Security Model

Edition: Free (also in Pro)

Permissions

The component uses Joomla's permission system. With the Options button on the Headers & Footers list (the Permissions tab) you can allow groups to manage, create, edit, change the state of and delete items. Settings and the license need the Configure ACL & Options permission. Designing also needs SP Page Builder's own permission to create and edit pages. Every change is protected by Joomla's form token.

What it does not touch

• It never edits or overrides Helix Ultimate or SP Page Builder files.
• It never changes your template style or template settings.
• Its Setup Wizard writes only its own module rows, and can roll them back.

What it stores

Your header and footer items, in the extension's own database table, and their designs, in SP Page Builder pages. Uninstalling the extension keeps the table, so reinstalling restores your items.

On the front end

• Items respect Joomla access levels and languages, so a header limited to Registered users is never shown to guests.
• The extension loads no scripts or styles from other sites. Everything ships in the package.
• Pro addon settings are checked before they are used in styles and links: colours and lengths are validated and links must be web, mailto, tel or site-relative addresses.
• Design pages ask search engines not to index them.

License keys

The key is entered in a password field. It is sent only to the Lyzerslab license server over HTTPS, together with this site's domain and the extension version. The Free edition contains no license code and makes no such request.