Jonathan Miller 2f490c3208
Generic: Repo Health / Site Health (push) Has been skipped
Generic: Repo Health / Access control (push) Successful in 2s
Universal: PR Check / Branch Policy (pull_request) Successful in 1s
Generic: Repo Health / Site Health (pull_request) Has been skipped
Generic: Repo Health / Access control (pull_request) Successful in 1s
Joomla: Extension CI / Lint & Validate (pull_request) Failing after 4s
Joomla: Extension CI / Release Readiness Check (pull_request) Failing after 5s
Universal: Secret Scanning / Gitleaks Secret Scan (pull_request) Successful in 5s
Universal: PR Check / Validate PR (pull_request) Failing after 7s
Universal: Auto Version Bump / Version Bump (push) Successful in 12s
Universal: Pre-Release / Build Pre-Release (${{ inputs.stability || github.ref_name }}) (push) Successful in 8s
Generic: Repo Health / Scripts governance (push) Has been cancelled
Generic: Repo Health / Repository health (push) Has been cancelled
Generic: Repo Health / Report Issues (push) Has been cancelled
Joomla: Extension CI / Tests (PHP 8.2) (pull_request) Has been cancelled
Joomla: Extension CI / Tests (PHP 8.3) (pull_request) Has been cancelled
Joomla: Extension CI / PHPStan Analysis (pull_request) Has been cancelled
Universal: PR Check / Build RC Package (pull_request) Has been cancelled
Universal: PR Check / Report Issues (pull_request) Has been cancelled
Generic: Repo Health / Scripts governance (pull_request) Has been cancelled
Generic: Repo Health / Repository health (pull_request) Has been cancelled
Generic: Repo Health / Report Issues (pull_request) Has been cancelled
feat: sanitize configuration.php in backups
Strip sensitive credentials from configuration.php before adding it
to the backup archive. Replaced fields use [SANITIZED:field] placeholders:
- Database: host, user, password, db
- Security: secret
- SMTP: smtpuser, smtppass, smtphost
- Proxy: proxy_user, proxy_pass
- Redis: redis_server_auth, session_redis_server_auth
- DB TLS: dbsslkey, dbsslcert, dbsslca

Non-sensitive fields (sitename, debug, cache, SEF, paths, etc.)
are preserved as-is for inspection and partial restores.

MokoRestore detects sanitized placeholders and leaves those form
fields blank so the user must enter fresh credentials (like the
Joomla installer). In-Joomla restore is unaffected because
RestoreEngine preserves the current site's configuration.php.

Applied to both BackupEngine (synchronous) and SteppedBackupEngine
(AJAX-based) code paths.
2026-06-14 14:42:54 -05:00

MokoSuiteBackup

Full-site backup and restore for Joomla — database, files, and configuration.

Overview

MokoSuiteBackup is a comprehensive backup solution for Joomla 4/5/6 sites. It creates complete site backups including the database, files, and configuration, packaged into downloadable ZIP archives. Supports multiple backup profiles, scheduled backups via CLI/cron, and a REST API for remote management.

Features

  • Full site backup (database + files + configuration)
  • Database-only backup mode
  • Files-only backup mode
  • Multiple backup profiles with independent configurations
  • File and directory exclusion filters
  • Table exclusion filters for database backups
  • Step-based backup engine (avoids PHP timeout on large sites)
  • CLI script for cron/scheduled backups
  • REST API (Joomla Web Services) for remote management
  • Backup record management (list, download, delete)
  • Automatic old backup cleanup (configurable retention)
  • Admin dashboard with backup history and storage usage

Installation

  1. Download pkg_mokobackup-*.zip from Releases
  2. Joomla Administrator > Extensions > Install
  3. System plugin enabled automatically on install

Configuration

  • Component: Administrator > Components > MokoSuiteBackup
  • Profiles: Create backup profiles with different file/database filters
  • System Plugin: Configure scheduled backup triggers and notifications
  • CLI: php cli/mokobackup.php --profile=1 for cron-based backups

REST API

The webservices plugin exposes endpoints compatible with the MokoBackup MCP server:

  • POST /api/index.php/v1/mokobackup/backup — Start a backup
  • GET /api/index.php/v1/mokobackup/backups — List backup records
  • GET /api/index.php/v1/mokobackup/backup/:id/download — Download archive
  • DELETE /api/index.php/v1/mokobackup/backup/:id — Delete backup record
  • GET /api/index.php/v1/mokobackup/profiles — List backup profiles

License

GPL-3.0-or-later

Author

Moko Consultinghello@mokoconsulting.tech

S
Description
Full-site backup and restore for Joomla - database, files, and configuration
https://mokoconsulting.tech/support/products/mokosuitebackup Readme
1.5 MiB
2026-06-20 23:31:23 +00:00
Languages
PHP 95.9%
Shell 2%
Makefile 1.6%
HTML 0.5%