Joomla Cheat Sheet

This content was generated with the assistance of AI and should be verified against the official Joomla documentation before being relied on in production.

This sub-section’s Joomla bibliography lists the reference material consulted while preparing these pages.

A single-page, colour-coded summary of the Joomla sub-section. The platform block gives the five applications and their entry points, the request lifecycle with the main system events, the extension types and their name prefixes, the release cycle and support dates for Joomla 6.2, Joomla 5.4 and Joomla 7.0, the requirements and the folder tree. The install block lists the installer steps, the public folder, a Docker Compose snippet and its environment variables. Using Joomla collects the content hierarchy of articles, categories, tags and fields, the mapping from a menu item to a URL, module assignment, the ACL model (groups, access levels, actions and inheritance), workflow basics, a multilingual checklist, the core components, the safe Global Configuration values and the SEF and SEO essentials. Administration covers the update channels, the conditions for Automated Core Updates, the MFA methods, the HTTP security headers, the key configuration.php properties, the caching options, the full list of CLI commands and the troubleshooting quick fixes, including how to re-enable an extension in #__extensions.

The templates block holds the templateDetails.xml skeleton with its inheritable and parent elements, the jdoc:include types, the override paths for component views, modules and layouts, the joomla.asset.json skeleton with the Web Asset Manager calls and the child-template recipe. The extensions block holds the manifest skeleton, the folder layout, the component service provider, the MVC class map, router rules, a form XML snippet, the query builder with bind(), a module Dispatcher with its Helper, a SubscriberInterface plugin skeleton with an event class, console and task plugin one-liners, the installer script methods, the update server XML and the security one-liners for the token check, authorise() and escaping. The remaining blocks cover the Web Services API endpoint pattern, token header, a curl example and route registration through the webservices plugin, the PHPCS, PHPUnit and Cypress commands, the upgrade path from 3 to 4 to 5 to 6 with the bridge releases and backward-compatibility plugins, the removals planned for 7.0 and a strip of what changed since older tutorials: namespaced classes and _JEXEC instead of J* aliases and JPATH_PLATFORM, event classes instead of generic events, Aware traits instead of $app and $db, Cypress instead of Codeception, MFA instead of TFA, the proof-of-work captcha, TinyMCE 8, TUF, Automated Core Updates, the User Guide and Manual instead of docs.joomla.org and the end of life of Joomla 4.