Security Checklist/Testing and Development: Difference between revisions

Latest revision as of 11:29, 11 April 2020

Secure Testing and Development

Develop locally, deploy globally

Develop and test your site on a local machine first. Installing Joomla locally is not as hard as it may sound, and the exercise will greatly boost your confidence.

Use an IDE

Consider using an Integrated Development Environment (IDE). One free IDE that many Joomla! developers use is Visual Studio Code. See also Configuring Visual Studio Code for joomla development for instructions on installing and configuring Visual Studio Code.

Use a versioning system

Be able to roll back to an earlier version of your site using a modern version control system, normally git. The Visual Studio Code IDE indicated above includes plugins for git. This allows you to work with the Joomla! source repository hosted on GitHub as well as any other projects on GitHub, GitLab or BitBucket (the 3 most popular git versioning systems).

More suggested tools

Check out the Joomla! community's list of popular Developer Software and Tools.

Setup a backup process first

The most important rule

Thou shalt at all time be able to return your site to a previous working state through regular use of a strong, off-site backup and recovery process.

Be sure your backup and recovery process is ready and tested BEFORE your site goes live.

This is the single best way (and often the only way) to recover from such inevitable catastrophes as:

A compromised/cracked site.
Broken site due to a faulty upgrade.
Hardware failure, such as dead hard drives, power failures, server theft, etc.
Authoritarian government intervention. (More common than some think.)
Needing to quickly relocate to a new server or hosting provider.

@@ Line 1: / Line 1: @@
-{{RightTOC}}
+<noinclude><languages /></noinclude>
+{{:Security Checklist/TOC/<translate><!--T:1--> en</translate>}}
+<translate>== Secure Testing and Development == <!--T:2--></translate>
-== Secure Testing and Development ==
+<translate>===Develop locally, deploy globally=== <!--T:3--></translate>
+: <translate><!--T:4--> Develop and test your site on a local machine first. Installing Joomla locally is not as hard as it may sound, and the exercise will greatly boost your confidence.</li></translate>
-===Develop locally, deploy globally===
+<translate>===Use an IDE=== <!--T:5--></translate>
-: Develop and test your site on a local machine first. Installing Joomla locally is not as hard as it may sound, and the exercise will greatly boost your confidence.</li>
+: <translate><!--T:6--> Consider using an Integrated Development Environment (IDE). One free IDE that many Joomla! developers use is [https://code.visualstudio.com/ Visual Studio Code]. See also [[S:MyLanguage/Visual_Studio_Code | Configuring Visual Studio Code for joomla development]] for instructions on installing and configuring Visual Studio Code.</translate>
-===Use an IDE===
+<translate>===Use a versioning system=== <!--T:7--></translate>
-: Consider using an Integrated Development Environment (IDE). One free IDE that many Joomla! developers use is [http://www.eclipse.org Eclipse]. See [[Setting_up_your_workstation_for_Joomla!_development | Setting up your workstation for Eclipse development]] for instructions on installing Eclipse.
+: <translate><!--T:8--> Be able to roll back to an earlier version of your site using a modern version control system, normally [https://git-scm.com/ git].</li> The Visual Studio Code IDE indicated above includes plugins for git. This allows you to work with the Joomla! source repository hosted on [https://github.com/joomla/joomla-cms/releases GitHub] as well as any other projects on GitHub, GitLab or BitBucket (the 3 most popular git versioning systems).</translate>
-===Use a versioning system===
+<translate>===More suggested tools=== <!--T:9--></translate>
-: Be able to roll back to an earlier version of your site using a modern version control system, such as CVS, [http://subversion.tigris.org/ Subversion], or [http://git.or.cz/ git].</li> The Eclipse IDE indicated above includes a Subversion plugin. This allows you to work with the Joomla! source repository as well as other projects hosted on [http://joomlacode.org/ JoomlaCode].
+: <translate><!--T:10--> Check out the Joomla! community's list of popular [http://forum.joomla.org/index.php/topic,25307.0.html Developer Software and Tools].</translate>
+<translate>==Setup a backup process first== <!--T:11--></translate>
+<translate>===The most important rule=== <!--T:12--></translate>
+: <translate><!--T:13--> '''Thou shalt at all time be able to return your site to a previous working state through regular use of a strong, off-site backup and recovery process.</translate>'''
-===More suggested tools===
+: <translate><!--T:14--> Be sure your backup and recovery process is ready and tested BEFORE your site goes live.</translate>
-: Check out the Joomla! community's list of popular [http://forum.joomla.org/index.php/topic,25307.0.html Developer Software and Tools].
-==Setup a backup process first==
+: <translate><!--T:15--> This is the single best way (and often the only way) to recover from such inevitable catastrophes as</translate>:'''
-===The most important rule===
-: '''Thou shalt at all time be able to return your site to a previous working state through regular use of a strong, off-site backup and recovery process. '''
-: Be sure your backup and recovery process is ready and tested BEFORE your site goes live.
-: This is the single best way (and often the only way) to recover from such inevitable catastrophes as:'''
-# A compromised/cracked site.
-# Broken site due to a faulty upgrade.
-# Hardware failure, such as dead hard drives, power failures, server theft, etc.
-# Authoritarian government intervention. (More common than some think.)
-# Needing to quickly relocate to a new server or hosting provider.
-== Choose A Checklist==
-# [[Security Checklist 1 - Getting Started|Getting Started]]
-# [[Security Checklist 2 - Hosting and Server Setup|Hosting and Server Setup]]
-# [[Security Checklist 3 - Testing and Development|Testing and Development]]
-# [[Security Checklist 4 - Joomla Setup|Joomla Setup]]
-# [[Security Checklist 5 - Site Administration|Site Administration]]
-# [[Security Checklist 6 - Site Recovery|Site Recovery]]
+# <translate><!--T:16--> A compromised/cracked site.</translate>
+# <translate><!--T:17--> Broken site due to a faulty upgrade.</translate>
+# <translate><!--T:18--> Hardware failure, such as dead hard drives, power failures, server theft, etc.</translate>
+# <translate><!--T:19--> Authoritarian government intervention. (More common than some think.)</translate>
+# <translate><!--T:20--> Needing to quickly relocate to a new server or hosting provider.</translate>
 <!-- KEEP THIS AT THE END OF THE PAGE -->
-[[Category:Security Checklist]]
+[[Category:Security Checklist{{#translation:}}]]