{"site":{"url":"https:\/\/www.joomlaworks.net","name":"JoomlaWorks"},"category":{"id":"1","alias":"blog","link":"\/blog","name":"Blog","description":"","image":"\/components\/com_k2\/images\/placeholder\/category.png","extraFieldsGroup":"0","ordering":"1","parent":"0","children":[],"events":{"K2CategoryDisplay":""}},"items":[{"id":"320","title":"Security notice: emails impersonating the K2 developer","alias":"security-notice-emails-impersonating-the-k2-developer","link":"\/blog\/item\/320-security-notice-emails-impersonating-the-k2-developer","catid":"1","introtext":"<p><b>Emails sent from <span id=\"cloakd0c3097d5b54b4f3f31b68be346f22d9\">This email address is being protected from spambots. You need JavaScript enabled to view it.<\/span><script type='text\/javascript'>\n\t\t\t\tdocument.getElementById('cloakd0c3097d5b54b4f3f31b68be346f22d9').innerHTML = '';\n\t\t\t\tvar prefix = '&#109;a' + 'i&#108;' + '&#116;o';\n\t\t\t\tvar path = 'hr' + 'ef' + '=';\n\t\t\t\tvar addyd0c3097d5b54b4f3f31b68be346f22d9 = '&#101;v&#97;ng&#101;l&#111;&#117;.g&#101;tk2' + '&#64;';\n\t\t\t\taddyd0c3097d5b54b4f3f31b68be346f22d9 = addyd0c3097d5b54b4f3f31b68be346f22d9 + 'gm&#97;&#105;l' + '&#46;' + 'c&#111;m';\n\t\t\t\tvar addy_textd0c3097d5b54b4f3f31b68be346f22d9 = '&#101;v&#97;ng&#101;l&#111;&#117;.g&#101;tk2' + '&#64;' + 'gm&#97;&#105;l' + '&#46;' + 'c&#111;m';document.getElementById('cloakd0c3097d5b54b4f3f31b68be346f22d9').innerHTML += '<a ' + path + '\\'' + prefix + ':' + addyd0c3097d5b54b4f3f31b68be346f22d9 + '\\'>'+addy_textd0c3097d5b54b4f3f31b68be346f22d9+'<\\\/a>';\n\t\t<\/script> do not come from JoomlaWorks or from Fotis Evangelou, the developer of K2.<\/b> JoomlaWorks does not own or control this address.<\/p>","fulltext":"<p>Since 14 October 2026, Joomla site owners have been receiving unsolicited emails that use Fotis Evangelou's name, a link to getk2.org and his public LinkedIn profile, together with a photograph of a different person. Several clients of JoomlaWorks and members of the Joomla community have forwarded these messages to us.<\/p>\r\n<p><span style=\"text-decoration: underline;\"><strong>Their purpose is to obtain administrator access to the recipient's website and a payment for services that will not be delivered.<\/strong><\/span><\/p>\r\n<p>If you have received one of these emails, <strong>do not reply and do not create any user account<\/strong>.<\/p>\r\n<p>This notice describes the messages, explains how to verify genuine correspondence from JoomlaWorks, and sets out the steps to take if you have already responded.<\/p>\r\n<h2>Description of the messages<\/h2>\r\n<p>The initial message carries the subject line <b>\"Important: Joomla Website Updates and Technical SEO Optimization Before October 25\"<\/b>.<\/p>\r\n<p>The message states that:<\/p>\r\n<ul>\r\n<li>\r\n<p>\"Joomla support\" contacted the sender by telephone regarding the recipient's Joomla installation, extensions and configuration.<\/p>\r\n<\/li>\r\n<li>\r\n<p>The website requires core and extension updates <b>before 25 October<\/b>.<\/p>\r\n<\/li>\r\n<li>\r\n<p>The sender is \"currently managing\" the recipient's website.<\/p>\r\n<\/li>\r\n<li>\r\n<p>A review of the website's SEO configuration and technical optimisation should be carried out at the same time.<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>The signature includes Fotis Evangelou's name, the title \"Founder \u00b7 K2\", links to getk2.org and to his LinkedIn profile, a postal address and a profile photograph. <b>The photograph does not depict Fotis Evangelou.<\/b><\/p>\r\n<p>None of these statements are accurate. Joomla is a volunteer-run open source project. It has no support service that contacts developers about third-party websites, and there is no Joomla deadline on 25 October. Replies to the address trigger an automatic response that repeats the original message, followed later by a personal reply from the sender.<\/p>\r\n<h2>Objectives of the scam<\/h2>\r\n<p>The full exchange with the sender has been documented, with screenshots and message headers, by Phil Taylor of mySites.guru: <a href=\"https:\/\/mysites.guru\/blog\/be-aware-of-joomla-developer-impersonation-scams\/\">Be Aware Of Joomla Developer Impersonation Scams<\/a>. It shows that the sender pursues two objectives:<\/p>\r\n<ol>\r\n<li value=\"1\">\r\n<p><b>Administrator access.<\/b> The recipient is asked to create a Joomla Super User account named \"Fotis Evangelou\" with the address evangelou.getk2@gmail.com, on the pretext of restoring lost access. A Super User account grants full control of a website, including the ability to install extensions, execute code, read the database and create further administrator accounts.<\/p>\r\n<\/li>\r\n<li>\r\n<p><b>Payment.<\/b> The recipient is offered maintenance plans priced between $350 and $550 and then receives an invoice through a third-party invoicing platform. The invoice is issued under a different name, and the sender asks the recipient not to use the platform's escrow option, which would withhold payment until the work is confirmed.<\/p>\r\n<\/li>\r\n<\/ol>\r\n<p>The messages pass SPF, DKIM and DMARC authentication. These checks confirm only that the messages were sent from that Gmail account. They do not establish who registered the account, and any person can register a Gmail address containing a well-known name.<\/p>\r\n<h2>Verifying correspondence from JoomlaWorks<\/h2>\r\n<ul>\r\n<li>\r\n<p>JoomlaWorks and Fotis Evangelou correspond with clients and collaborators only from <b>@joomlaworks.net &amp; @getk2.org<\/b>. We do not use Gmail or other free email services for this purpose.<\/p>\r\n<\/li>\r\n<li>\r\n<p>We do not send unsolicited messages claiming to have been contacted by \"Joomla support\" about a website.<\/p>\r\n<\/li>\r\n<li>\r\n<p>We do not request the creation of Super User or administrator accounts by email, and we do not ask for login credentials to be sent by email.<\/p>\r\n<\/li>\r\n<li>\r\n<p>We do not issue invoices through third-party invoicing platforms or under the name of another person.<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>If you are uncertain whether a message is genuine, do not use any address, telephone number or link it contains. Contact us through a channel you used before the message arrived, or through the contact page on this website.<\/p>\r\n<h2>Recommended action for recipients<\/h2>\r\n<ol>\r\n<li value=\"1\">\r\n<p>Do not reply. A reply confirms that your address is active and initiates further contact.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Report the message to Google. In Gmail, open the message and select <b>Report phishing<\/b>. Reports can also be submitted through <span style=\"color: #0563c1;\"><span style=\"text-decoration: underline;\"><a href=\"https:\/\/support.google.com\/mail\/contact\/abuse\">Google's Gmail abuse form<\/a><\/span><\/span>. Multiple reports concerning the same account carry more weight.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Delete the message and inform any colleagues who may have received it.<\/p>\r\n<\/li>\r\n<\/ol>\r\n<h2>If you have already created an account or made a payment<\/h2>\r\n<ol>\r\n<li value=\"1\">\r\n<p>Block or delete the account in <b>Users: Manage<\/b>, then change the passwords of all Super User accounts.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Review the user list for any other Super User or administrator accounts you do not recognise.<\/p>\r\n<\/li>\r\n<li>\r\n<p>Review <b>System: Manage: Extensions<\/b> for recently installed extensions you did not install, and check the User Actions Log for activity by the new account.<\/p>\r\n<\/li>\r\n<li>\r\n<p>If the account was used, treat the website as compromised. Restore a known clean backup or have the website audited before returning it to service.<\/p>\r\n<\/li>\r\n<li>\r\n<p>If you made a payment, contact your bank or card provider and the invoicing platform immediately and report the transaction as fraudulent.<\/p>\r\n<\/li>\r\n<\/ol>\r\n<h2>Reports filed<\/h2>\r\n<ul>\r\n<li>\r\n<p>JoomlaWorks has reported the Gmail account to Google as an impersonation, with the full message headers.<\/p>\r\n<\/li>\r\n<li>\r\n<p>The Joomla Security Strike Team has confirmed the impersonation and has also reported the account to Google.<\/p>\r\n<\/li>\r\n<li>\r\n<p>The fraudulent invoice has been reported to the invoicing platform and its payment processor.<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>This notice will be updated if further information becomes available.<\/p>\r\n<h2>Other developers affected<\/h2>\r\n<p>According to the mySites.guru report, similar messages are being sent under the names of other well-known members of the Joomla community. We recommend treating any unexpected request for website access or payment with the same caution, regardless of the sender's name, and verifying it through a channel you already trust.<\/p>\r\n<p>We thank the clients and community members who reported these messages. Please share this notice with anyone who manages a Joomla website.<\/p>\r\n<p>&nbsp;<\/p>\r\n<p><em>The above has been cross-posted on getk2.org as well.<\/em><\/p>","extra_fields":null,"created":"2026-10-15 20:06:41","created_by_alias":"","modified":"2026-10-15 20:10:03","featured":"0","image":"\/media\/k2\/items\/cache\/eefd4fe8f589e64e0e66a4f2937ae4ae_L.jpg?t=20261015_201003","imageWidth":"572","image_caption":"","image_credits":"","imageXSmall":"\/media\/k2\/items\/cache\/eefd4fe8f589e64e0e66a4f2937ae4ae_XS.jpg?t=20261015_201003","imageSmall":"\/media\/k2\/items\/cache\/eefd4fe8f589e64e0e66a4f2937ae4ae_S.jpg?t=20261015_201003","imageMedium":"\/media\/k2\/items\/cache\/eefd4fe8f589e64e0e66a4f2937ae4ae_M.jpg?t=20261015_201003","imageLarge":"\/media\/k2\/items\/cache\/eefd4fe8f589e64e0e66a4f2937ae4ae_L.jpg?t=20261015_201003","imageXLarge":"\/media\/k2\/items\/cache\/eefd4fe8f589e64e0e66a4f2937ae4ae_XL.jpg?t=20261015_201003","video":"","video_caption":"","video_credits":"","gallery":"","hits":"196","category":{"id":"1","name":"Blog","alias":"blog","link":"\/blog","description":"","image":"","ordering":"1"},"tags":[{"id":"289","name":"security notice","published":"1","description":"","link":"\/show\/itemlist\/tag\/security+notice"}],"attachments":[],"votingPercentage":0,"numOfvotes":"(0 votes)","author":{"name":"JoomlaWorks","link":"\/show\/itemlist\/user\/989-joomlaworks","avatar":"\/media\/k2\/users\/1563.png?t=20220601_1100","profile":{"id":"1563","gender":"n","description":"","image":"1563.png","url":"","group":"2"}},"numOfComments":null,"events":{"BeforeDisplay":"","AfterDisplay":"","AfterDisplayTitle":"","BeforeDisplayContent":"","AfterDisplayContent":"","K2BeforeDisplay":"","K2AfterDisplay":"","K2AfterDisplayTitle":"","K2BeforeDisplayContent":"","K2AfterDisplayContent":"","K2CommentsCounter":""},"language":"*"},{"id":"319","title":"Joomla 3.x UTD v3.17 now available - a milestone release for this project!","alias":"joomla-3-x-utd-v3-17-now-available-a-milestone-release-for-this-project","link":"\/blog\/item\/319-joomla-3-x-utd-v3-17-now-available-a-milestone-release-for-this-project","catid":"1","introtext":"<p>Joomla 3.x UTD v3.17 is out - the biggest release of this project so far, along with a brand new website &amp; 3 live demo sites for our 3 new templates.<\/p>","fulltext":"<p>According to <a href=\"https:\/\/w3techs.com\/technologies\/details\/cm-joomla\" target=\"_blank\" rel=\"noopener\">market share estimates<\/a> (as of May 2026), Joomla 3.x is currently used on more than 50% of all installed Joomla sites worldwide. However, official support for Joomla 3.x ended in February 2025 (counting the eLTS program).<\/p>\r\n<p><a href=\"blog\/item\/316-joomla-3-x-development-continued-to-ensure-code-security-support-modern-php-versions\" target=\"_blank\">Back in April<\/a> we launched the first version of Joomla 3.x UTD - an up-to-date distribution of the Joomla 3.x content management system, built to ensure code security, support modern PHP &amp; MySQL\/MariaDB versions &amp; fix any broken behaviour that never got sorted before the release of newer major versions of Joomla.<\/p>\r\n<p>Releases 3.11 to 3.16 delivered on those primary goals: PHP up to 8.5 and security in-line with Joomla 5 &amp; 6. A few days ago <a href=\"blog\/item\/318-major-improvements-coming-to-joomla-3-x-utd\" target=\"_blank\">we wrote about what's coming next<\/a> - fixing what was left unfinished (database drivers beyond MySQL\/MariaDB) or never properly implemented (frontend templates that actually showcase a capable CMS).<\/p>\r\n<p>Well, that's all in v3.17, released today. And then some.<\/p>\r\n<h2 id=\"a-new-home-j3xutdjoomlaworksnet\">A new home: j3xutd.joomlaworks.net<\/h2>\r\n<p>Joomla 3.x UTD now has its own website at <a href=\"https:\/\/j3xutd.joomlaworks.net\/\" target=\"_blank\" rel=\"noopener\"><strong>https:\/\/j3xutd.joomlaworks.net<\/strong><\/a>.<\/p>\r\n<p>Up until now, everything about this project lived in the README file on GitHub. The new site puts it all in one place, in a format that's a lot easier to browse &amp; share with clients, colleagues or your hosting company:<\/p>\r\n<ul>\r\n<li>What's new in the latest release<\/li>\r\n<li>The 3 new templates, with screenshots for desktop, mobile &amp; dark modes<\/li>\r\n<li>Install &amp; upgrade instructions (Web UI, SSH one-liner and fresh installs) with copy-paste ready commands<\/li>\r\n<li>The command line &amp; MCP server, including the full list of all 100 commands<\/li>\r\n<li>Compatibility notes for PHP and a database support table for every database vendor<\/li>\r\n<li>The changelog of every release since v3.11<\/li>\r\n<li>A full list of security fixes per release, with their origin (backported from Joomla 5\/6, CVE IDs, or issues found in stock Joomla 3 by us)<\/li>\r\n<li>Our long-term plan &amp; ways to get involved<\/li>\r\n<\/ul>\r\n<p>The GitHub repository at <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/joomlaworks\/joomla-3.x<\/a> remains the place for code, releases, discussions &amp; issues - and you can subscribe to <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\/releases.atom\" target=\"_blank\" rel=\"noopener\">the releases feed<\/a> to be notified of new versions.<\/p>\r\n<h2 id=\"3-live-demo-sites-one-for-each-new-template\">3 live demo sites, one for each new template<\/h2>\r\n<p>Each of the 3 new templates runs live with its own sample data, exactly as a new site gets it from the installer. All 3 demo sites run on PHP 8.5 with SQLite as the database:<\/p>\r\n<ul>\r\n<li><strong>Hammond<\/strong> (news portals &amp; magazines): <a href=\"https:\/\/j3xutd-demos.joomlaworks.net\/hammond\/\" target=\"_blank\" rel=\"noopener\">https:\/\/j3xutd-demos.joomlaworks.net\/hammond\/<\/a><\/li>\r\n<li><strong>Finch<\/strong> (blogs &amp; personal sites): <a href=\"https:\/\/j3xutd-demos.joomlaworks.net\/finch\/\" target=\"_blank\" rel=\"noopener\">https:\/\/j3xutd-demos.joomlaworks.net\/finch\/<\/a><\/li>\r\n<li><strong>Rookwood<\/strong> (studios, agencies &amp; company sites): <a href=\"https:\/\/j3xutd-demos.joomlaworks.net\/rookwood\/\" target=\"_blank\" rel=\"noopener\">https:\/\/j3xutd-demos.joomlaworks.net\/rookwood\/<\/a><\/li>\r\n<\/ul>\r\n<p>Click around, test them on your phone, and torture them as much as you like - we're still eager to see how SQLite holds up!<\/p>\r\n<h2 id=\"whats-new-in-v317\">What's new in v3.17<\/h2>\r\n<p>Here's a summary:<\/p>\r\n<ul>\r\n<li><strong>Every major database, tested:<\/strong> MySQL\/MariaDB (native &amp; PDO), PostgreSQL (native &amp; PDO, now fixed for PHP 8.1+), SQL Server &amp; Azure SQL (tested on SQL Server 2022 with both drivers) and SQLite (new). MySQL 8.0, 8.4 and 9.x work with their default authentication (caching SHA-2) - no more <code spellcheck=\"spellcheck\">my.cnf<\/code> changes to switch to \"native\" passwords.<\/li>\r\n<li><strong>SQLite (experimental):<\/strong> a whole site in one file. We use WordPress' emulation layer, so MySQL SQL from Joomla and your extensions runs unchanged. WAL mode lets visitors keep reading while a write happens, and sessions are kept in PHP so browsing writes nothing to the database. Ideal for spinning up dev sites in seconds or keeping a site in Dropbox\/OneDrive, but also practical for small to medium sites with caching enabled. Busy shops or forums with many concurrent writers are still better off on MySQL\/MariaDB.<\/li>\r\n<li><strong>A brand new installer:<\/strong> app-style, with a sidebar of steps, dark mode and right-to-left support, built with plain HTML, CSS &amp; JavaScript. It supports every database driver, removes the <code spellcheck=\"spellcheck\">installation<\/code> folder for you when you continue to the site, and once installed, only the browser that installed the site can go on.<\/li>\r\n<li><strong>3 brand new frontend templates:<\/strong> <strong>Hammond<\/strong> (news), <strong>Finch<\/strong> (blogs) and <strong>Rookwood<\/strong> (studios &amp; companies). Plain CSS &amp; JavaScript, no jQuery, Bootstrap or MooTools, system fonts &amp; SVG icons, built for Google's Core Web Vitals and using 100% core Joomla extensions. Each comes with an <code spellcheck=\"spellcheck\">editor.css<\/code> so your WYSIWYG editor shows articles with the site's fonts, colours &amp; layout, and a <code spellcheck=\"spellcheck\">css\/custom.css<\/code> that updates never touch.<\/li>\r\n<li><strong>Sample data made for each template:<\/strong> News (227 articles in ten sections), Blog (20 essays in four topics) and Studio (9 case studies &amp; 16 journal posts). Pick one in the installer, or switch sets later from the Control Panel, as if the site had been installed with that set from the start.<\/li>\r\n<li><strong>A command line for everything:<\/strong> <code spellcheck=\"spellcheck\">cli\/joomla.php<\/code> now ships with 100 commands for content (articles, categories, tags, modules, menus), templates (with undoable changes &amp; backups), databases (export, import, optimize and <code spellcheck=\"spellcheck\">database:convert<\/code> between MySQL, PostgreSQL &amp; SQLite in any direction), health checks, logs and more. Every command has JSON output and dry runs, and where Joomla 4 or newer has a command, ours uses the same name.<\/li>\r\n<li><strong>A built-in MCP server:<\/strong> Claude, ChatGPT, Gemini, Qwen, Kimi, GLM and other AI assistants can work with your site through the Model Context Protocol. It's read-only unless you allow writes (<code spellcheck=\"spellcheck\">--allow-write<\/code>), anything that puts code on the server needs <code spellcheck=\"spellcheck\">--allow-code<\/code> too, and every change is recorded in the User Actions Log. Details in our <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\/blob\/main\/AI-GUIDE.md\" target=\"_blank\" rel=\"noopener\">AI &amp; CLI guide<\/a>.<\/li>\r\n<li><strong>TinyMCE 8<\/strong> is the default editor for new sites: image uploads by dropping or pasting, a toolbar builder per user group and 61 languages. TinyMCE 4 stays as \"Editor - TinyMCE (legacy)\" for existing sites.<\/li>\r\n<li><strong>Quality of life in the backend:<\/strong> a new responsive login page, one-click <strong>Clean Cache<\/strong> in the status bar (plus <strong>Clean Everything<\/strong> and <strong>Global Check-in<\/strong> for administrators), Install from Web back as the first tab, and Help buttons that work again.<\/li>\r\n<li><strong>Post-installation Messages<\/strong> now tell the story of this distribution, one message per release since v3.11, instead of stock Joomla's notes from the 3.2\u20133.10 era.<\/li>\r\n<li><strong>Thousands of fixes:<\/strong> long-standing bugs in the API sorted, database errors handled as Joomla expects on PHP 8.1+, and every PHP deprecation we could find removed - including thousands while Smart Search indexes.<\/li>\r\n<\/ul>\r\n<h2 id=\"22-security-fixes\">22 security fixes<\/h2>\r\n<p>v3.17 also includes 22 security fixes. And this time most of them were not backports - they were issues present in stock Joomla 3 all along, found while auditing the codebase ourselves. A few examples:<\/p>\r\n<ul>\r\n<li>Crafted packages could write files outside the site's folders through Joomla Update's extraction, the extension installer or the archive code - such packages are now refused as a whole.<\/li>\r\n<li>Anyone could run the installer again on an installed site while the <code spellcheck=\"spellcheck\">installation<\/code> folder remained.<\/li>\r\n<li>The configuration writer could put PHP code into <code spellcheck=\"spellcheck\">configuration.php<\/code> through a crafted setting name.<\/li>\r\n<li>The MySQL (PDO) and PostgreSQL drivers ran several SQL statements given at once - every driver now runs one, like \"mysqli\".<\/li>\r\n<li><code spellcheck=\"spellcheck\">{loadmoduleid}<\/code> showed any module to anyone, whatever its access level or publishing dates.<\/li>\r\n<\/ul>\r\n<p>Our opt-in <strong>Little WAF<\/strong> plugin (introduced in v3.16) now also checks form data and encoded spellings of the tags it filters.<\/p>\r\n<p>The full list is on the <a href=\"https:\/\/j3xutd.joomlaworks.net\/#security\" target=\"_blank\" rel=\"noopener\">security section of the new site<\/a> and in the <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\/blob\/main\/CHANGELOG.md\" target=\"_blank\" rel=\"noopener\">detailed changelog<\/a>.<\/p>\r\n<h2 id=\"how-to-upgrade-or-start-fresh\">How to upgrade (or start fresh)<\/h2>\r\n<p>For existing Joomla 3.x sites (any 3.x release), in the backend open the Joomla Update options (or Global Configuration) and set:<\/p>\r\n<ul>\r\n<li>Update Channel: Custom URL<\/li>\r\n<li>Minimum Stability: Stable<\/li>\r\n<li>Custom URL: <code spellcheck=\"spellcheck\">https:\/\/joomlaworks.github.io\/joomla-3.x\/list.xml<\/code><\/li>\r\n<\/ul>\r\n<p>Refresh and v3.17 will show up. If your site is already on Joomla 3.x UTD, it's waiting for you there already.<\/p>\r\n<p>Prefer SSH? <code spellcheck=\"spellcheck\">cd<\/code> into your Joomla site's folder and run:<\/p>\r\n<pre spellcheck=\"spellcheck\"><code>wget -qO- https:\/\/github.com\/joomlaworks\/joomla-3.x\/archive\/refs\/heads\/main.tar.gz | tar -xz --strip-components=1 &amp;&amp; rm -rf installation .github .gitignore *.md<\/code><\/pre>\r\n<p>For new sites, <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\/releases\/download\/rolling\/joomla-latest.zip\" target=\"_blank\" rel=\"noopener\">download the latest release<\/a> and open it in a browser, or install a complete site on SQLite from the command line in about a second (sample data included):<\/p>\r\n<pre spellcheck=\"spellcheck\"><code>wget -q https:\/\/github.com\/joomlaworks\/joomla-3.x\/releases\/download\/rolling\/joomla-latest.zip &amp;&amp; unzip -q joomla-latest.zip &amp;&amp; rm joomla-latest.zip &amp;&amp; php cli\/joomla.php core:install --site-name=\"My Site\" <a href=\"mailto:--admin-email=me@example.com\">--admin-email=me@example.com<\/a> --admin-username=admin --sample-data=news<\/code><\/pre>\r\n<p>(Swap <code spellcheck=\"spellcheck\">news<\/code> for <code spellcheck=\"spellcheck\">blog<\/code> or <code spellcheck=\"spellcheck\">studio<\/code>.)<\/p>\r\n<h2 id=\"whats-next\">What's next<\/h2>\r\n<p>With v3.17, Joomla 3.x UTD is secure, current &amp; - for the first time - showcases what a fast, approachable CMS built on Joomla 3.x can look like out of the box. We'll keep backporting security fixes &amp; fixing bugs as they're reported.<\/p>\r\n<p>In parallel, our leaner fork based on Joomla 3.x (a separate project) is moving along very actively: stripped down, K2 for content, first-class MySQL\/MariaDB, PostgreSQL &amp; SQLite support, a refreshed administrator and modern JavaScript only. The command line &amp; MCP server in v3.17 are the seed for what we want that project to become: a truly agentic CMS.<\/p>\r\n<p>If you're a Joomla extension developer reading this, make sure your extension update XML files don't stop at Joomla 3.10.x. Do your users a favour ;)<\/p>\r\n<p>Found a bug? Report it in our <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\/discussions\" target=\"_blank\" rel=\"noopener\">GitHub Discussions<\/a>. Want to contribute a fix or a meaningful upgrade? <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\/issues\" target=\"_blank\" rel=\"noopener\">Open an issue<\/a>.<\/p>\r\n<p><strong>Happy updating!<\/strong><\/p>","extra_fields":null,"created":"2026-10-10 06:07:20","created_by_alias":"","modified":"2026-10-10 06:22:23","featured":"0","image":"\/media\/k2\/items\/cache\/d521b3285331148964fc0a459a826ae3_L.jpg?t=20261010_062223","imageWidth":"572","image_caption":"","image_credits":"","imageXSmall":"\/media\/k2\/items\/cache\/d521b3285331148964fc0a459a826ae3_XS.jpg?t=20261010_062223","imageSmall":"\/media\/k2\/items\/cache\/d521b3285331148964fc0a459a826ae3_S.jpg?t=20261010_062223","imageMedium":"\/media\/k2\/items\/cache\/d521b3285331148964fc0a459a826ae3_M.jpg?t=20261010_062223","imageLarge":"\/media\/k2\/items\/cache\/d521b3285331148964fc0a459a826ae3_L.jpg?t=20261010_062223","imageXLarge":"\/media\/k2\/items\/cache\/d521b3285331148964fc0a459a826ae3_XL.jpg?t=20261010_062223","video":"","video_caption":"","video_credits":"","gallery":"","hits":"357","category":{"id":"1","name":"Blog","alias":"blog","link":"\/blog","description":"","image":"","ordering":"1"},"tags":[{"id":"287","name":"j3x-utd","published":"1","description":"","link":"\/show\/itemlist\/tag\/j3x-utd"},{"id":"288","name":"joomla 3x utd","published":"1","description":"","link":"\/show\/itemlist\/tag\/joomla+3x+utd"},{"id":"142","name":"release","published":"1","description":"","link":"\/show\/itemlist\/tag\/release"}],"attachments":[],"votingPercentage":0,"numOfvotes":"(0 votes)","author":{"name":"JoomlaWorks","link":"\/show\/itemlist\/user\/989-joomlaworks","avatar":"\/media\/k2\/users\/1563.png?t=20220601_1100","profile":{"id":"1563","gender":"n","description":"","image":"1563.png","url":"","group":"2"}},"numOfComments":null,"events":{"BeforeDisplay":"","AfterDisplay":"","AfterDisplayTitle":"","BeforeDisplayContent":"","AfterDisplayContent":"","K2BeforeDisplay":"","K2AfterDisplay":"","K2AfterDisplayTitle":"","K2BeforeDisplayContent":"","K2AfterDisplayContent":"","K2CommentsCounter":""},"language":"*"},{"id":"318","title":"Major improvements coming to Joomla 3.x UTD","alias":"major-improvements-coming-to-joomla-3-x-utd","link":"\/blog\/item\/318-major-improvements-coming-to-joomla-3-x-utd","catid":"1","introtext":"<p>Development of our modernized Joomla 3.x distribution moves rapidly - here's what we've done and what's coming next.<\/p>","fulltext":"<p>According to <a href=\"https:\/\/w3techs.com\/technologies\/details\/cm-joomla\" rel=\"nofollow\">market share estimates<\/a> (as of May 2026), Joomla 3.x is currently used on more than 50% of all installed Joomla sites worldwide.<\/p>\r\n<p dir=\"auto\">However, official support for Joomla 3.x ended in February 2025 (counting the eLTS program).<\/p>\r\n<p><a href=\"\/blog\/item\/316-joomla-3-x-development-continued-to-ensure-code-security-support-modern-php-versions\" data-k2item-id=\"316\" data-k2item-alias=\"joomla-3-x-development-continued-to-ensure-code-security-support-modern-php-versions\">Back in April<\/a>&nbsp;we launched the first version of our up-to-date Joomla 3.x distribution, now called 'Joomla 3.x UTD' - an updated distribution of the Joomla 3.x content management system built to ensure code security, support modern PHP &amp; MySQL\/MariaDB versions &amp; fix any broken behaviour that never got sorted before the release of newer major versions of Joomla.<\/p>\r\n<p>This work has produced 6 releases so far (from 3.11 to 3.16), gradually reaching a major milestone for this project, as it achieves its primary stated goals of supporting newer PHP versions, while being fully in-line in terms of security with newer Joomla 5 &amp; 6 releases.<\/p>\r\n<p>We now shift gears by fixing the things that were either left unfinished (e.g. database drivers beyond MySQL\/MariaDB) or were never properly implemented (e.g. templates that highlight what a powerful &amp; approachable content management system should be).<\/p>\r\n<p>So in version 3.17, slated to be released in the coming days, we're bringing a slew of updates!<\/p>\r\n<p>Here's a summary:<\/p>\r\n<ul>\r\n<li>Full support for all major database vendors: MySQL\/MariaDB (native &amp; PDO), Postgres (native &amp; PDO), SQLite, SQL Server &amp; Azure SQL, spanning versions that were released even 15 or so years ago (excluding SQLite which supports versions from around 2020 for now). Our work made all databases simply work as they should with Joomla. And Joomla 3.x UTD works natively with the default user authentication method that ships with MySQL 8.0, 8.4 and 9.x (caching SHA-2) and it does not require switching MySQL to \"native\" authentication (the old way up to MySQL 5.7).<\/li>\r\n<li>For SQLite specifically, we're using WordPress' emulation layer so that any SQL statement built for MySQL will work with SQLite as well. And we use WAL mode to queue write operations in SQLite, while switching session management to \"PHP\" to reduce write volume to what would otherwise end up in the sessions table in the database. SQLite is excellent for spinning up Joomla 3.x UTD dev environments in seconds, or even putting entire sites in Dropbox, OneDrive etc. that you can resume working on when switching between devices. But it can also be used for small sites, that don't require lots of concurrent writes. We currently flag the SQLite driver as 'experimental,' having tested it primarily against engine releases from the past six years. Compatibility will continue to improve as we test older releases and gather real-world feedback from third-party extensions.<\/li>\r\n<li>A brand new installation process that supports all database drivers.<\/li>\r\n<li>3 brand new frontend templates that truly highlight what a good content management system should be: <strong>Finch<\/strong> (for blogging),&nbsp;<strong>Hammond<\/strong>&nbsp;(for news portals &amp; magazines) and <strong>Rookwood<\/strong> (for portfolio\/presentation business sites). All using 100% core Joomla extensions, built with plain CSS and JavaScript, providing editor.css files for ensuring your WYSIWYG editor sees the template's CSS styling, including awesome \"print CSS\" styling for article views and scoring excellent on Google's Core Web Vitals. Not only that, we revamped all sample data sets to adapt on each template. And you can switch between sample data sets even after you've installed Joomla 3.x UTD for the first time, as if you had installed the new sample data set at first. The 3 new templates are a great starting point for any new project and have been professionally crafted using our nearly 2 decades of experience in building high traffic &amp; heavy content websites with Joomla &amp; K2.<\/li>\r\n<li>Protostar has been fully upgraded for PHP 8 and security, but will not be actively used in the future - it's there for backwards compatibility only.<\/li>\r\n<li>We've added TinyMCE 8 (the latest version) as a new default editor plugin for Joomla; TinyMCE 4 stays as \"Editor - TinyMCE (legacy)\", and existing sites keep it until they switch in Global Configuration, to ensure maximum backwards compatibility.<\/li>\r\n<li>New command line interface (CLI - at&nbsp;<code>cli\/joomla.php<\/code>) using the command names of newer Joomla releases (after version 4), but enhancing with many more and using JSON output so that scripts and AI agents can programmatically interact with your site. We're talking full content management (articles, categories, modules, menus), full template management, dry runs, health checks, converting between databases, log viewers and more! This work will bring Joomla 3.x UTD closer to becoming a truly agentic CMS.<\/li>\r\n<li>The new CLI also exposes a brand new MCP server: All major AI assistants (e.g. Claude, OpenAI, Gemini, Qwen, Kimi, GLM etc.) can now work with your site through this built-in MCP server and perform operations as you instruct them in both the content and structure of the site.<\/li>\r\n<li>It's even possible to install a new Joomla 3.x UTD site using just the CLI in mere seconds, which makes rapid prototyping and testing a joy! <a href=\"https:\/\/x.com\/joomlaworks\/status\/2107490029568164119?s=20\">See our video on X here<\/a>.<\/li>\r\n<li>The backend template has a new responsive login page, inline with Isis' colors, but modernized and more practical.<\/li>\r\n<li>We've added a new one-click <strong>Clean Cache<\/strong>&nbsp;control in the administrator's status bar for everyone with backend access; administrators also get <strong>Clean Everything<\/strong> (the main site cache, anything inside the \/cache folder and temporary folders as defined in configuration.php) and <strong>Global Check-in<\/strong> from the same spot.<\/li>\r\n<li>Post-installation Messages now show what's new in <span style=\"text-decoration: underline;\">every<\/span> release of this distribution, starting from v3.11, instead of stock Joomla's outdated messages from the 3.2\u20133.10 era.<\/li>\r\n<li>Fixed the administrator's Help buttons, which showed \"not found\" since v3.11.<\/li>\r\n<li>Fixed a ton of long-standing bugs in the API and ironed out any PHP deprecations we could detect.<\/li>\r\n<\/ul>\r\n<p>As we prepare the release for v3.17, we've setup 3 demo sites to showcase the new templates, using PHP 8.5 and SQLite for database.<\/p>\r\n<p>Browse, test and torture these demo sites (we're eager to see how SQLite will perform)!<\/p>\r\n<ul>\r\n<li>For Finch: <a href=\"https:\/\/j3xutd-demos.joomlaworks.net\/finch\/\" target=\"_blank\" rel=\"noopener\">https:\/\/j3xutd-demos.joomlaworks.net\/finch\/<\/a><\/li>\r\n<li>For Hammond: <a href=\"https:\/\/j3xutd-demos.joomlaworks.net\/hammond\/\" target=\"_blank\" rel=\"noopener\">https:\/\/j3xutd-demos.joomlaworks.net\/hammond\/<\/a><\/li>\r\n<li>For Rookwood: <a href=\"https:\/\/j3xutd-demos.joomlaworks.net\/rookwood\/\" target=\"_blank\" rel=\"noopener\">https:\/\/j3xutd-demos.joomlaworks.net\/rookwood\/<\/a><\/li>\r\n<\/ul>\r\n<p>Below you'll find some screenshots of the updates...<\/p>\r\n<p><img src=\"images\/uploads\/2026\/10\/08\/j3xutd-installer_b829755c05f0604c.png\" alt=\"j3xutd-installer_b829755c05f0604c.png\" width=\"900\" height=\"564\" \/><\/p>\r\n<p><img src=\"images\/uploads\/2026\/10\/08\/j3xutd-admin-login_94f673c8f31967fc.png\" alt=\"j3xutd-admin-login_94f673c8f31967fc.png\" width=\"900\" height=\"564\" \/>&nbsp;<\/p>\r\n<p><img src=\"images\/uploads\/2026\/10\/08\/j3xutd-sampledata-reconfig_dbb187dfd86438cf.png\" alt=\"j3xutd-sampledata-reconfig_dbb187dfd86438cf.png\" width=\"900\" height=\"413\" \/><\/p>\r\n<p><img src=\"images\/uploads\/2026\/10\/08\/rookwood-content-editor-css_f6109a95d4ea2e09.png\" alt=\"rookwood-content-editor-css_f6109a95d4ea2e09.png\" width=\"900\" height=\"564\" \/><\/p>","extra_fields":null,"created":"2026-10-07 22:29:08","created_by_alias":"","modified":"2026-10-07 23:59:26","featured":"0","image":"\/media\/k2\/items\/cache\/0692a4e584defe6544ca2abbf7dd2502_L.jpg?t=20261007_235926","imageWidth":"572","image_caption":"","image_credits":"","imageXSmall":"\/media\/k2\/items\/cache\/0692a4e584defe6544ca2abbf7dd2502_XS.jpg?t=20261007_235926","imageSmall":"\/media\/k2\/items\/cache\/0692a4e584defe6544ca2abbf7dd2502_S.jpg?t=20261007_235926","imageMedium":"\/media\/k2\/items\/cache\/0692a4e584defe6544ca2abbf7dd2502_M.jpg?t=20261007_235926","imageLarge":"\/media\/k2\/items\/cache\/0692a4e584defe6544ca2abbf7dd2502_L.jpg?t=20261007_235926","imageXLarge":"\/media\/k2\/items\/cache\/0692a4e584defe6544ca2abbf7dd2502_XL.jpg?t=20261007_235926","video":"","video_caption":"","video_credits":"","gallery":"","hits":"455","category":{"id":"1","name":"Blog","alias":"blog","link":"\/blog","description":"","image":"","ordering":"1"},"tags":[{"id":"60","name":"joomla","published":"1","description":"","link":"\/show\/itemlist\/tag\/joomla"},{"id":"286","name":"distribution","published":"1","description":"","link":"\/show\/itemlist\/tag\/distribution"},{"id":"287","name":"j3x-utd","published":"1","description":"","link":"\/show\/itemlist\/tag\/j3x-utd"}],"attachments":[],"votingPercentage":0,"numOfvotes":"(0 votes)","author":{"name":"JoomlaWorks","link":"\/show\/itemlist\/user\/989-joomlaworks","avatar":"\/media\/k2\/users\/1563.png?t=20220601_1100","profile":{"id":"1563","gender":"n","description":"","image":"1563.png","url":"","group":"2"}},"numOfComments":null,"events":{"BeforeDisplay":"","AfterDisplay":"","AfterDisplayTitle":"","BeforeDisplayContent":"","AfterDisplayContent":"","K2BeforeDisplay":"","K2AfterDisplay":"","K2AfterDisplayTitle":"","K2BeforeDisplayContent":"","K2AfterDisplayContent":"","K2CommentsCounter":""},"language":"*"},{"id":"317","title":"Simple Image Gallery Pro v3.10 released - PHP 8.x compatible for Joomla 3.x UTD, WebP, AVIF, ImageMagick!","alias":"simple-image-gallery-pro-v3-10-released-php-8-x-compatible-for-joomla-3-x-utd,-webp,-avif,-imagemagick","link":"\/blog\/item\/317-simple-image-gallery-pro-v3-10-released-php-8-x-compatible-for-joomla-3-x-utd,-webp,-avif,-imagemagick","catid":"1","introtext":"<p>Simple Image Gallery Pro v3.10 is now available to download for subscribers. To summarize the release, we've added full support for PHP 8.x (those using <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\">Joomla 3.x UTD<\/a> will certainly appreciate the update) and extended to new features.<\/p>","fulltext":"<p>Here's what's been added or changed in Simple Image Gallery Pro with the release of v3.10:<\/p>\r\n<ul>\r\n<li>Full support for PHP versions from 5.6 to 8.5 - <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\">as Joomla 3.x UTD works up to PHP 8.5<\/a><\/li>\r\n<li>Accepts AVIF as input format in galleries (WebP was already supported in previous releases).<\/li>\r\n<li>WebP output is now the default format for generated thumbnails (with JPEG fallback).<\/li>\r\n<li>Added support for ImageMagick if it's installed on your server for better quality of created images (and of course GD fallback).<\/li>\r\n<li>Updated third-party libraries elFinder (used in the extension's file manager) and Plupload (used for backend uploads) to their most recent releases.<\/li>\r\n<li>General code cleanups.<\/li>\r\n<li>Security: fixed a path traversal in the gallery image delete flow, a stored XSS in the admin gallery image description field and a missing permission check on the media manager's file browser connector.<\/li>\r\n<li>Security: hardened image upload extension validation and gallery path handling (when using the \"gallery\" plugin tags) against malicious input.<\/li>\r\n<li>Minor functional bug: Fixed modal image preview in the backend not opening for images uploaded to an existing gallery in the backend, since newly appended images were never bound to the modal JS.<\/li>\r\n<\/ul>\r\n<p>If you have any custom gallery layouts, you <em>may<\/em> have to slightly modify them to play nice with PHP 8.x.<\/p>\r\n<p>As always, send a ticket in our helpdesk system for assistance with such matters...<\/p>\r\n<p>&nbsp;<\/p>\r\n<h3>FUTURE PLANS<\/h3>\r\n<p>The next version of SIGPro is already being worked on. These are the things we're considering:<\/p>\r\n<ul>\r\n<li>Consider supporting Joomla versions 5 and 6. Drop support for Joomla 1.5 and 2.5 and in the future maintain support for Joomla 3.x UTD and any actively supported version by joomla.org (e.g. v6, v7 and so on).<\/li>\r\n<li>Custom ordering for images using drag and drop in the backend.<\/li>\r\n<li>Switch to a new, custom made modal that uses vanilla JS only. This modal's design will be fully CSS-controlled, so this means we can have a few variations, to replace what we have now in the form of multiple \"popup engines\".<\/li>\r\n<li>All-new gallery layouts using CSS Grid properties, with distinct options for responsive designs.<\/li>\r\n<li>More slideshow-like (carousel) gallery layouts.<\/li>\r\n<li>Updated backend UI that is fully responsive on mobile devices for gallery management on the go.<\/li>\r\n<li>Dynamic image filters (e.g. grayscale, mix with background colors or gradients etc.)<\/li>\r\n<li>New JSON based format for captions.<\/li>\r\n<\/ul>\r\n<p>Not all the features above will be available when SIGPro v4 is released, but they will be gradually included as updates come in.<\/p>\r\n<p>&nbsp;<\/p>\r\n<h3>DEMO<\/h3>\r\n<p>The JoomlaWorks demo site has been updated to the latest Simple Image Gallery Pro release. Have a look here: <a href=\"https:\/\/demo.joomlaworks.net\/simple-image-gallery-pro\">https:\/\/demo.joomlaworks.net\/simple-image-gallery-pro<\/a><\/p>\r\n<p>&nbsp;<\/p>\r\n<h3>DOWNLOAD<\/h3>\r\n<p>If you have an active Simple Image Gallery Pro membership, just head over to the Member Dashboard at <a href=\"members\">https:\/\/www.joomlaworks.net\/members<\/a> and grab your copy from your \"Subscriptions\" page.<\/p>\r\n<p>Or purchase this latest release from just 19.90 EUR. More info at: <a href=\"extensions\/commercial\/simple-image-gallery-pro\">https:\/\/www.joomlaworks.net\/extensions\/commercial\/simple-image-gallery-pro<\/a><\/p>\r\n<p>&nbsp;<\/p>\r\n<h3>UPGRADING<\/h3>\r\n<p>Just upload the new version and it will overwrite the old one.<\/p>\r\n<p>For more help, please visit the updated documentation page for the extension at: <a href=\"support\/docs\/simple-image-gallery-pro\">https:\/\/www.joomlaworks.net\/support\/docs\/simple-image-gallery-pro<\/a><\/p>\r\n<p>For support questions please use our Helpdesk system included in your Member Dashboard at <a href=\"dashboard\">https:\/\/www.joomlaworks.net\/dashboard<\/a> (active product membership required).<\/p>","extra_fields":null,"created":"2026-07-19 12:37:54","created_by_alias":"","modified":"2026-07-19 19:37:12","featured":"0","image":"\/media\/k2\/items\/cache\/c987a1b31fd3f1f08322280ca0954f48_L.jpg?t=20260719_193712","imageWidth":"572","image_caption":"","image_credits":"","imageXSmall":"\/media\/k2\/items\/cache\/c987a1b31fd3f1f08322280ca0954f48_XS.jpg?t=20260719_193712","imageSmall":"\/media\/k2\/items\/cache\/c987a1b31fd3f1f08322280ca0954f48_S.jpg?t=20260719_193712","imageMedium":"\/media\/k2\/items\/cache\/c987a1b31fd3f1f08322280ca0954f48_M.jpg?t=20260719_193712","imageLarge":"\/media\/k2\/items\/cache\/c987a1b31fd3f1f08322280ca0954f48_L.jpg?t=20260719_193712","imageXLarge":"\/media\/k2\/items\/cache\/c987a1b31fd3f1f08322280ca0954f48_XL.jpg?t=20260719_193712","video":"","video_caption":"","video_credits":"","gallery":"","hits":"2412","category":{"id":"1","name":"Blog","alias":"blog","link":"\/blog","description":"","image":"","ordering":"1"},"tags":[{"id":"261","name":"update","published":"1","description":"","link":"\/show\/itemlist\/tag\/update"},{"id":"271","name":"simple image gallery pro","published":"1","description":"","link":"\/show\/itemlist\/tag\/simple+image+gallery+pro"}],"attachments":[],"votingPercentage":0,"numOfvotes":"(0 votes)","author":{"name":"JoomlaWorks","link":"\/show\/itemlist\/user\/989-joomlaworks","avatar":"\/media\/k2\/users\/1563.png?t=20220601_1100","profile":{"id":"1563","gender":"n","description":"","image":"1563.png","url":"","group":"2"}},"numOfComments":null,"events":{"BeforeDisplay":"","AfterDisplay":"","AfterDisplayTitle":"","BeforeDisplayContent":"","AfterDisplayContent":"","K2BeforeDisplay":"","K2AfterDisplay":"","K2AfterDisplayTitle":"","K2BeforeDisplayContent":"","K2AfterDisplayContent":"","K2CommentsCounter":""},"language":"*"},{"id":"316","title":"Joomla 3.x development continued to ensure code security &amp; support modern PHP versions","alias":"joomla-3-x-development-continued-to-ensure-code-security-support-modern-php-versions","link":"\/blog\/item\/316-joomla-3-x-development-continued-to-ensure-code-security-support-modern-php-versions","catid":"1","introtext":"<p>This may be of interest to existing Joomla 3.x users who cannot yet upgrade to newer Joomla releases for various reasons...<\/p>\r\n<p>We're continuing the development of an open distribution of Joomla 3.x (we call it Joomla 3.x UTD for now) to ensure code security and support modern PHP versions.<\/p>\r\n","fulltext":"\r\n<p>The project is hosted on GitHub: <a href=\"https:\/\/github.com\/joomlaworks\/joomla-3.x\">https:\/\/github.com\/joomlaworks\/joomla-3.x<\/a><\/p>\r\n<p>First release of&nbsp;Joomla 3.x UTD, version 3.11, was uploaded on Monday, Apr 20th, 2026.<\/p>\r\n<p>Joomla 3.x UTD&nbsp;is currently compatible with PHP 7.1 and up to 8.5 and is tested with latest versions of MySQL (8.0 &amp; 8.4 LTS) &amp; MariaDB (10, 11 and 12) at the time of writing. As we roll newer releases, we will test against more recent versions of Postgres as well.<\/p>\r\n<p>Please note that the point of this project is to ensure Joomla 3.x works with new PHP &amp; MySQL\/MariaDB versions and remains secure, for those who still use it.<\/p>\r\n<p>As such, any contributions should focus towards that goal, as well as any bugs they may have existed in Joomla 3.x and which were never resolved due to the Joomla core team's change of focus to newer releases.<\/p>\r\n<p>This distribution is obviously a community project, not an official Joomla project.<\/p>\r\n<p>As always, thanks goes out to all the people who built and contributed to Joomla 3.x until its EOL date.<\/p>\r\n<p><strong>Update on July 19th, 2026:<\/strong><\/p>\r\n<p>We're continuing to roll out updates. The last one, v3.15, includes many security issues discovered in Joomla 5\/6, backported to Joomla 3.x UTD, along with further improvements and bug fixes in Joomla 3.x.<\/p>","extra_fields":null,"created":"2026-04-22 14:09:50","created_by_alias":"","modified":"2026-07-19 12:35:49","featured":"0","image":"\/media\/k2\/items\/cache\/4ddc75f1698994d05cf43f2316d7d33a_L.jpg?t=20260719_123549","imageWidth":"572","image_caption":"","image_credits":"","imageXSmall":"\/media\/k2\/items\/cache\/4ddc75f1698994d05cf43f2316d7d33a_XS.jpg?t=20260719_123549","imageSmall":"\/media\/k2\/items\/cache\/4ddc75f1698994d05cf43f2316d7d33a_S.jpg?t=20260719_123549","imageMedium":"\/media\/k2\/items\/cache\/4ddc75f1698994d05cf43f2316d7d33a_M.jpg?t=20260719_123549","imageLarge":"\/media\/k2\/items\/cache\/4ddc75f1698994d05cf43f2316d7d33a_L.jpg?t=20260719_123549","imageXLarge":"\/media\/k2\/items\/cache\/4ddc75f1698994d05cf43f2316d7d33a_XL.jpg?t=20260719_123549","video":"","video_caption":"","video_credits":"","gallery":"","hits":"3363","category":{"id":"1","name":"Blog","alias":"blog","link":"\/blog","description":"","image":"","ordering":"1"},"tags":[{"id":"60","name":"joomla","published":"1","description":"","link":"\/show\/itemlist\/tag\/joomla"},{"id":"286","name":"distribution","published":"1","description":"","link":"\/show\/itemlist\/tag\/distribution"}],"attachments":[],"votingPercentage":0,"numOfvotes":"(0 votes)","author":{"name":"JoomlaWorks","link":"\/show\/itemlist\/user\/989-joomlaworks","avatar":"\/media\/k2\/users\/1563.png?t=20220601_1100","profile":{"id":"1563","gender":"n","description":"","image":"1563.png","url":"","group":"2"}},"numOfComments":null,"events":{"BeforeDisplay":"","AfterDisplay":"","AfterDisplayTitle":"","BeforeDisplayContent":"","AfterDisplayContent":"","K2BeforeDisplay":"","K2AfterDisplay":"","K2AfterDisplayTitle":"","K2BeforeDisplayContent":"","K2AfterDisplayContent":"","K2CommentsCounter":""},"language":"*"},{"id":"314","title":"K2 will not be made available for Joomla 4\/5 - change of course","alias":"k2-will-not-be-made-available-for-joomla-4-5-change-of-course","link":"\/blog\/item\/314-k2-will-not-be-made-available-for-joomla-4-5-change-of-course","catid":"1","introtext":"<p>The writing's on the wall. Joomla 4 and 5 are failed CMS releases.<\/p>\r\n","fulltext":"\r\n<p>They account for around 0.3% of ALL Joomla sites according to W3Techs (<a href=\"https:\/\/w3techs.com\/technologies\/details\/cm-joomla\">https:\/\/w3techs.com\/technologies\/details\/cm-joomla<\/a>).<\/p>\r\n<p>Joomla's official stats (which were introduced near the end of life of Joomla 3 - <a href=\"https:\/\/developer.joomla.org\/about\/stats.html\">https:\/\/developer.joomla.org\/about\/stats.html<\/a>) are far less accurate obviously (e.g. they don't account for Joomla 1.5 &gt; 2.5 sites or older Joomla 3 releases) but still show around 10% of sites use Joomla 4\/5, after 3 years of their release. And these stats can be disabled by users of Joomla sites (most do).<\/p>\r\n<p>This means adoption for these versions is close to non-existent. A sad reality, but an understandable one (read my posts on May 30th at&nbsp;<a href=\"https:\/\/x.com\/joomlaworks\">https:\/\/x.com\/joomlaworks<\/a> for additional context).<\/p>\r\n<p>There is literally nothing to say about how things have evolved for Joomla.<\/p>\r\n<p>At this rate, it will probably be a dead software project within the next couple of years.<\/p>\r\n<p>It's not just the users that are de-motivated, it's the developers too (the Joomla core developers). Few people will enjoy working on Joomla if no one uses it. It just makes sense.<\/p>\r\n<p>As such, and given that we're strongly invested in Joomla 3 (in some of the largest news\/media site implementations worldwide with Joomla), we don't plan on giving up on K2 (or Joomla 3). In fact, our goal is to pivot and work on a possible fork, unless a miracle happens and the Joomla core team gets their shit together and works on a true\/seamless Joomla 3 to Joomla 5 (or 6?) upgrade.<\/p>\r\n<p>The fork is a reasonable path for us for many reasons but I'd list the following ones here (for now):<\/p>\r\n<ul>\r\n<li>It'll be exciting to go from K2 (a \"half\" CMS so to speak) to a full CMS. Any crap that didn't work or half-worked on J3 will be fixed.<\/li>\r\n<li>Sky's the limit. Really. No stupid politics, irrelevant conventions, idiotic patterns to follow. We have a clear goal for K2 (and Joomla) and that's what we're gonna work on. That goal is a fast, reliable. modern CMS that leaves people asking \"why WordPress?\"<\/li>\r\n<li>Some will nag Joomla 3 uses old code. No it doesn't. It uses a certain design that was popular at the time it was introduced. The only change that is required is for it to be updated so it catches up with PHP's latest versions (for the record, we actively run sites with Joomla 3 \/ K2 on PHP 8.2). It's a mature code base that can be gradually improved.<\/li>\r\n<li>The fork could be introduced in 2 phases. Phase 1: A re-branding for existing sites to move over their content from com_content to K2 (far less work than switching to Joomla 4\/5) and existing Joomla\/K2 sites to freshen up their backend. Phase 2: This would be the part we lighten up the core. This means com_content &amp; components like banners, newsfeeds, messages etc., their respective modules and plugins and generally&nbsp;other accumulated crap (like User Notes) that literally noone ever used will be stripped off Joomla. Either way K2 can reproduce most of these stuff far better.<\/li>\r\n<li>Any design changes will be subtle and NOT affect existing Joomla extensions that respected the Joomla UI design. It will also certainly NOT affect extensions that brought in their own design\/MVC and so on (think AcyMailing, page builders etc. etc.).<\/li>\r\n<li>If our friend Ryan provides his blessing, we would also love to swap the current Joomla WYSIWYG editor with JCE Core. If not, it's always available either way. We will just upgrade TinyMCE and still install our beloved JCE. This would also be a good time to standardize things like \"editor xtd\" buttons in a way that they better integrate with the WYSIWYG editor...<\/li>\r\n<li>Features and custom extensions we've used for large scale projects could be integrated in the new CMS, if it makes sense for most users to have. E.g. fast search powered by Elasticsearch is a no-brainer (and we can throw that Smart Search crap out for good).<\/li>\r\n<\/ul>\r\n<p>The point is to do something that's fun, while professional at the same time.<\/p>\r\n<p>Backward compatibility will be our holy grail. Anyone that tells it can't are either lazy or just plain bad programmers (hell, we've maintained K2 for Joomla 1.5 to 3 for 15 damn years).<\/p>\r\n<p>We're already in touch with partners to finance this move. On the long term, all we need is a couple of devs, working full time.<\/p>\r\n<p>The next big phase will be infrastructure as required for any modern CMS. That means rebuilding something like the JED, working on documenting use and code etc. At the same time, it's practical to keep everything to a minimum. E.g. there is no reason to use our own forum, but probably go for something like GitHub so we can have everything in a single place: code and discussion, coupled with solid anti-spam (cause let's face it, that's what forums suffer from these days).<\/p>\r\n<p>By keeping things lean and simple, we will work less on infrastructure and more on the CMS's code and features.<\/p>\r\n<p>If you ask \"why now\", I can respond with 2 things:<\/p>\r\n<p>1) There's been plenty of time for people to switch to Joomla 4\/5. Very few did.<\/p>\r\n<p>2) It's MUCH worse waiting things out to chart their predefined course <strong>than actually fucking doing something about it, even if it fails or doesn't work out<\/strong>.<\/p>\r\n<p><em>Follow up blog posts will provide more insight into how things will play out in the coming months and how others can join this effort.<\/em><\/p>\r\n<p>&nbsp;<\/p>\r\n<p><strong>P.S.<\/strong><\/p>\r\n<p><em>If you have any questions, please use Twitter\/X to communicate these to us (@joomlaworks).<\/em><\/p>","extra_fields":null,"created":"2024-05-30 17:56:11","created_by_alias":"","modified":"2024-05-30 18:48:04","featured":"0","image":"\/media\/k2\/items\/cache\/569585164bf57f8a1e8703b19497bdbc_L.jpg?t=20240530_184804","imageWidth":"572","image_caption":"","image_credits":"","imageXSmall":"\/media\/k2\/items\/cache\/569585164bf57f8a1e8703b19497bdbc_XS.jpg?t=20240530_184804","imageSmall":"\/media\/k2\/items\/cache\/569585164bf57f8a1e8703b19497bdbc_S.jpg?t=20240530_184804","imageMedium":"\/media\/k2\/items\/cache\/569585164bf57f8a1e8703b19497bdbc_M.jpg?t=20240530_184804","imageLarge":"\/media\/k2\/items\/cache\/569585164bf57f8a1e8703b19497bdbc_L.jpg?t=20240530_184804","imageXLarge":"\/media\/k2\/items\/cache\/569585164bf57f8a1e8703b19497bdbc_XL.jpg?t=20240530_184804","video":"","video_caption":"","video_credits":"","gallery":"","hits":"21594","category":{"id":"1","name":"Blog","alias":"blog","link":"\/blog","description":"","image":"","ordering":"1"},"tags":[{"id":"107","name":"future","published":"1","description":"","link":"\/show\/itemlist\/tag\/future"},{"id":"61","name":"k2","published":"1","description":"","link":"\/show\/itemlist\/tag\/k2"},{"id":"60","name":"joomla","published":"1","description":"","link":"\/show\/itemlist\/tag\/joomla"}],"attachments":[],"votingPercentage":0,"numOfvotes":"(0 votes)","author":{"name":"JoomlaWorks","link":"\/show\/itemlist\/user\/989-joomlaworks","avatar":"\/media\/k2\/users\/1563.png?t=20220601_1100","profile":{"id":"1563","gender":"n","description":"","image":"1563.png","url":"","group":"2"}},"numOfComments":"2","events":{"BeforeDisplay":"","AfterDisplay":"","AfterDisplayTitle":"","BeforeDisplayContent":"","AfterDisplayContent":"","K2BeforeDisplay":"","K2AfterDisplay":"","K2AfterDisplayTitle":"","K2BeforeDisplayContent":"","K2AfterDisplayContent":"","K2CommentsCounter":""},"language":"*"}]}