) {
alert("An inline JavaScript Declaration");
});
');
</syntaxhighlight>

<translate>
===Adding CSS Using the Joomla API=== 
</translate>

<syntaxhighlight lang="php">
use Joomla\CMS\Factory;

/** @var Joomla\CMS\WebAsset\WebAssetManager $wa */
$wa = Factory::getApplication()->getDocument()->getWebAssetManager();

// Add Style from URL
$wa->registerAndUseStyle('com_example.sample', 'https://example.org/sample.css');

// Add inline Style
$wa->addInlineStyle('
body {
background: #00ff00;
color: rgb(0,0,255);
}
');
</syntaxhighlight>

<translate> More details can be found here:</translate> [[S:MyLanguage/J3.x:Adding_JavaScript_and_CSS_to_the_page|<translate> Adding JavaScript and CSS to the page</translate>]]

== Additional Resources about Content Security Policy and HTTP Headers ==

* [https://scotthelme.co.uk/csp-cheat-sheet/ CSP Cheat Sheet]
* [https://scotthelme.co.uk/content-security-policy-an-introduction/ Content Security Policy - An Introduction]
* [https://securityheaders.com/| SecurityHeaders.com (by Scott Helme)]
* [https://csp-evaluator.withgoogle.com/| CSP Evaluator]
* [https://developers.google.com/web/fundamentals/security/csp| Web Fundamentals Content Security Policy]
* [https://csp.withgoogle.com/docs/index.html| Google's CSP Documentation]
* [https://research.google/pubs/pub45542/| CSP Is Dead, Long Live CSP! On the Insecurity of Whitelists and the Future of Content Security Policy]
* [https://web.dev/tags/security/| web.dev tag Security]

<noinclude>
[[Category:Components{{#translation:}}]]
[[Category:Joomla! 4.0{{#translation:}}]]
[[Category:Joomla! 4.x{{#translation:}}]]
[[Category:Joomla! 5.x{{#translation:}}]]
[[Category:Plugins{{#translation:}}]]
[[Category:Security{{#translation:}}]]
</noinclude>

How do you recover or reset your admin password?

2024-01-18T10:41:54Z

Webby1212:

<noinclude><languages /></noinclude>
{{version|2.5,3.x,4.x,5.0}}
{{tip|text=<translate>
This page is only for Joomla! 2.5 and higher versions. If you are still using Joomla! 1.5</translate> [[S:MyLanguage/J1.5:How_do_you_recover_or_reset_your_admin_password%3F|<translate>
instructions can be found here</translate>]].|title=<translate>
Joomla! 2.5 and higher Password Recovery</translate>}}

<translate>

Normally, you can add, edit and delete users and passwords from the Backend User Manager. To do this, you must be logged in as a member of the Super User group.


In some situations, this may not be possible. For example, your site may have been "hacked" and had the passwords or users changed. Or perhaps the person who knew the passwords is no longer available. Or maybe you have forgotten the password that was used.


In these cases, it is still possible to alter the Joomla! database so you can log back in as a Super User. These are the possible methods available to Joomla! Administrators.
</translate>

<translate>
== Method 1: ''configuration.php'' file == 
</translate>
<translate>

If you have access to your ''configuration.php'' file for the Joomla installation on your server, then you can recover the password using the following method:


1. Using an FTP program connect to your site. Find the ''configuration.php'' file and look at the file permissions. If the permissions are 444 or some other value, then change the permissions of the ''configuration.php'' file to 644. This will help prevent issues when uploading the changed ''configuration.php'' file later in this process.


2. Download the ''configuration.php'' file.


3. Open the ''configuration.php'' file that was downloaded in a text editor such as Notepad++ and add this line:
</translate>

public $root_user='myname';

<translate>

to the bottom of the list where ''myname'' is a username with Administrator access that you know the password for. A username that is in the Author User Group view access level or higher can also be used in place of a username with Administrator access.


4. Save the ''configuration.php'' file and upload it back to the site. You may leave the permissions on the ''configuration.php'' file at 644.


This user will now be a temporary Super User.


5. Login to the Backend and change the password of the user you don't have the password for or create a new Super User.
If you create the new user you may want to block or delete the old user depending on your circumstances.
</translate>

<translate>

6. When finished, make sure to use the ''Click here to try to do it automatically'' link that appears in the alert box to remove the line that was added to the ''configuration.php'' file. If using the link was not successful, go back and delete the added line from your ''configuration.php'' file using a text editor. Upload the ''configuration.php'' file back to the site.
</translate>

<translate>

7. Using your FTP program, verify the file permissions of the ''configuration.php'' file. They should be ''444''. If you manually removed the added line, then change the file permissions on the ''configuration.php'' file to ''444''.


If you have no users who know their passwords and you can't utilize front end registration you may need to make a change in your database as outlined below.
</translate>

<translate>
== Method 2: Direct Editing of Database == 
If the methods above did not work, you have two other options, both of which require working with the MySQL database directly.
</translate>

<translate>
===Change the Password in the Database=== 
If the Super User is still defined, the simplest option is to change the password in the database to a known value. This requires that you have access to the MySQL database using phpMyAdmin or another client.
</translate>
{{warning|<translate>
These instructions show how to manually change a password to the word</translate> - "secret"|title=<translate>
Make sure you change your password once you regain access.</translate>}}
<translate>
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
# Find and click on the table with ''_users'' appended in the list of tables. (Note: you may have a prefix that is not ''jos_''. Simply go to the ''_users'' table for your prefix).
# Click on the ''Browse'' button in the top toolbar. This will show all of the users that are set up for this site.</translate>
<translate>
# Find the user whose password you want to change and press the Edit icon for this row.
# A form will display that allows you to edit the password field. Copy the value</translate>

<syntaxhighlight lang="sql">d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199</syntaxhighlight>

<translate>
into the password field and press the ''Go'' button. phpMyAdmin should display the message ''Affected rows: 1''. At this point, the password should be changed to ''secret''.
# Log in with this user and password and change the password of this user to a secure value. Check all of the users using the User Manager to make sure they are legitimate. If you have been hacked, you may want to change all of the passwords on the site.</translate>

<translate>
=== Add a New Super User === 
If changing the password won't work, or you aren't sure which user is a member of the Super User group, you can use this method to create a new user.
</translate>

<translate>
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
# Press the ''SQL'' button in the toolbar to run an SQL query on the selected database. This will display a field called ''Run SQL query/queries on database <your database>''.</translate>
<translate>
# Delete any text in this field and copy and paste the following query below and press the ''Go'' button to execute the query and add the new Administrator to the table.
# Use the SQL query below to add another Administrator account.</translate>

{{warning|<translate>
The following code uses ''jos31_'' as the table name prefix which is only an example table prefix. The prefix when you first installed Joomla is '''random''' or what you set it to specifically. You will need to change all occurrences of ''jos31_''(your install set prefix) found in the code below to the prefix your installation is using.</translate> |title=<translate>
Make sure you match your database table prefix!
</translate>}}
<translate>
SQL code for use with Joomla</translate> 2.5, 3.x, 4.x, 5.x

<syntaxhighlight lang="sql">
INSERT INTO `jos31_users`
(`name`, `username`, `password`, `params`, `registerDate`, `lastvisitDate`, `lastResetTime`)
VALUES ('Administrator2', 'admin2',
'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199', '', NOW(), NOW(), NOW());
INSERT INTO `jos31_user_usergroup_map` (`user_id`,`group_id`)
VALUES (LAST_INSERT_ID(),'8');
</syntaxhighlight>

<translate>

At this point, you should be able to log into the Backend of Joomla! with the username of ''admin2'' and password of ''secret''. After logging in, go to the User Manager and change the password to a new secure value and add a valid email address to the account. If there is a chance you have been "hacked", be sure to check that all users are legitimate, especially any members of the Super User group.
</translate>

{{warning|<translate>
Warning: The password values shown on this page are public knowledge and are only for recovery. Your site may be hacked if you do not change the password to a secure value after logging in.
</translate>}}
<translate>
The examples above change the password to ''secret''. Two other possible values are shown below:</translate>
<pre>
- password = "this is the MD5 and salted hashed password"
------------------------------------------------------
- admin = 433903e0a9d6a712e00251e44d29bf87:UJ0b9J5fufL3FKfCc0TLsYJBh2PFULvT
- secret = d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199
- OU812 = 5e3128b27a2c1f8eb53689f511c4ca9e:J584KAEv9d8VKwRGhb8ve7GdKoG7isMm
</pre>

<noinclude><translate>
[[Category:FAQ]][[Category:Administration FAQ]][[Category:Getting Started FAQ]] [[Category:User Management]]</translate></noinclude>

How do you recover or reset your admin password?

2024-01-18T10:35:16Z

Webby1212: Added Joomla! 5 badge to SQL section after testing query in J5

<noinclude><languages /></noinclude>
{{version|2.5,3.x,4.x,5.0}}
{{tip|text=<translate>
This page is only for Joomla! 2.5 and higher versions. If you are still using Joomla! 1.5</translate> [[S:MyLanguage/J1.5:How_do_you_recover_or_reset_your_admin_password%3F|<translate>
instructions can be found here</translate>]].|title=<translate>
Joomla! 2.5 and higher Password Recovery</translate>}}

<translate>

Normally, you can add, edit and delete users and passwords from the Backend User Manager. To do this, you must be logged in as a member of the Super User group.


In some situations, this may not be possible. For example, your site may have been "hacked" and had the passwords or users changed. Or perhaps the person who knew the passwords is no longer available. Or maybe you have forgotten the password that was used.


In these cases, it is still possible to alter the Joomla! database so you can log back in as a Super User. These are the possible methods available to Joomla! Administrators.
</translate>

<translate>
== Method 1: ''configuration.php'' file == 
</translate>
<translate>

If you have access to your ''configuration.php'' file for the Joomla installation on your server, then you can recover the password using the following method:


1. Using an FTP program connect to your site. Find the ''configuration.php'' file and look at the file permissions. If the permissions are 444 or some other value, then change the permissions of the ''configuration.php'' file to 644. This will help prevent issues when uploading the changed ''configuration.php'' file later in this process.


2. Download the ''configuration.php'' file.


3. Open the ''configuration.php'' file that was downloaded in a text editor such as Notepad++ and add this line:
</translate>

public $root_user='myname';

<translate>

to the bottom of the list where ''myname'' is a username with Administrator access that you know the password for. A username that is in the Author User Group view access level or higher can also be used in place of a username with Administrator access.


4. Save the ''configuration.php'' file and upload it back to the site. You may leave the permissions on the ''configuration.php'' file at 644.


This user will now be a temporary Super User.


5. Login to the Backend and change the password of the user you don't have the password for or create a new Super User.
If you create the new user you may want to block or delete the old user depending on your circumstances.
</translate>

<translate>

6. When finished, make sure to use the ''Click here to try to do it automatically'' link that appears in the alert box to remove the line that was added to the ''configuration.php'' file. If using the link was not successful, go back and delete the added line from your ''configuration.php'' file using a text editor. Upload the ''configuration.php'' file back to the site.
</translate>

<translate>

7. Using your FTP program, verify the file permissions of the ''configuration.php'' file. They should be ''444''. If you manually removed the added line, then change the file permissions on the ''configuration.php'' file to ''444''.


If you have no users who know their passwords and you can't utilize front end registration you may need to make a change in your database as outlined below.
</translate>

<translate>
== Method 2: Direct Editing of Database == 
If the methods above did not work, you have two other options, both of which require working with the MySQL database directly.
</translate>

<translate>
===Change the Password in the Database=== 
If the Super User is still defined, the simplest option is to change the password in the database to a known value. This requires that you have access to the MySQL database using phpMyAdmin or another client.
</translate>
{{warning|<translate>
These instructions show how to manually change a password to the word</translate> - "secret"|title=<translate>
Make sure you change your password once you regain access.</translate>}}
<translate>
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
# Find and click on the table with ''_users'' appended in the list of tables. (Note: you may have a prefix that is not ''jos_''. Simply go to the ''_users'' table for your prefix).
# Click on the ''Browse'' button in the top toolbar. This will show all of the users that are set up for this site.</translate>
<translate>
# Find the user whose password you want to change and press the Edit icon for this row.
# A form will display that allows you to edit the password field. Copy the value</translate>

<syntaxhighlight lang="sql">d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199</syntaxhighlight>

<translate>
into the password field and press the ''Go'' button. phpMyAdmin should display the message ''Affected rows: 1''. At this point, the password should be changed to ''secret''.
# Log in with this user and password and change the password of this user to a secure value. Check all of the users using the User Manager to make sure they are legitimate. If you have been hacked, you may want to change all of the passwords on the site.</translate>

<translate>
=== Add a New Super User === 
If changing the password won't work, or you aren't sure which user is a member of the Super User group, you can use this method to create a new user.
</translate>

<translate>
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
# Press the ''SQL'' button in the toolbar to run an SQL query on the selected database. This will display a field called ''Run SQL query/queries on database <your database>''.</translate>
<translate>
# Delete any text in this field and copy and paste the following query below and press the ''Go'' button to execute the query and add the new Administrator to the table.
# Use the SQL query below to add another Administrator account.</translate>

{{warning|<translate>
The following code uses ''jos31_'' as the table name prefix which is only an example table prefix. The prefix when you first installed Joomla is '''random''' or what you set it to specifically. You will need to change all occurrences of ''jos31_''(your install set prefix) found in the code below to the prefix your installation is using.</translate> |title=<translate>
Make sure you match your database table prefix!
</translate>}}
<translate>
SQL code for use with Joomla</translate> {{JVer/multi|2.5, 3.x, 4.x, 5.0}}

<syntaxhighlight lang="sql">
INSERT INTO `jos31_users`
(`name`, `username`, `password`, `params`, `registerDate`, `lastvisitDate`, `lastResetTime`)
VALUES ('Administrator2', 'admin2',
'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199', '', NOW(), NOW(), NOW());
INSERT INTO `jos31_user_usergroup_map` (`user_id`,`group_id`)
VALUES (LAST_INSERT_ID(),'8');
</syntaxhighlight>

<translate>

At this point, you should be able to log into the Backend of Joomla! with the username of ''admin2'' and password of ''secret''. After logging in, go to the User Manager and change the password to a new secure value and add a valid email address to the account. If there is a chance you have been "hacked", be sure to check that all users are legitimate, especially any members of the Super User group.
</translate>

{{warning|<translate>
Warning: The password values shown on this page are public knowledge and are only for recovery. Your site may be hacked if you do not change the password to a secure value after logging in.
</translate>}}
<translate>
The examples above change the password to ''secret''. Two other possible values are shown below:</translate>
<pre>
- password = "this is the MD5 and salted hashed password"
------------------------------------------------------
- admin = 433903e0a9d6a712e00251e44d29bf87:UJ0b9J5fufL3FKfCc0TLsYJBh2PFULvT
- secret = d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199
- OU812 = 5e3128b27a2c1f8eb53689f511c4ca9e:J584KAEv9d8VKwRGhb8ve7GdKoG7isMm
</pre>

<noinclude><translate>
[[Category:FAQ]][[Category:Administration FAQ]][[Category:Getting Started FAQ]] [[Category:User Management]]</translate></noinclude>

How do you recover or reset your admin password?

2024-01-18T09:48:12Z

Webby1212: Add Joomla! 5.0 badge

<noinclude><languages /></noinclude>
{{version|2.5,3.x,4.x,5.0}}
{{tip|text=<translate>
This page is only for Joomla! 2.5 and higher versions. If you are still using Joomla! 1.5</translate> [[S:MyLanguage/J1.5:How_do_you_recover_or_reset_your_admin_password%3F|<translate>
instructions can be found here</translate>]].|title=<translate>
Joomla! 2.5 and higher Password Recovery</translate>}}

<translate>

Normally, you can add, edit and delete users and passwords from the Backend User Manager. To do this, you must be logged in as a member of the Super User group.


In some situations, this may not be possible. For example, your site may have been "hacked" and had the passwords or users changed. Or perhaps the person who knew the passwords is no longer available. Or maybe you have forgotten the password that was used.


In these cases, it is still possible to alter the Joomla! database so you can log back in as a Super User. These are the possible methods available to Joomla! Administrators.
</translate>

<translate>
== Method 1: ''configuration.php'' file == 
</translate>
<translate>

If you have access to your ''configuration.php'' file for the Joomla installation on your server, then you can recover the password using the following method:


1. Using an FTP program connect to your site. Find the ''configuration.php'' file and look at the file permissions. If the permissions are 444 or some other value, then change the permissions of the ''configuration.php'' file to 644. This will help prevent issues when uploading the changed ''configuration.php'' file later in this process.


2. Download the ''configuration.php'' file.


3. Open the ''configuration.php'' file that was downloaded in a text editor such as Notepad++ and add this line:
</translate>

public $root_user='myname';

<translate>

to the bottom of the list where ''myname'' is a username with Administrator access that you know the password for. A username that is in the Author User Group view access level or higher can also be used in place of a username with Administrator access.


4. Save the ''configuration.php'' file and upload it back to the site. You may leave the permissions on the ''configuration.php'' file at 644.


This user will now be a temporary Super User.


5. Login to the Backend and change the password of the user you don't have the password for or create a new Super User.
If you create the new user you may want to block or delete the old user depending on your circumstances.
</translate>

<translate>

6. When finished, make sure to use the ''Click here to try to do it automatically'' link that appears in the alert box to remove the line that was added to the ''configuration.php'' file. If using the link was not successful, go back and delete the added line from your ''configuration.php'' file using a text editor. Upload the ''configuration.php'' file back to the site.
</translate>

<translate>

7. Using your FTP program, verify the file permissions of the ''configuration.php'' file. They should be ''444''. If you manually removed the added line, then change the file permissions on the ''configuration.php'' file to ''444''.


If you have no users who know their passwords and you can't utilize front end registration you may need to make a change in your database as outlined below.
</translate>

<translate>
== Method 2: Direct Editing of Database == 
If the methods above did not work, you have two other options, both of which require working with the MySQL database directly.
</translate>

<translate>
===Change the Password in the Database=== 
If the Super User is still defined, the simplest option is to change the password in the database to a known value. This requires that you have access to the MySQL database using phpMyAdmin or another client.
</translate>
{{warning|<translate>
These instructions show how to manually change a password to the word</translate> - "secret"|title=<translate>
Make sure you change your password once you regain access.</translate>}}
<translate>
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
# Find and click on the table with ''_users'' appended in the list of tables. (Note: you may have a prefix that is not ''jos_''. Simply go to the ''_users'' table for your prefix).
# Click on the ''Browse'' button in the top toolbar. This will show all of the users that are set up for this site.</translate>
<translate>
# Find the user whose password you want to change and press the Edit icon for this row.
# A form will display that allows you to edit the password field. Copy the value</translate>

<syntaxhighlight lang="sql">d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199</syntaxhighlight>

<translate>
into the password field and press the ''Go'' button. phpMyAdmin should display the message ''Affected rows: 1''. At this point, the password should be changed to ''secret''.
# Log in with this user and password and change the password of this user to a secure value. Check all of the users using the User Manager to make sure they are legitimate. If you have been hacked, you may want to change all of the passwords on the site.</translate>

<translate>
=== Add a New Super User === 
If changing the password won't work, or you aren't sure which user is a member of the Super User group, you can use this method to create a new user.
</translate>

<translate>
# Navigate to phpMyAdmin and select the database for the Joomla! site in the left-hand drop-down list box. This will show the database tables on the left side of the screen.
# Press the ''SQL'' button in the toolbar to run an SQL query on the selected database. This will display a field called ''Run SQL query/queries on database <your database>''.</translate>
<translate>
# Delete any text in this field and copy and paste the following query below and press the ''Go'' button to execute the query and add the new Administrator to the table.
# Use the SQL query below to add another Administrator account.</translate>

{{warning|<translate>
The following code uses ''jos31_'' as the table name prefix which is only an example table prefix. The prefix when you first installed Joomla is '''random''' or what you set it to specifically. You will need to change all occurrences of ''jos31_''(your install set prefix) found in the code below to the prefix your installation is using.</translate> |title=<translate>
Make sure you match your database table prefix!
</translate>}}
<translate>
SQL code for use with Joomla</translate> {{JVer/multi|2.5, 3.x, 4.x}}

<syntaxhighlight lang="sql">
INSERT INTO `jos31_users`
(`name`, `username`, `password`, `params`, `registerDate`, `lastvisitDate`, `lastResetTime`)
VALUES ('Administrator2', 'admin2',
'd2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199', '', NOW(), NOW(), NOW());
INSERT INTO `jos31_user_usergroup_map` (`user_id`,`group_id`)
VALUES (LAST_INSERT_ID(),'8');
</syntaxhighlight>

<translate>

At this point, you should be able to log into the Backend of Joomla! with the username of ''admin2'' and password of ''secret''. After logging in, go to the User Manager and change the password to a new secure value and add a valid email address to the account. If there is a chance you have been "hacked", be sure to check that all users are legitimate, especially any members of the Super User group.
</translate>

{{warning|<translate>
Warning: The password values shown on this page are public knowledge and are only for recovery. Your site may be hacked if you do not change the password to a secure value after logging in.
</translate>}}
<translate>
The examples above change the password to ''secret''. Two other possible values are shown below:</translate>
<pre>
- password = "this is the MD5 and salted hashed password"
------------------------------------------------------
- admin = 433903e0a9d6a712e00251e44d29bf87:UJ0b9J5fufL3FKfCc0TLsYJBh2PFULvT
- secret = d2064d358136996bd22421584a7cb33e:trd7TvKHx6dMeoMmBVxYmg0vuXEA4199
- OU812 = 5e3128b27a2c1f8eb53689f511c4ca9e:J584KAEv9d8VKwRGhb8ve7GdKoG7isMm
</pre>

<noinclude><translate>
[[Category:FAQ]][[Category:Administration FAQ]][[Category:Getting Started FAQ]] [[Category:User Management]]</translate></noinclude>

Keyboard Shortcuts

2024-01-17T16:36:46Z

User:Webby1212

2023-12-06T17:08:57Z

Webby1212: Added Cheatsheet link

User:Webby1212

2023-12-06T17:04:38Z

Webby1212:

User talk:Webby1212

2023-12-06T16:55:33Z

Webby1212: Create page

Not sure what this page is used for but it's here anyway.

User:Webby1212

2023-12-06T16:50:44Z

Webby1212:

User:Webby1212

2023-12-06T16:43:33Z

Webby1212: Set up user page