See the Joomla Security Blog to review details of the flaw. Basically, someone get the password for the first user in the list. If that use is still the admin user or if they can guess the username of that first user, you are hacked.

Choose Site -> Media Manager

At the bottom of the Media Manager shown below click Browse (click image to view larger). Once you have selected the document you wish to upload choose Start Upload.

When the file finishes loading, choose Content -> Article Manager from your admin menu.

Either choose an existing article now or create a new article. Type the article and include the name you want displayed for your document. Now highlight the name you type and click the Insert/Edit Link icon as shown below.

This will pop open a window where you can adjust all the settings for how this link will work. The only mandatory field is the Link URL field. Enter the relative path to the document you uploaded. Typically /images/myfilename.extension. Click Insert to return to your article.

Make sure you save your article and you are done.

Please le me know of other topics or questions you need answered and I’ll get to them as I have time.

Most hosting companies do not do backups for you. They backup the server installation, but leave you on your own for your blog. The better hosting companies will do periodic backups of your websites. If anyone know hosting companies that do or don’t provide backups please add them in the comments. I am talking about the basic hosting services that many bloggers and simple websites use. Siteground does weekly backups, while Hostmonster, Dreamhost, and Cyberwurx do not.

To do a backup, you usually have 2 options with most hosting company control panels. These 2 methods are as follows:

1. Full backup of your entire site
   • Includes your website, database and home directory files
   • Options:
     1. Save this to your local computer
     2. Backup locally on the hosting server and then download when complete
2. Separate backups for your database and your website
   • Run this after you add plugins, themes, images, podcasts, videos or other files on your website
   • Backup your database on a more regular basis

My recommendations for backups would be to do a full backup after you have your website completely setup and then again once a quarter. I would then recommend doing a website only backup monthly unless you make many changes to your website on a regular basis. This does not count frequent posting updates. I would then do the website backup at least weekly or whenever a large number of changes are made. Lastly, I would recommend backup up the database at least weekly. If you post multiple times a day you may want to make backups daily or find a service that does it for you.

To make these backups faster, more reliable, and quickly accessible, allow the backups to run locally on the hosting server. When it is complete, download them to you local computer.

• WordPress – blogging software utilized by Blogivists
• Joomla – CMS system that contains blogs, forums, polls and other features
• Mediawiki – Software used by Wikipedia
• Web server setup/management
• Internet Identity