CMSJabber.com – All CMS’s, All the time

Straight Talk about Mambo, Elxis, Aliro and other Open Source CMS’s.

Archive for September, 2007

What’s that you say?

Posted by vscribe on September 19, 2007

Steve over at alledia.com, was kind enough to offer this book review.

It is greatly appreciated.   If you haven’t stopped by Steve’s site, take a few minutes and give it a visit – you will be glad you did!

Here is his review:

Dodging the Bullets by Tom Canavan

Sometimes an author really should put their biography on the front of a book.

Before Tom Canavan sent me his new book: “Dodging the Bullets – A Disaster Preparation Guide for Joomla! Web Sites“, I didn’t realise just how impressive his background was in this area. A quick scan of Tom’s personal history reveals in addition to working for many multi-million dollar companies, he’s worked for a Fortune 100 company helping to design and build out their disaster recovery solution and spent two years making sure the plan was as good as possible.

His book aims to teach Joomla users how to plan and recover from almost any conceivable disaster that can hit a website.

Chapter 1 – Waiting for Mr Murphy

In the first chapter Tom introduces the book and takes you through basic risk assessment. He helps answer the key question about your site:

  • Do you need a disaster preparation plan?
  • What are you trying to protect?
  • How much time and money should you put into developing a plan?

Chapter 2 – Getting Your Site Fortified

This chapter is a really useful introduction to key security ideas that webmasters need to understand. On a technical level, he takes us through file permission and .htaccess. On an admin level, he talks about how to keep your components updated and where to find Joomla security information.

Chapter 3 – Backup and Restoration

Tom gives an overview of two ways to backup your site: PhpMyAdmin and the Ebackup Component. He then turns his attention to restoring the site from backups and takes you through two options: using 3rd party hosting and doing it yourself. The steps for each process are clearly outlined with accompanying images.

Chapter 4 – Site Readiness

Tom takes us through a series of forms that outline a daily, weekly and monthly maintenance forms. The layout is easy to follow with an explanation on the left with the accompanying form on the right.

Chapter 5 – Incident Reporting

One regular problems that many website managers face is that users or clients will simply contact you saying “X doesn’t work”. In this chapter he explains how to train customers and staff to submit bugs in an accurate, usable way, complete with sample forms.

Chapter 6 – Plan of Action

Many websites are run by a small group of people and its easy for much important information to be in peoples’ heads rather than on paper. Tom outlines how to prepare a comprehensive plan so that anyone on staff has all the information on hand to recover from a disaster.

Chapter 7 – Conducting a Mock Drill

What use is a plan sitting in a binder if no-one has any experience of using it? This chapter is a logical extension of the previous one, explaining how to successfully carry out a mock disaster drill and how to analyze for flaws.

Chapter 8 – Communications Plan

Every site goes down sometimes. Its just that bigger sites make much more noise when they do. How they handle the bad press that follows an outage can have a big effect on the site’s reputation. If your site is visible enough for many people to notice the outage, Chapter 8 outlines how to handle the media and have a press campaign ready in advance.

Chapter 9 – Tying Your Plan Together

In the final chapter, Tom outlines in detail how a company can tie all these issues together into a comprehensive plan. He provides sample and photocopiable forms that can be used to create a set of binders for your company to rely on.

Conclusion

Overall, I was very impressed by Tom’s book. If you use Joomla to run your personal blog, you might not need it, although the early chapters help explain a great deal about basic site security. However, if a site outage will hit your income or if you’re using Joomla in a corporate / enterprise environment the professional strategies outlined here may well save you a great deal of heartache.

Posted in Daily Jabber | Leave a Comment »

High praise for “Dodging the bullets, a disaster preparation guide for Joomla! sites”

Posted by vscribe on September 9, 2007

Hi all since I’m known to use the “shameless plug” segment on our podcast, I felt that this was worthy of publication.

The author of this review is Mr. Jon Toigo, one of the TOP Disaster Recovery people in the world. This is from his blog located at drukendata.com

Disaster Recovery for Joomla

dodging-bullets-ad.jpg Just read a book last night written by a fellow who goes by the handle “JoomlaJabber” in the world of open source content management systems. His real name is Tom Canavan and his book on disaster recovery planning and security for websites based on Joomla is outstanding. All of my sites (except this one) use Joomla and I continue to be impressed by this code base.Like me, Canavan has had his share of problems with script kiddies and others who hack exploits in Joomla on an ongoing basis. Making the base code fault tolerant and hacker proof is a major undertaking, but Canavan does a good job of setting out the basics of Joomla site protection and recovery.

I heartily recommend this book as a companion to your Joomla installation. Make your sys admin (assuming it isn’t you) read it from cover to cover.

———–Further, he had this to say in his next blog posting:

Further Thoughts on DR

It feels nice to have something nice to say every now and then. I can’t praise Canavan’s book, Avoiding the Bullets (see previous post) enough – for two reasons. One, because he hits home in my experience with open source CMS, Joomla; the other, he is doing what every sys admin and developer ought to do: when you build a web site, or a piece of application code, or a system, network or storage platform, you should always think about the dark side — what could happen and what you can build into what you are developing to prevent disasters or to expedite recovery from them.

Too often DR provisions are bolted on after the platform has been built. This is a painful and expensive and often inefficacious approach. It is better to build DR in than to bolt DR on.

One minor error in Canavan’s book is worth noting, not because it reflects anything wrong with his thinking, but because it perpetuates a misinterpretation that has been floating around for years. The error is with the attribution of meaning to the Chinese term for disaster (actually for crisis).

The incorrect interpretation, which I used to reference all the time until my error was pointed out to me, is that the two pictograms/ideograms that create the word “disaster” in Chinese mean, literally, ”DANGER + OPPORTUNITY.” This is wrong.

weiji.jpg

The two symbols mean DANGER + A POINT IN TIME. Here is a good explanation from an expert on the language.

I find the correct interpretation much more compelling than the DANGER + OPPORTUNITY interpretation, since it is how we react to a crisis that determines whether it is a momentary inconvenience or a full blown Disaster with a capital “D.”

Don’t worry, Tom. I made the same mistake in the intro to my first book on DR and the misinterpretation seems to have a long cultural history.

————————————————————————————–

I appreciate the praise and compliments for the book.

If you would like to purchase the book visit this link at Amazon.

Links of interest:

Our Podcast
Book Companion Site
JoomlaJabber
Ez Auto – Ez Realty
Great site for templates

Need original artwork or logo creation?

Posted in joomla | Leave a Comment »