CMS Security Discussion - Drupal, Joomla, WordPress

Which is the most secured CMS - Drupal, Joomla, WordPress?

https://www.getastra.com/blog/cms/security-comparison-of-cms-wordpress-vs-drupal-vs-joomla/
Very good write-up. Drupal came in first followed by Joomla and Wordpress.
"Drupal encountered the least number of cyber attacks since 2005"
There is a nice table of comparison featuring CVEs reported, Security Advisory, Clickjacking Protection, 2FA, etc

https://blog.templatetoaster.com/drupal-vs-joomla-comparison/
The title and categories being compared sound interesting. The paragraphs focus on different features of comparison. However the content itself seems light, with not much specific statistics.

https://blog.cpanel.com/wordpress-joomla-drupal-a-security-comparison/
There is no clear-cut answer given. However the site offers various links to see the list of security issues, and also other sites that do the comparisons.

Notes Joomla

Notes Joomla
================

HowTos
Install on Localhost
Transfer from localhost
Errors


HowTos
========
How to hide Details of Author, Category, Published, Hits for articles?
- Ensure each article set to global
- Go to Component - Articles, then select Show/Hide for each of Author, Category, Published, Hits

How to display template?
After selecting templates, go to Extension -> Discover

How to create a banner
- From Components - Banner
-- create a New client
-- create a New category
-- create a New banner, choose the created client and category
- From Extensions - Modules
-- create Banner (Module Type), and assign the previously created banner.



Install on Localhost
========================
https://sourceforge.net/projects/xampp/
Download XAMPP first (Windows/Linux) - which has got all necessary server components for Joomla.
Eg Apache, MySQL, PhP, etc

On Windows, DO NOT install from *.exe, instead use the 7z version of installer and unpack to c:\xampp

On Windows7, it may complain about:
"The program can't start because api-ms-win-crt-runtime-l1-1-0.dll is missing from your computer. Try reinstalling the program to fix this problem"
Solution:
Download from 'official' Microsoft site only, the update for Universal C Runtime:
https://support.microsoft.com/en-us/help/2999226/update-for-universal-c-runtime-in-windows
Choose: "All supported x64-based versions of Windows 7" or similar.

You may also need to install the " Microsoft Visual C++ Redistributable for Visual Studio 2017" from:
https://support.microsoft.com/en-au/help/2977003/the-latest-supported-visual-c-downloads

To run XAMPP (on Win7):
- go to c:\xampp
- run: xampp-control.exe
- start these: Apache, MySQL
- Check Apache by using a browser and go to: http://localhost
- Check MySQL by  using a browser and go to: http://localhost/phpmyadmin

Now ready to install Joomla
- Download the package, eg Joomla_3.9.1-Stable-Full_Package.zip
- Configure Joomla for FIRST TIME, by going to: http://localhost
-- Page1, enter Site: eg blah.com   email: pck..@gmail  user:pck...   pass: usual web
-- Page2 DB questions:  local MySQLi: user/pwd:root/blank  DBname: joomla391  Prefix: jstg3_
- Installed webpages are:
Joomla: http://localhost
Joomla admin page: http://localthost/administrator



Transfer from localhost
========================
Three step process.

1. Zip and transfer the Joomla public directory
- use 7zip to zip up public_html directory or similar.
- upload zip file to destination Joomla folder.
- while in CPanel or similar, click Extract on the zip file.
- put the contents in public_html in destination

2. Export the MySQL DB from localhost, and then import while on the destination's DB.
- login to phpAdmin and connect to source Joomla's DB
- Export the DB (use custom option)
- login to phpMyAdmin and connect to destination Joomla's DB
- manually create the same DB, eg joomla391, with same name as original DB.
- Import the DB file.

3. Modify the config.php file
$dbtype
$host
$user
$password
$db
$dbprefix
$log_path - eg 'public_html/blah/joomla/logs'
$tmp_path - eg 'public_html/blah/joomla/tmp'




Errors

=======

Message: "Error on page" at the bottom left corner of browser

Cause: ...

Solution: Check the entry in public_html\configuration.php for the value of $mosConfig_sitename. If the value is "mydomain.org" instead of "www.mydomain.org", then need to go into administrator as http://mydomain.org/administrator, i.e. without "www"