Why some values are left out

An export file is plain text, so anyone with a copy can read every value in it. ConfigPort leaves out values that look secret. It marks values that only make sense on this site.

Values that look secret

ConfigPort treats a value as secret when one of these is true:

• the settings form shows it as a password field;
• its name contains a word such as password, secret, token, credential, licence, license, api key, private key, access key or download id;
• its name is key or pw on its own.

ConfigPort leaves these values out. The file lists the path of each one in omitted_paths, so an import knows the value was left out on purpose and keeps the value the target site has. The check page lists each value with the reason.

To keep one value, tick Include next to it. To keep all of them, tick Include every value that looks secret. The file then says that it holds sensitive values, and so does each item that holds one. Keep such a file private and delete it after the import.

A name can match by accident. A text field named password_hint holds no password, but ConfigPort leaves it out too. A switch or a list is not left out for its name when the settings form can be read. Tick Include when you need such a value.

When the value sits inside a list, ConfigPort leaves out the whole list.

The check works on field types and names, so it can miss a secret. An extension that keeps a key in a plain text field with a neutral name, such as code, is exported with the key. Before you share a file, think about which of your extensions hold keys or passwords. If one of them is not marked, go Back to the selection and remove its tick, or open the file and check it.

When the settings form cannot be read

ConfigPort reads the settings form of each item to find password fields. When the form file is missing or cannot be read, ConfigPort finds secrets by their names only. The check page then shows a warning on that item, and the export lists the item in its notes. Check such an item before you share the file. An item with no settings gets no warning.

Values for this site only

Some values point at things that exist on this site only:

• menu items, categories, user groups, access levels, tags, users, images and other items picked from this site;
• web addresses and email addresses;
• file and folder paths;
• debug settings.

ConfigPort keeps these values and marks them on the check page with the reason. Tick Leave out to remove one from the file. After an import, check these values on the other site.

Permissions

ConfigPort never exports permissions. Joomla keeps them apart from the settings. Some settings still affect who can do what, for example the group that new users join. The settings that only a Super User may change in Joomla can only be imported by a Super User. See Permissions.