Recent posts

#11

Bugs! / Re: Misleading hyperlinks of n...

Last post by Tom68 - 21.06.2026 07:02:18

When a user is not logged-in then jD is offering the chance to login at that stage without having to exit from jD. If the user could not login anyway there is no difference but if a Registered user had forgotten to log in then this avoids having to exit jD, goto the login and then return to the downloading sequence.

Well, as a result now the traffic at my website has strongly increased, because all search engines and AI robots are interested in these new links causing many 302 redirects in the log file. And guess, whose job it is to check these log files on a regular basis? 

Regards
Tom

#12

General / Re:cron and special char

Last post by ColinM - 19.06.2026 16:18:57

Hi
As far as I understand ImumnifyAV is a light weight antivirus program designed for Linux web servers. I not sure of its characteristics in Joomla and jDownloads.  When I checked on the web it seems to be prone to give false positives on Joomla extensions.
I would suggest you consult your Web Supplier about a suitable antivirus.
Best wishes
ColinM

#13

General / ImunifyAV Security Events Dige...

Last post by whu - 19.06.2026 13:20:37

Hello jDownloads Development Team,

During a security review on a Joomla installation running the latest jDownloads version (4.1.5), the file

administrator/components/com_jdownloads/assets/upload/upload-handler.php

was flagged as malicious by ImunifyAV.

Detection details:

Scanner: ImunifyAV
Detection Type: SMW-INJ-CLOUDAV-php.backdoor.upload-PHPTRP2-4
Scan Type: On-Demand Scan
Detection Date: 2026-06-19
File: administrator/components/com_jdownloads/assets/upload/upload-handler.php

The file appears to be a standalone upload handler which processes uploaded files using $_FILES and move_uploaded_file(). While the code does not contain obfuscation, shell execution, eval(), base64 decoding, or other typical malware indicators, it is consistently detected by ImunifyAV as a potential upload backdoor.

Can you please confirm whether this file is an official part of jDownloads 4.1.5 and whether its functionality is intended?

It may also be helpful to review whether

#14

Bugs! / Re: Misleading hyperlinks of n...

Last post by Tom68 - 18.06.2026 19:20:49

Hi Colin,

Thanks for your quick reply.
So, you say the new behavior was intentionally implemented. In other words "it's a feature, not a bug"?

Regards
Tom

#15

Bugs! / Re: Misleading hyperlinks of n...

Last post by ColinM - 18.06.2026 10:59:01

Clearly there is no problem with a logged in user.
When a user is not logged-in then jD is offering the chance to login at that stage without having to exit from jD. If the user could not login anyway there is no difference but if a Registered user had forgotten to log in then this avoids having to exit jD, goto the login and then return to the downloading sequence.
Best wishes
ColinN

[jDownloads Configuration]

#16

Bugs! / Misleading hyperlinks of non d...

Last post by Tom68 - 17.06.2026 17:57:23

Dear All,

I have recently updgraded my Joomla website from jD 4.0.52 to jD 4.1.5. After this update I noticed the following undesirable behavior:

jDownloads Configuration

jDownloads > Contro Panel > Options > Permissions
    - Public = inherited
    - Registered = inherited

jDownloads > Contro Panel > Options > Content Plugin
    Default Layout = Files link only 3.9

jDownload example

• I have 3 downloadable files with access = public
• ... referenced by a subcategory with access = public
• ... and a main category with access = registered
• An article with access = public points to these downloadable files per {jd_file file==123}

Behavior under jD 4.0.52

Public users see a page with the name of the downloadable files written, but without any hyperlink associated with these files. When they click on the file name nothing happens.

Registered users see a page with the name of the downloadable files written, with hyperlinks associated with these files. When they click on these hyperlinks the corresponding file is opened.

Behavior under jD 4.1.5

Public users see a page with the name of the downloadable files written, WITH hyperlinks associated with these files. When they click on these hyperlinks an new page opens telling them that they lack the permission to access the selected file. On the same page a form to log in is displayed. My feeling is, that this is a page managed by Joomla rather than jDownloads.

Registered users see a page with the name of the downloadable files written, with hyperlinks associated with these files. When they click on these hyperlinks the corresponding file is opened.

Problem

The behavior under jD 4.1.5 is undesirable because public users are mislead to believe they could download a file (because of the link associated with that file) and learn only after clicking, that they are not authorized to do so.

So, could you please restore the behavior of jD 4.0.52?

Regards
Tom

#17

General / Re: Best way to structure larg...

Last post by ColinM - 17.06.2026 15:21:15

Probably best to use jD categories and sub-categories.  TAGs are better for a small set.  Actually you can use both. Use Categories and sub-cats for the main structure and add specific tags
There is an article in the documentation entitled Tags support in jDownloads which may help.
https://www.jdownloads.net/documentation?view=article&id=285:tags-support-in-jdownloads2&catid=27

Broadly speaking jDownloads is based on using Categories and Sub-Categories. Basically Categories and sub-cats are implemented  for fast access.

The actual Download type makes no difference but of course larger items take longer to download, but these days this is hardly noticeable except for very large downloads that are several megabytes in size.

Enabling many many subcategories make almost no difference.  If you had a sub-catoregory with several hundred Downloads that might be noticeable, so in such a circumstance use more sub-categories.
Best wishes
ColinM

#18

General / Best way to structure large do...

Last post by kaileyketchum - 16.06.2026 19:50:13

I'm currently building a Joomla-based site using JDownloads to manage a large collection of categorized files and resources. The structure includes multiple content types such as tutorials, media assets, and community submissions.

One of the sections is intended to organize content similar to geo dash windows, where users expect fast navigation, clear categorization, and minimal clicks to reach files.

Right now, I'm trying to decide the best architecture for scaling the download system without making it confusing for users.

My current setup idea:

Main categories for broad topics
Subcategories for specific content types
Tag-based filtering for quick search
Restricted access levels for certain files

However, I'm unsure if this structure is optimal for performance and usability in JDownloads.

I have a few questions for experienced users:

Is it better to rely more on categories or tags when scaling beyond 1,000+ downloads?
Does enabling too many subcategories affect performance or just usability?
What is the best practice for handling mixed media types (documents, archives, images) in one system?
Are there any recommended templates or layout tweaks to improve user navigation?

Any advice from people who have handled large JDownloads implementations would be appreciated.

#19

General / Re: scan area download v2

Last post by Arno - 16.06.2026 15:55:03

Unfortunately, I can't reproduce this error. Everything works fine in my tests. 

[We are currently unable to reproduce the error either locally or on a server installation.]

#20

General / Re: scan interface loading (an...

Last post by Arno - 16.06.2026 14:46:08

Thank you for your feedback and the detailed tests.

We are currently unable to reproduce the error either locally or on a server installation. To enable us to reproduce the issue accurately, we would need detailed diagnostic data from an affected installation:

1. Joomla configuration
- Debug System: On
- Error Reporting: Maximum
- Then restart the scan and note down the exact sequence of events

2. PHP error logs
- Relevant entries from the PHP error logs at the time the scan started
- Ideally including date/time and the full error message

3. Browser diagnostics (important)
- Open the browser DevTools and start the scan
- Post console output (errors/warnings)
- Network tab: Check requests to the scan worker and provide the following for Start, Process and Status respectively:
  - HTTP status code
  - Response header Content-Type
  - Start of the response body (JSON or HTML/error page)
- Optional: Include HAR export
Also screenshots could here be useful.

4. Steps to reproduce
- Step-by-step instructions on how to trigger the error
- Does it occur consistently or only sporadically?
- Only in one browser or in several?
- Does it occur equally during test runs and production runs?

With this information, we can narrow down the issue much more quickly and provide a reliable fix if it turns out to be an environment-dependent bug.