Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Using at least Joomla 2.5 and 3.1. Under the template manager options the setting "Preview Module Positions" must be set to "enabled" for previews to work. My question is, why isn't this feature always on? Is it a security risk to have it enabled on a live site? Does it slow the site down? Since the template manager is an administrator component, I wouldn't think it would be a problem, but I can't see any other reason to offer this option. Thanks!

share|improve this question

2 Answers 2

up vote 0 down vote accepted

The reason is to avoid 'information disclosure'. If that feature is enabled, it is pretty easy to identify the site being a Joomla! site. It does not have any other negative impact on your site.

share|improve this answer
    
Can you tell what actually is disclosed? Or share a link to such docs? –  Marcel Oct 14 '13 at 20:14
    
It reveals that you're running Joomla!. It reveals the logical structure of your template. Both information can be used as (part of) an attack vector. –  nibra Oct 16 '13 at 14:35

There is no need to enable this module after you have launched your site.

This option is used while we are developing the site,

Its helps the developers to identify which position the module takes.

something like debug mode enable options, some templates will give some border around the module position too.

so my concern is after launch the site there is no need to enable that settings..

Hope it make sense..

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.