1. Overview

Error Reporting is a useful Joomla function to troubleshoot PHP errors on your Joomla site. This function provides some clues about what and where the PHP problems are.

2. When to turn it on?

Got blank/ white screen in your Joomla site frontend? Well, that calls for turning on the error reporting feature. You may also want to disable the URL rewriting (htaccess method) using Apache mod_rewrite under the SEO settings for differential diagnosis of the issue as url rewriting with htaccess file in non-supported server (mod_rewrite not active) also renders blank pages.

3. How to proceed

In your Admin Panel, navigate through Global Configuration >> Server tab >> Error Reporting.
There are several options for you to choose, namely:

• System Default : Joomla will inherit error reporting defaults set in the server (usually in php.ini file).
• None : Choose this option to switch off the Error Reporting so that no notification will be shown. However, when any 3rd party extension overrides Joomla error reporting with their own settings, notifications may still appear.
• Simple : Overrides server settings to give a basic report with warnings only about the fatal errors.
• Maximum (Recommended) : Overrides server settings to gives full report with all the errors, warnings, notices, deprecated functions call, strict standards on the website.
  

Tip : You can enable the Error Reporting with the configuration.php file. Edit the file and add one of the following numeric values for $error_reporting, which equals to the PHP’s error constants:

-1 = 0 : No error reporting.
30711 = E_ALL & ~(E_NOTICE|E_WARNING) : All errors reporting. No warnings or notices.
30711 = E_ALL & ~E_NOTICE : All errors and warnings reporting. No notices.
30719 = E_ALL : All errors, warnings and notices reporting.
32767 = E_ALL | E_STRICT : All errors, warnings, notices and strict standards reporting.

4. Recommendations

For developers error reporting gives them a headstart and they know what they have to fix and where. For regular users, it helps to provide more details to the developer instead of saying "I got blank / white page".
Error reporting should be disabled on an live site as the error reports would be visible to your users and information about your website may be revealed including the absolute path of your website.
Turn it on only when something goes wrong such as a blank page and/or you are debugging your Joomla website. Once the bugs are fixed, change the error reporting settings back to “None”. This is highly recommended for any Joomla website in term of security.

5. Live example

Let's see how an error would be reported when your Joomla Error Reporting is ON.

• Open your_site_root/components/com_content/content.php and remove “;” from line no. 11.
• Check your front-end. As your Error Reporting is set as "None", it must be just a blank page.
• Now proceed to turn the Error Reporting to "Maximum" and you can see the exact error.
  

6. Joomla extension for Error Reporting

You may find some more useful Joomla extensions for error reporting in our Joomla! Extension Directory. Easy Error Reporting would be a handy choice as you can enable the error reports for specific user groups only.

7. Further reading

• Sever Settings Group - Joomla! Docs
• error_reporting - PHP.net
• How to turn your error reporting to Maximum - OSTraining

Easy Way to Improve The Security of Your Joomla Template

Joomla is a Content Management System that helps you to integrate the content and the modules to develop the most interactive and impressive web pages for your website. Joomla is an open source software application with an easy to use interface and high extensibility. Joomla is used vastly by many corporate portals and websites, government applications, online newspapers and magazines, small-scale business websites, and many other personal web pages. You can install and set up the Joomla application easily within a few clicks. Some of the core features of Joomla are detailed below:

• Powerful caching option facilitates a speedy page load.
• A handy help system is integrated within Joomla for assistance.
• Incorporating templates into your web site as a whole or for individual web pages is made easy.
• Structure independent menu hierarchies irrespective of the content structures.
• Organize you content in a better way.
• Manage users with the help of the nine user groups provided with various levels of permissions.
• Provision of many international language support and UTF-8 coding.

The template is one of the most important aspects of your Joomla website.

It is used on every pageload and affects the look, feel, layout, pageload time and nearly every other aspect of the website experience.

Not surprisingly then, the template is also a prime target for intruders who look to gain access to your webserver or deface your site with spam or graffiti.

To help prevent this, use the following tips to improve your Joomla security policies specifically for your website template.

Fix file permissions on your web server

Like any computer system, the files on your web server all have permissions that control who can access them.

For web servers, these permissions are broken down into three categories:

• Read privileges — who can read a file
• Write privileges — who can edit a file
• Execute privileges — who can execute system commands
• The safest permissions for the files on your web server — including the files in your template — is for the public to have read-only access. Changes to these files should only be possible by the owner (i.e. the apache root user) of the file.

While a system administrator can easily modify permissions, we recommend that you use the excellent Admin Tools extension to properly set file permissions right from the Joomla backend.

Lock down the main template file

For all Joomla templates, the index.php file is the main file that loads all of the assets like CSS and JavaScript, and mixes the site layout with the content from the database.

Since this file is heavily targeted by intruders, it can be helpful to strictly control the permissions such that even the owner (again, the Apache root user, for example) of the file can not make changes.

In fact, if you use the template editor in the Joomla backend, the index.php file is made read-only for everyone once the file is saved.

Again, we think using Admin Tools to do this makes the most sense.

Prevent file listing (HTACCESS)

Letting visitors know what files you have in your Joomla template folder is never a good idea.

You can check if your template currently displays these files by typing the name of your template folder into your browser (eg. domain.com/templates/) and seeing if you get a Forbidden warning.

If you see a list of your installed template folders, your site is not as safe as it could be.

To solve the problem, you’ll need to use FTP to edit the HTACCESS file in the root of your website so that is contains the following line:

Options -Indexes

Restrict template edit permissions

Joomla has a powerful template editor that allows users to modify all the components of the template, including the main index.php file.

Thus, anyone who gets backend access to your site can hack your template with ease.

In addition to having unique usernames and strong passwords, you can limit the impact of these types of intrusions by limiting which user groups are allowed to edit templates.

For example, we recommend that users in the Manager usergroup not be able to edit the template.

To configure this in the Joomla backend, select Templates from the Extensions menu.

In the Options at the top-right, locate the Permissions tab and disable the following items for Managers and other groups with backend access who do not need to edit the template:

• Edit
  
• Edit State
  
• Configure ACL & Options
  
• Configure Options Only

Review users regularly for Super User access

Between your website developers, temporary contractors, and the staff/clients who regularly access the backend of a Joomla site, it’s easy to collect unnecessary Super Users.

Regularly monitor the Super Users and Administrators in the backend User Manager to ensure that every user is needed.

Is you are unsure of someone’s status, check the Last Visit Date in the User Manager to see when the user last logged in.

Keep template up to date

Like most popular content management systems, there are thousands of templates available for Joomla. And it’s very likely that most Joomla websites use one one of these templates either directly or as a modified version.

However, the vast majority of Joomla templates do not use the Joomla update system to help alert you when template updates are released.

Thus, we recommend that template users subscribe to any notification system provided by the template vendor.

An alternative and more comprehensive solution is to monitor the relevant changelog page on the vendor’s website for each of the templates installed on your Joomla website(s).

For example, the changelog page for the Callisto template from RocketTheme shows 6 updates in 6 months.

There are a number of free ways to monitor changes to a changelog webpage including plugins for Chrome and Firefox, and the online tool Versionista.

RocketTheme also maintains an RSS feed of updates for their templates if an RSS reader is still part of your daily routine.

Only use templates from trusted vendors (never from Warez sites).

Like most popular software, Joomla templates can often be found on Warez sites.

Often, these templates are modified to contain malware and other dangerous scripts.

If you are serious about security, it is critical to always download templates from the vendor’s official website.

Best Joomla Hosting Recommendation

ASPHostPortal.com provides our customers with Plesk Panel, one of the most popular and stable control panels for Windows hosting, as free. You could also see the latest .NET framework, a crazy amount of functionality as well as Large disk space, bandwidth, MSSQL databases and more. All those give people the convenience to build up a powerful site in Windows server. We offers Joomla hosting starts from $5/month only. We also guarantees 30 days money back and guarantee 99.9% uptime. If you need a reliable affordable Joomla Hosting, we should be your best choice.