📰 Joomla Bug Squad Meeting - Aug 28th, 2026
▶️ Reports - Joomla! Volunteers Portal
✍️ Martin Kopp

Attendees: Christopf, Harald, Martina, Hannes, (Weno Hans),Martin Teamlead - Duration: 60 minutes - Discussed 2 item on the agenda (beeing more polite and explanatory on closing/moving issues (Harald) - we will setup a list of phrases to start with - and handling AI generated Issues/PR's and bringing the number down. Hannes had a run using AI on duplicates issues - found 48 suspects in total which would bring down the not a lot. Thank you very much. Next meeting: Sep 07th

🔗 volunteers.joomla.org

#JoomlaVolunteersPortal #JoomlaReports #JoomlaOrg

📣 @joomlanews

📰 Accessibility Compliance Toolkit
▶️ Accessibility
✍️ WEBright

Version: 1.0.0
Developer: WEBright
License: GPLv2 or later
Type: Free download
Includes: Component, Plugin
Compatibility: J5

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Real accessibility compliance for Joomla — no fake overlays
Accessibility Compliance Toolkit brings genuine, source-level
WCAG 2.1 & 2.2, EN 301 549 and European
Accessibility Act (EAA) compliance to your Joomla site. It finds the real
accessibility problems on your pages, tells you exactly why each one matters legally,
and shows you how to fix it — without injecting a misleading accessibility "overlay".

Accessibility overlays have been discredited by regulators and courts. The EAA has
been enforceable since 28 June 2025, and EN 301 549 / WCAG 2.1 AA now apply to
governments, universities, municipalities, NGOs, healthcare, finance and e-commerce
across the EU. This extension helps you comply for real.

What you get for free

Source-level accessibility scanning of any page — no overlay,
nothing changed on your live site.
Compliance dashboard: a 0–100 accessibility score, legal-risk
posture, issues-by-severity and a 30-day trend.
Standards mapping — every finding is mapped to its WCAG success
criterion, the exact EN 301 549 clause, EAA scope and Section 508.
Issues workbench with severity/status filters and fix guidance.
Author-time warnings: the content plugin scans articles on save and
warns before inaccessible content is published.

Pro - full-site audit & compliance report
Upgrade to crawl and scan your entire site automatically and export a
downloadable Compliance Report — the documented audit evidence the EAA
expects you to keep, with per-page scores and findings mapped to WCAG and EN 301 549.

Checks include
Missing/meaningless alt text, heading hierarchy, empty & generic links, data-table
headers, empty buttons, unlabelled form fields, page language, focus order, autoplaying
media and linked-document (PDF/Office) EAA warnings.

Standards
WCAG 2.1 & 2.2 (A/AA) · EN 301 549 · European Accessibility Act (EAA) · ADA · Section 508.

Requirements: Joomla 5.x, PHP 8.1+, MySQL/MariaDB or PostgreSQL.
Real accessibility. Real compliance. No fake overlays.

🔗 extensions.joomla.org

#Accessibility #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 System - Domains
▶️ Multiple Sites
✍️ Hikari Software Team

Version: 1.0.0
Developer: Hikari Software Team
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Features
Serves several websites from one Joomla installation, one domain name each, sharing the same content, the same extensions and the same administration.
Each domain can open on a home page of its own, so the same Joomla answers with a different landing page depending on the address your visitor typed.
Each domain can use its own template style, one of your child templates included, so your websites do not have to look alike.
Each domain can own a menu, and you decide what happens when a visitor opens a page belonging to another domain: display it, send them to the domain it belongs to, or answer page not found.
Each domain can open in its own language and in its own currency, while your visitors keep the language and currency switchers.
Each domain can carry its own site name, used in the page titles and in the emails sent from it.
Each domain can send its emails under its own sender name and address.
Each domain can have its own favicon and a stylesheet of its own.
Each domain can be told how search engines should index it, and can be taken offline on its own while the others stay open.
Other domain names can be declared as aliases of a domain, either redirected to it or served as they are.
Modules can name the domains they belong to, on their own edit form, for the websites that share one menu.
Every setting is optional: a domain that only names a template style changes nothing else, and a domain name you did not list is served exactly as before.
Standalone extension.

Integration with HikaShop / HikaMarket for shops
A domain can be given to a HikaMarket vendor, and it becomes that vendor's own shop: its listings, its categories, its brands, its links and its cart hold that vendor's products and nothing else.
A product your shop sells through several vendors, each with a variant of their own, appears on the website of each of them, showing their own version.
A vendor website can have a product feed and a sitemap of its own, listing what that website actually sells, with its own addresses.
An order remembers the website it was placed on, so the emails sent later, by the scheduled tasks for instance, link back to it and not to your main address.

Installation
1) Point each of your domain names at your website on your hosting, with a certificate for each of them
2) Leave the "Site URL" setting of your Joomla configuration empty
3) Download the plugin from our website
4) Install it via the Joomla Extension Manager
5) Enable the plugin
6) Open its settings and add one line per domain, filling in only what that domain should change

🔗 extensions.joomla.org

#MultipleSites #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 HikaShop - 3D Product Display
▶️ HikaShop extensions
✍️ Hikari Software Team

Version: 1.0.0
Developer: Hikari Software Team
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Features
3D product display for HikaShop: your customers turn the product around, zoom on it, and place it in their own room in augmented reality.
A 3D model is added in the product's images, next to its photos, and behaves like one: same place, same drag and drop to order them, same delete.
When you add a model you are asked to turn it to the side customers should see first; that view becomes the product image everywhere the shop shows one, and the model opens the same way round on the product page.
Hovering the model's thumbnail shows the model itself, exactly as hovering a photo shows that photo.
Turn, zoom and pan with the mouse, with a finger and with the keyboard, plus buttons to zoom in, zoom out and put the model back the way it was.
"See it in your room" in augmented reality on Android and iPhone, with no application to install.
GLB and glTF files are used as they are; STL, PLY, OBJ and FBX files are converted for the web by your own browser when you add them.
If you have no model, an "Add a 3D model" button opens a window where you drop photographs of the product, or pick the ones it already has, and an image-to-3D service builds a model from them, from a few cents a model; it is off until you enter a key, and nothing about your products leaves your website before that.
The model can be shown in the image gallery, above or below the product image, or at the bottom of the product page.
Nothing is loaded on the pages of products that have no model, and the model itself is only downloaded when the customer asks to see it.
The viewer and the conversion are included in the plugin, so nothing is loaded from an external service and no data about your visitors or your products leaves your website.

Installation
1) Download the plugin from our website
2) Install it via the Joomla Extension Manager
3) Publish it from the Joomla plugin manager (type "hikashop", name "3D product display")
4) Edit a product and drop its 3D model in the product's images, next to the photos

Use
This plugin is compatible with all the editions of HikaShop
Compatible with PHP 7.4 minimum
Compatible with Joomla 4.x, 5.x and 6.x
Displaying the model in the image gallery requires HikaShop 6.6.0 in build number 2609081328 or above, the number written at the top of your HikaShop configuration page; on an earlier build the model is displayed above the product image instead
No time limit
Unlimited usage

🔗 extensions.joomla.org

#HikaShopextensions #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 SnugStage
▶️ Site management tools
✍️ Cogsnug

Version: 2.03
Developer: Cogsnug
License: GPLv2 or later
Type: Free download
Includes: Component, Plugin
Compatibility: J4, J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

SnugStage — JStaging environment for Joomla

Create a protected staging copy of your Joomla site, review every change with a visual diff, then sync it back to live with an automatic backup — all from inside your admin panel.

Overview

SnugStage creates a full, protected staging copy of your site's database and files so you can safely build, test, and review changes before they ever touch your live site — no separate server, no manual file copying, no guesswork.

Spin up a staging environment in one click. SnugStage clones your site into an isolated copy, locked down by default, so you can install extensions, test template changes, or edit content without any risk to what your visitors see. When you're ready, SnugStage shows you a clear diff of exactly what changed — database rows and files — before anything goes live. Sync only what you want, and every sync takes an automatic backup first, so a rollback is always one click away.

Core features (Free)


- One-click staging environment creation — a full copy of your database and files
- Visual diff before every sync — see exactly what's changing, database and files
- Manual sync back to live, with an automatic pre-sync backup
- One-click rollback from that backup if anything looks wrong
- Full activity log of every create, sync, and rollback


Pro features


- Multiple staging environments per site
- Scheduled sync — keep a staging copy automatically refreshed from live
- Selective sync — choose specific tables or file paths instead of syncing everything
- Rollback retention beyond the most recent backup
- Email and webhook notifications when a job finishes or fails
- Staging URL protection — basic-auth and IP allowlisting, so your staging copy can't be found or accessed by anyone else


Every new install starts on SnugStage Free, and a 14-day full-access Pro trial is available with no credit card required — enter a free license key from the Options screen to activate either.

Key features (bullet list field, if separate from long description)


- Full database + file staging copy, created in one click
- Visual diff review before syncing changes to live
- Automatic backup before every sync, with one-click rollback
- Multiple environments, scheduled sync, and selective sync (Pro)
- Staging URL protection via basic-auth and IP allowlisting (Pro)
- Email/webhook notifications on job completion or failure (Pro)
- Full activity log for every action taken


Requirements


- Joomla 5.x and 6.x
- PHP as required by your Joomla version
- Apache recommended for the Pro staging-protection features (basic-auth / IP allowlist)


Category suggestion

Site Management → Backup / Migration & Staging (or "Site Management" if JED has no dedicated staging subcategory)

🔗 extensions.joomla.org

#Sitemanagementtools #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 softMedia
▶️ e-Commerce
✍️ DleJProducts

Version: 2.1.3
Developer: DleJProducts
License: GPLv2 or later
Type: Paid download
Includes: Component, Module, Plugin
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

🎉 **softMedia ** turns a Joomla site into a digital storefront: customers browse categories, buy software, templates, e-books, images, or services, pay through PayPal (or another payment plugin), and download what they bought — all without leaving Joomla's own permissions, mail, and menu system.

softMedia isn't a generic "add a shop" component bolted onto Joomla — it's built specifically around digital delivery. Products carry versions and changelogs like real software releases, downloads are metered per purchase (unlimited, count-limited, or time-limited), and every price, tax, and discount calculation runs through one central pricing engine so what the cart shows, what the order records, and what the customer is charged always agree.

Products that behave like releases
Every product can carry a version number, a release/updated date, and a full changelog with colour-coded change entries (feature, fix, and so on) — the same way you'd track a real software release. Products can also be tagged with Media Types and Media Versions, two open-ended taxonomies you define yourself: use them for platform compatibility (Joomla 4/5/6, PHP versions) or for anything else you want to badge a product with.

Three ways to sell the same file
A product can be a downloadable file, a category of files the customer picks from after purchase, or a service — where each individual file is tied back to the specific order that paid for it, so entitlement is checked file-by-file rather than product-wide. Downloads can be unlimited, capped at a number of downloads, or capped to a time window, and the storefront tells the customer exactly how much access they have left.

A cart and checkout that do the math once
Subtotal, coupon discounts, and taxes are all computed in a single pricing engine (SoftMediaModelCart::getItems() and friends), so the mini-cart module, the full cart page, the AJAX price summary, and the final order record are never out of sync. Coupons can be scoped to all products, specific products, specific categories, or exclusions of either — and other plugins can contribute their own discounts or taxes into the same total.

Reviews and comments, gated by ownership
Customers can only review a product once they've actually purchased it (or have free-download access to it) — there's no drive-by review problem to moderate around. Reviews carry a 5-star rating; comments are plain feedback threads. Comments are active to any registered user and can be enabled or disabled just as the Reviews can.

Real Joomla mail and accounts, not a private layer
Guest checkouts automatically get a Joomla user account created for them, and every transactional email — new order, order approved, for both buyer and admin — is a Mustache-templated message you edit from the component's own settings, not a hidden template file.

PayPal built in, more payment methods pluggable
softMedia ships with a PayPal plugin (Smart Buttons, sandbox/live mode) wired directly into checkout. Payment methods are a plugin group, so additional gateways can register themselves into the same order flow.

Search that matches how customers actually search
A live-search module answers as the customer types. Products can also be indexed into Joomla's classic Search and into Smart Search (Finder), so they surface in whatever search experience the rest of

your site already uses.

🔗 extensions.joomla.org

#e-Commerce #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Content Migrator
▶️ Data Import & Export
✍️ RIESENAGENTUR - Matthias Kühl

Version: 1.0.0
Developer: RIESENAGENTUR - Matthias Kühl
License: GPLv2 or later
Type: Paid download
Includes: Component
Compatibility: J4, J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Joomla 4 → Joomla 6
Migration doesn't have to mean starting from scratch.
Moving an existing Joomla 4 website to Joomla 6 can quickly become a complex undertaking.
Content must be preserved, structures taken into account, and data transferred to the new installation.
For large websites, manual migration can easily require many hours of work.
This is precisely where our Joomla Export & Import extension comes in.

It enables a controlled workflow:
Joomla 4 → Export data → Joomla 6 → Import data

v1.0.0 is READY NOW:


- Categories (with nested set)
- Articles (+ featured articles in #__content_frontpage)
- Metadata (robots, author, rights, SEO fields)
- Menu items (with auto-rebuild)
- list text hereTags (with Parent-ID=1 + nested set rebuild + associations!)


Clean up for once!

🔗 extensions.joomla.org

#DataImportExport #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Easy Redirects
▶️ URL Redirection
✍️ Infyways Solutions

Version: 1.0.3
Developer: Infyways Solutions
License: GPLv2 or later
Type: Paid download
Includes: Component, Plugin
Compatibility: J4, J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

301 redirects, 404 log, regex rules, CSV import. Zero broken links.

Easy Redirects is the redirect and 404 manager for Joomla 4, 5, and 6. Exact, starts-with, wildcard, and regex rules with capture groups. A useful 404 log with hit counts and referrers, one-click fix, and ignore lists for bot noise. Auto-redirect when an article, category, or menu alias changes. CSV and core Redirect import. Chain flatten, URL tester, and an optional branded 404 page.

It installs as one package zip: admin component, System plugin (matcher and 404 capture), and Content plugin (alias watcher).

Why site owners choose it


- Rules that match real URLs: exact, prefix, wildcard, and regex with $1 groups
- 404 log that stays useful: grouped hits, referrers, ignore lists, one-click Fix with suggestions
- Alias auto-redirect: article, category, and menu renames create rules for you
- Migration ready: CSV import/export, core Redirect import, optional Apache export
- Chain and loop safety: refuse bad targets on save; Flatten chains from the Rules toolbar
- URL Tester: dry-run any path before you publish
- Branded 404 mode: optional Easy Redirects 404 page instead of a bare template error
- Modern Joomla: Component + System + Content plugins, Joomla 4 / 5 / 6, PHP 8.1+


Perfect when you want


- A focused redirect layer after a Joomla 3 to 5/6 migration
- Clean 404 handling without flooding the list with bot probes
- Editors who rename aliases without silently breaking inbound links
- Agencies that ship the same redirect toolkit on every client site
- A lighter alternative to full SEO suites that bury redirects deep inside


Highlights at a glance

| Area | What you get |
|---|---|
| Type | Component + System plugin + Content plugin |
| Install | EasyRedirects_UNZIP.zip → pkg_easyredirects_1.0.3.zip |
| Admin | Dashboard, Rules, 404 Log, URL Tester, Import, Configuration |
| Matching | Exact, starts-with, wildcard, regex; query / domain / language filters |
| Codes | 301, 302, 307, 308, 410, 451 |
| Auto | Alias / category / menu redirects |
| Tools | URL Tester, Flatten chains, CSV import/export |
| Platform | Joomla 4 / 5 / 6, PHP 8.1+ |

Install in minutes


- Download and unzip EasyRedirects_UNZIP.zip
- System > Install > Extensions > upload pkg_easyredirects_1.0.3.zip
- Open Components > Easy Redirects
- Confirm System - Easy Redirects and Content - Easy Redirects are Enabled
- Create a Published rule (or Fix a row from the 404 Log)
- Clear cache and hit the old URL on the front end


Support


- Support: https://support.joomlax.com/
- Documentation: https://joomlax.com/documentation/easy-redirects
- Demo: https://demo.joomlax.com/demo/utilities/easy-redirects


Easy Redirects: every old URL lands somewhere useful.

🔗 extensions.joomla.org

#URLRedirection #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Next File Manager
▶️ File Management
✍️ NextSoftware Team

Version: 6.0.0
Developer: NextSoftware Team
License: GPLv2 or later
Type: Paid download
Includes: Component, Plugin
Compatibility: J4, J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Profile-based file management for Joomla across the server, SFTP, FTP, WebDAV and S3 with per-user access scopes, protected paths and a full activity log.

Next File Manager is a Joomla-native file manager built as a React single-page app inside the admin. Browse and manage the whole Joomla install and any number of additional drives, from a folder elsewhere on the server to an SFTP host, an FTP/FTPS account, a WebDAV or Nextcloud share, or an S3-compatible bucket through one interface, without ever leaving Joomla.

Where an FTP client hands over a shared credential and the run of the account, Next File Manager wraps the browser in a Joomla-native control layer: profiles assign users or user-groups to a permission set naming exactly which folders they see, which of sixteen file operations they may run, how large their uploads may be and which extensions are allowed. Every change is written to an activity log, and Joomla's own configuration files and system trees are protected for everyone. A proper file manager without giving everyone the keys to the server.


🎯 Use cases


- 🗂️ File management without an FTP client — edit a template, unpack a backup, fix a permissions problem, all from inside the Joomla admin with no separate desktop tool and no server credentials handed around.
- 👥 Client and contributor folders — give someone their own folder and nothing else, scoped to the operations they actually need, using the Joomla account they already have.
- ☁️ Reach the drives you already use — attach SFTP, FTP/FTPS, WebDAV, Nextcloud and S3-compatible storage alongside the site itself and move files between them.
- 🌐 Front-end file access — publish the same file manager to logged-in site users through a menu item, with no route into the administrator at all.
- 📋 Accountability — keep a record of who uploaded, renamed, moved, edited or deleted what, and when.
- 🧰 Everyday site maintenance — search a tree for a stray file, ZIP a folder to send it on, extract an archive in place, edit a config file with syntax highlighting.


💡 Benefits


- 🔐 File access without the blast radius — Joomla-native profiles mean a user sees the folders you granted and nothing above them, with every path re-checked on the server.
- 🛡️ Safe by default, not by configuration — configuration.php, .env files and private keys are unreadable below Super User by any route, including inside a ZIP, and Joomla's own trees are write-protected before you configure anything.
- 📜 A real activity log — every upload, deletion, rename, move, copy, edit, archive operation and lock change recorded with the user, the place and the path.
- 🔑 Credentials kept safe — remote passwords and private keys are encrypted at rest, never returned to the browser, and connections are tested before they are saved.
- 🧰 One tool, many filesystems — the local server, SFTP, FTP/FTPS, WebDAV, Nextcloud and S3-compatible object storage through a single browser, with each driver declaring what it can genuinely do rather than failing halfway.
- ⚙️ Configurable without code — storage, places, profiles, limits and protection are all driven from the admin UI.
- 🔄 Upgrade-safe & open source — GPL licensed, namespaced Joomla 4 / 5 / 6 MVC on PHP 8.1+, delivered through Joomla's native update channel.


🧩 Features

🗂️ File Browser

Everything you expect from a desktop file manager, in the Joomla admin.
- Grid & list views — a tile grid with large type icons, or a dense sortable list
- Live folder tree — a lazily-loaded sidebar tree of every folder you have access to, with breadcrumbs
- Drag to move — drag a selection onto a folder tile or a tree node, including across drives
- Right-click menu — a context menu carrying every operation your profile allows, and only those
- Info panel — type, size, modified date, image dimensions, full path and a writable flag
- Filters — narrow a folder by kind, extension, size range or modified date

☁️ Uploads & Downloads

Get files in and out without a separate FTP client.
- Drop-anywhere upload — drop files on the window; a progress queue shows each transfer and its result
- Per-profile rules — maximum file size, an allowed-extension list and an always-blocked denied list
- Checked twice — validated in the browser for fast feedback, then enforced again on the server
- Download & ZIP — a single file, or a whole selection packed into one archive
- Cross-drive transfers — streamed rather than buffered, so a file larger than the memory limit still goes through

✏️ Editing & Preview

Read and change files in place.
- Syntax-highlighting editor — CodeMirror with modes for PHP, JavaScript, CSS, HTML, JSON, SQL, XML and Markdown
- Image & media lightbox — full-screen preview with byte-range streaming, so video scrubs instead of buffering
- Rename, duplicate, new folder — the everyday operations, each individually grantable
- Recursive search — find a file anywhere in a place, with its location shown in the results

📦 Archives

Pack and unpack without shell access.
- Create ZIP — archive any selection in place
- Extract in place — unpack into the containing folder
- Zip-Slip blocked — every entry is checked during extraction, so an archive cannot write outside its target
- Access-checked contents — a protected file cannot be smuggled out inside an archive

💾 Storage & Places

One interface over every filesystem you use.
- Five drivers — server folder, SFTP (SSH), FTP/FTPS, WebDAV/Nextcloud and S3-compatible object storage
- Storage / place split — a storage holds the credentials, places name the folders on it, so one SFTP account exposes several folders under one password
- Encrypted credentials — ciphertext keyed off the Joomla site secret, never sent back to the browser
- Capability negotiation — each driver declares what it can do, and the interface hides what the protocol cannot support
- Test before save — a live connection check that also pins the SFTP host key fingerprint

🔐 Access Control

Joomla-native permissions that go well past on/off.
- Profiles — granted folders, sixteen togglable operations, upload limits and feature gates
- Scoped roots — a place plus an optional subfolder plus a read/write flag; the user sees that subtree and nothing above it
- User & group assignment — assign to individual Joomla users or to whole user-groups, direct beating group
- Deny by default — a user with no profile gets nothing, and every operation is re-checked on the server

🛡️ Protection

Safe defaults a misconfigured profile cannot switch off.
- Protected paths — an editable pattern list shipping with configuration.php, .htaccess, administrator/, libraries/ and more, protecting a path and everything under it
- Secret files — configuration.php, .env, *.key, *.pem and .htpasswd cannot be read, downloaded, previewed or copied below Super User
- Per-path locks — lock an item from the context menu; unlock overrides are Super-User-only and gated behind a switch that is off by default
- Traversal hardening — every path canonicalised and re-checked against its granted root, through symlinks and on case-insensitive filesystems

📜 Activity Log

Answer "who changed what, and when".
- Every mutation recorded — uploads, deletions, renames, moves, copies, edits, archive operations and lock changes
- Full context — the acting user, the action, the place and the path on every entry
- Filterabl

e viewer — a searchable grid with per-column filtering
- Admin-only — never exposed to profiled users

🌐 Site Front End

Put the file manager on the public site, not just the admin.
- Menu-item driven — publish the same app for logged-in front-end users
- Same enforcement — the identical profile checks, protection rules and command allowlist as the admin
- Session-aware — an expired session raises an in-place re-login dialog and replays the interrupted request
- No admin route — front-end users manage files without an administrator login


🛡️ Security

Next File Manager can reach the whole Joomla install, so it is built security-first and follows Joomla's security best practices throughout.


- 🔒 Behind an authenticated session, always — every request requires a valid Joomla session and security token; there is no separately reachable file endpoint.
- 🧱 The interface is not the enforcement — the server independently re-checks the profile, the granted root, the protected-path rules and the driver's capabilities on every request, so a hand-crafted call gets the same answer as a hidden button.
- 🚧 Traversal closed properly — paths are canonicalised and re-validated against their granted root after symlink resolution and with case folded, so ../, a symlink, or a case trick cannot escape.
- 📦 Archives cannot break out — every entry is validated during extraction, blocking the Zip-Slip class of attack, and ZIP downloads are gated exactly as direct downloads are.
- 🔑 Credentials never exposed — remote passwords and private keys are encrypted at rest and never returned to the browser; the editor only learns whether a secret is set.
- 🧯 Secrets unreadable by design — configuration.php, .env files, private keys and .htpasswd are refused to anyone below Super User on every route, and no setting lifts that.
- ✅ Continuously verified — an automated test suite runs on every change, covering path resolution, protection and the storage drivers.


🔗 Resources

📚 Documentation - https://nextsoftware.dev/documentation/next-file-manager
📝 Changelog - https://nextsoftware.dev/changelogs/next-file-manager

🔗 extensions.joomla.org

#FileManagement #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 StarTech Slider
▶️ Images
✍️ StarTech

Version: 1.1.2
Developer: StarTech
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

StarTech Slider is a 3D parallax slider for Joomla 6 with unlimited slides, smooth auto-scrolling, and a live rain effect. It doesn't require jQuery, doesn't require any extra bloat, and features graceful fallback even for older browsers.


StarTech Slider is a Joomla 6 module that transforms a standard homepage banner into a three-dimensional, vibrant scene. Background layers smoothly diverge as the user moves the mouse, creating a sense of depth, and on top of everything is a subtle, delicate raindrop that stops automatically as soon as the user scrolls down the page (the module doesn't waste browser resources).
You can have as many slides as you like—one, three, or ten. Each slide is completely independent: its own background, its own decorative foreground layers, its own title, subtitle, description, and button. Switching features a soft crossfade, with autoscroll, indicator dots, and navigation arrows. Pauses on mouse hover and keyboard focus—the slider doesn't interfere with reading the text and works correctly with keyboard navigation.

🔗 extensions.joomla.org

#Images #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 WaypointAds
▶️ Banner Management
✍️ Paul Stallibrass

Version: 1.2.69
Developer: Paul Stallibrass
License: GPLv2 or later
Type: Free download
Includes: Component, Module, Plugin
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

WaypointAds is a modern advertising management extension built specifically for Joomla, designed to make creating, organizing and displaying advertising straightforward without forcing website administrators to fight their way through an unnecessarily complicated advertising system.

At its heart is a simple and logical workflow: Advertisers → Campaigns → Creatives → Zones. Create the advertiser, organize their advertising into Campaigns, add the Creatives visitors will see, and choose the Zones in which those advertisements may appear. WaypointAds handles the Joomla integration behind the scenes, including creating and managing the modules required to display your advertising.

WaypointAds Core provides everything needed to manage advertising from the Joomla Administrator Backend using a clear Advertiser → Campaign → Creative → Zone structure. Even if you are managing only your own website advertising, an Advertiser record provides the organizational foundation for Campaigns and Creatives. Core includes standard and custom advertising sizes, Campaign scheduling, Creative rotation, Click and Impression tracking, statistics, approval controls and flexible Zones. Smart In-Article Placement can go further by examining article content and surrounding media to find an appropriate advertising location rather than simply placing an advertisement at a rigid predetermined point.

Getting started is deliberately uncomplicated. An optional Learning Example demonstrates how the major parts of WaypointAds work together, while experienced Administrators can begin with an empty system and build their own advertising structure immediately. Clear warnings and safeguards help protect active advertising without constantly getting in the Administrator's way.

For websites that want to sell advertising, WaypointAds Commercial extends the same system with advertiser Applications, Packages, Rate Cards, advertiser self-service, an Advertiser Portal, Competitive Groups, payment and membership integration, and additional commercial workflows. There is no need to abandon the advertising structure you have already created as your requirements grow.

Whether you need to display a few house advertisements on a small Joomla website or manage advertising for multiple businesses across a busy publication, WaypointAds is designed around the same principle that guided its development from the beginning:

Advertising management should work with Joomla—not make Joomla harder to use.

🔗 extensions.joomla.org

#BannerManagement #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 PHP Include
▶️ Content Construction
✍️ damerau

Version: 1.3.3
Developer: damerau
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

PHP Include Content Plugin

A Joomla content plugin that replaces include tags with the output of explicitly allowed PHP files. It supports Joomla articles and selected Custom HTML modules.

Requirements


- Joomla 5 or 6
- PHP files located in a directory under the Joomla root
- A Super User account to create articles that use include tags


Installation


- In Joomla Administrator, go to System > Install > Extensions and upload the zip-archive.
- Go to System > Manage > Plugins, open Content - PHP Include, and enable it.
- Configure the plugin settings described below.


Configuration

| Setting | Description |
| --- | --- |
| Allowed PHP files | A whitelist of PHP file names, one per line. File names may contain letters, numbers, underscores, and hyphens only. Directory paths are not accepted. |
| Include directory | A directory relative to the Joomla root, such as includes/php. Leave empty to use the Joomla root. The directory must remain within the Joomla installation. |
| Allowed Custom HTML module IDs | A whitelist of Custom HTML module IDs. Only modules on this list can process include tags. Enter one ID per line; commas, semicolons, and whitespace are also accepted. |
| Keyword | The tag keyword. The default phpinclude produces {phpinclude:filename.php}. |
| Show error messages | Shows an error in page content when an include is rejected or fails. When disabled, errors are emitted as HTML comments instead. |

Usage

Place the PHP file in the configured include directory and add its file name to Allowed PHP files. Then place the tag in a Joomla article or an allowed Custom HTML module:

text
{phpinclude:example.php}

With the default directory, example.php is resolved from the Joomla root. With an include directory of includes/php, it is resolved as includes/php/example.php.

You can change the keyword in the plugin settings. For example, the keyword snippet uses this tag:

text
{snippet:example.php}

Multiple tags can be used in the same content, alongside normal text and HTML.

Access and Security


- Article tags are processed only when the article author is a Joomla Super User.
- Module tags are processed only in mod_custom modules whose IDs are listed in Allowed Custom HTML module IDs.
- A requested file must be both whitelisted and present in the configured directory.
- The plugin accepts only simple .php file names and rejects paths, traversal sequences, and files outside the configured directory.
- Included files execute with the PHP and Joomla permissions of the web server. Only grant trusted administrators permission to edit the whitelist, include directory, and eligible module content.


Troubleshooting


- Confirm that the plugin is enabled.
- Verify that the include file name exactly matches an entry in Allowed PHP files.
- Verify that the include directory exists under the Joomla root and contains the file.
- For modules, verify that the module is a Custom HTML module and that its numeric ID is listed in Allowed Custom HTML module IDs.
- Temporarily enable Show error messages to expose blocked, missing, and execution failures in page content.

🔗 extensions.joomla.org

#ContentConstruction #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 n3t ConfigFinder
▶️ Admin Navigation
✍️ Pavel Poles

Version: 6.0.1
Developer: Pavel Poles
License: GPLv2 or later
Type: Free download
Includes: Module
Compatibility: J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Fast search configuration and other forms fields.

This is an administration module, which allows fast searching forms for its fields. Fields could be searched by its name, value (including editors) or inline help. Searching is case and accent insensitive. When the field is found, it can be manipulated directly, or you can go to its position and display it in the context of other surrounding fields.

Tired of going through large configurtions? Give this try...

🔗 extensions.joomla.org

#AdminNavigation #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Quick Icons Manager
▶️ Extensions Quick Icons
✍️ joomla.center

Version: 1.1.2
Developer: joomla.center
License: GPLv2 or later
Type: Free download
Includes: Component
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

It provides a convenient interface for managing Joomla Quick Icon plugins, including enabling or disabling plugins, assigning groups, and viewing related Quick Icons modules.

The Quick Icons Manager component adds a dedicated interface to the Joomla administrator area for centralized management of plugins from the quickicon group.

Features:
- view all installed Quick Icon plugins in a standard Joomla list,
- enable or disable plugins,
- assign a plugin to one of the existing Quick Icons groups,
- display mod_quickicon modules that use the corresponding group name,
- quickly open plugin or module editing in the standard Joomla modal dialog,
- filter plugins by status, group name, and module,
- search by plugin name or system element,
- sort and paginate the list,
- support Joomla's standard access control system.
The component simplifies the management of multiple Quick Icon plugins and makes it easy to see the relationship between plugins, group names, and Quick Icons module instances in one place.

🔗 extensions.joomla.org

#ExtensionsQuickIcons #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 Article Alternative Link
▶️ URL Redirection
✍️ joomla.center

Version: 1.0.4
Developer: joomla.center
License: GPLv2 or later
Type: Free download
Includes: Plugin
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Assign alternative links to Joomla articles and send visitors to internal or external pages instead of the default article URL.

Article Alternative Link adds an “Alternative Link” field to the Joomla article editor.

When an alternative URL is specified, the article title, Read More button, and other article links can point to the selected destination instead of the standard Joomla article page.

The plugin is useful for teasers, catalogs, listings, and other cases where an article acts as a card or preview but should open another page.

Supported features include:


- external URLs;
- relative URLs;
- Joomla internal system URLs;
- automatic SEF conversion for internal links;
- redirection from the default article URL;
- integration with Joomla's standard inline help system.


If no alternative link is specified, the article works normally.

🔗 extensions.joomla.org

#URLRedirection #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 ES Content Display
▶️ Articles Display
✍️ ExtensionSpot

Version: 1.5.2
Developer: ExtensionSpot
License: GPLv2 or later
Type: Paid download
Includes: Module
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

Turn Joomla Articles or manual content into accordions, tabs, FAQs and searchable directories from one consistent module.

ES Content Display helps site builders, publishers and agencies organize long or structured Joomla content without a page builder. Choose the content source, choose a layout, select the fields to display and publish.

Main Features


- Two Content Sources: Display manually entered items or existing Joomla Articles.
- Five Layouts: Accordion, Horizontal Tabs, Vertical Tabs, Compact Directory/List and FAQ.
- Article Filters: Select categories, tags, Any/All tag matching, featured status, language, ordering and item limit.
- Searchable Directory: Add client-side text search and an A-Z filter to collections already loaded by the module.
- Stable Deep Links: Link directly to a specific accordion section, tab, FAQ question or directory item.
- Responsive Tabs: Automatically convert tabs to an accordion when the module becomes narrow, or keep the tab layout.
- Accessible Interaction: Keyboard navigation, semantic controls, ARIA states and focus handling are built into the interactive layouts.
- Content Controls: Choose whether to display images, intro text, body text, Joomla Article metadata and Read More links.
- FAQ Structured Data: Optional Schema.org FAQ markup when the module is intentionally used as a real FAQ.
- Template-Friendly Styling: Default, Soft Surface and Minimal Separators presets with scoped CSS variables.
- Joomla Native: Respects Joomla access, publication and language rules and uses the Joomla Web Asset Manager.
- No jQuery: Frontend interaction uses modern vanilla JavaScript.


Use Cases


- Compact Joomla Article archives
- Documentation and help sections
- Product or service tabs
- Frequently asked questions
- Searchable A-Z resource lists
- Agency and brochure websites
- Structured content without page-builder lock-in


Technical Info


- Joomla 5 and Joomla 6
- Site module
- Manual Items and Joomla Articles sources
- Multiple module instances supported
- Responsive and RTL-aware
- Joomla Update System
- No telemetry


Documentation, live demo, updates, and support available.

🔗 extensions.joomla.org

#ArticlesDisplay #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews

📰 ChatRex
▶️ e-Commerce Integrations
✍️ ChatRex

Version: 1.0.0
Developer: ChatRex
License: GPLv2 or later
Type: Paid download
Includes: Plugin
Compatibility: J5, J6

⬇️ Download
🌐 Demo
❓ Support
📚 Documentation

ChatRex connects Joomla stores to an AI sales assistant. It securely synchronizes published catalog data from HikaShop or VirtueMart so the assistant can find products, variants, prices, inventory and verified storefront links during customer conversations.

Features:
• Joomla 5.4 and 6.x support
• HikaShop and VirtueMart catalog synchronization
• Signed requests and one-time pairing-code setup
• Configurable synchronization interval and batch size
• Joomla Update System support
• English and Russian interface

Requirements: PHP 8.1+, a ChatRex account and a separate paid Joomla Commerce integration subscription. The plugin is distributed under GPLv2 or later. Catalog access is read-only: ChatRex does not read orders or customers and cannot modify products.

🔗 extensions.joomla.org

#e-CommerceIntegrations #NewlyListedJoomlaExtensions #JoomlaLatestExtensions #JoomlaExtensions #JED #JoomlaOrg

📣 @joomlanews