Upgrading to Joomla! 3.6.1..with some adjustments!
Team Host.it 2 min read
Content
During the last update to version 3.6.1 a control token was introduced (quite quickly) to avoid the possibility of a CSFR attack and therefore to resolve a security bug.
This type of attack puts at risk web applications that perform actions based on input from trusted and authenticated users, without requiring the user to authorize the specific action (source wikipedia) so thanks to the security team for once again making Joomla! safer.
This is where the problem arises and all versions of Joomla from 2.5.4 to 3.6.0, which cannot generate this control token, encounter a problem.
If you are therefore about to update to version 3.6.1 you must adopt different behaviors based on the version from which you are updating.
We thought we'd create an infographic (thanks to our graphic designer Elisa for the support) to better clarify what operations need to be performed to correctly update based on the version of Joomla! starting, here it is:
Joomla! 3.6.1 - Infographic It is truly ESSENTIAL in any case to update the Joomla! before performing the core update, in particular:
If you have done or will update to 3.6.1 starting from 3.6.0 without first updating the no problem update component, you can use the Joomla! database fix. to fix problems.
If you have done or will update to 3.6.1 from 3.5 and earlier without first updating the joomla! update component, then it is best to restore a copy of the website from a backup and proceed to update the joomla! update component FIRST. (Joomla! Update Component) from the extensions menu before performing the core update.
If you started from version 3.5 or earlier without first updating the Joomla! the Joomla! database fix it would not perform some important updates on the site tables which cannot be forced again by the backend in any way, which is why a site restore is necessary.
If you have any doubts or questions don't hesitate to post them in the comments!
Joomla hosting
Joomla hosting in Italy
Plans with backups, SSL certificates and tools for developers and agencies.
Related articles
From the blog
From the archive