Joomla 6.2.0. The Quickstart now installs Joomla 6.2.0 (Joomla 6.2.0 release notes), and the template version is now 6.2.0 to match.

Error pages. "Page not found" and "access denied" pages now show inside the template, with its header, menus and footer, and fit a phone screen.

Quickstart. A fresh install no longer lists stale update notices.

Quickstart fix. The Quickstart no longer fails to install on MySQL hosts with a "prepared statement protocol" error. Thanks to Iryna for reporting this. The template itself is unchanged apart from its version number.

Joomla 6.1.4. The Quickstart now installs Joomla 6.1.4, a security and bug-fix release (Joomla 6.1.4 release notes), and the template version is now 6.1.4 to match. There are no visual changes. Installing the template update does not update Joomla itself; update Joomla from System → Update → Joomla.

Fix. After the previous security update, print and email views, popup windows and the VirtueMart checkout step (pages served with tmpl=component) could return an error page. The template's component.php now defines the escaping helper it uses. There are no visual changes. Please update if you installed the previous version.

Security update. Module, menu and tab titles are now escaped wherever the template writes them into your pages (module headings, title attributes and the mega menu), so a title containing a quote or markup can no longer break out of its place in the page. There are no visual changes. Recommended for all sites.

Security update. The site name and slogan are now escaped where the template writes them into image alt text, so a quote character in either can no longer break out of the attribute. No visual changes. Recommended for all sites.

Delta 6.1.3.1 is a security hardening release. If you installed Delta 6.1.3 earlier today, please update: it replaces every template file that changed, and nothing about how your site looks or is configured changes.

Security

• Style settings can no longer inject code into the page. Many of Delta's options (colours, sizes, positions, background images and fonts) are written into the page's stylesheet. Several of them were escaped for HTML, which does not protect a stylesheet, and some were written with no checking at all, so a malformed value could close the style rule and add styles, or load remote content, of its own. Every one of these values is now checked for its own type before it reaches the page: colours must be real colours, sizes and positions must be numbers or measurements, background images must be plain addresses, and font names and the "tags affected" list may only contain the characters those can legitimately use. A value that does not fit is replaced with a safe default.
• The testimonials carousel accepts numbers only. Its speed, item-count and refresh settings are now forced to whole numbers before they are written into the page's script.
• Module and article layout settings are escaped. Module class suffixes, menu image and ID attributes, pop-up window options, background images in the custom HTML and module layouts, the blog and featured layout classes, and the list filter label are now escaped before they are written into the page. The login module's pre-text and post-text still accept formatting, but now pass through Joomla's own input filter, which removes scripts, embedded frames and event handlers.
• The print view only loads a real colour preset. The preset name used by the print and pop-up layout is now limited to the characters a preset file name can contain.
• An unused override was removed. The template still carried a layout override for the K2 content module. K2 does not run on Joomla 6 and is not part of this template, so the override has been removed rather than left in place.

How this was checked: a scan of every place the template writes one of its settings into the page found 77 unprotected or wrongly protected values in 6.1.3 and none in 6.1.3.1. The only value left unfiltered by design is the "Custom code" field, which exists to let an administrator add their own HTML to the page head. The demo was then compared against 6.1.3 at desktop, tablet and phone widths with no visible change.

Delta 6.1.3 is the first release of this template under Cybersalt, and it is a large one. Every earlier entry on this page was a one-line compatibility note, so none of the work below has been described to you before. Delta had been carried forward on its original code base for years; this release brings the whole template up to current standards in one step: the old Bootstrap 2 framework replaced, the removed Joomla 3 code rewritten, Internet Explorer leftovers stripped out, the slideshow rebuilt, the icon set and social links modernised, the mobile experience rebuilt from the ground up, and the administrator Options screen cleaned up. Everything below was checked by driving the real pages in a browser at desktop, tablet and phone widths, not just by reading the files.

Built for Joomla 6. Version 6.1.3 is a native Joomla 6 template, built and verified on Joomla 6.1.3. It does not depend on Joomla's Behaviour - Backward Compatibility plugin and runs with it switched off.

Joomla 6 compatibility

• Missing pages return a proper 404 again. Any request for a page that did not exist was answered with a server error (500) instead of a "page not found", both to your visitors and to Google, and the real reason was never shown. Two things caused it: the template's error page still used Joomla 3 code that Joomla 6 no longer has, and the demo database carried a Joomla 3-era definition of the redirect table that failed every time Joomla tried to log a missing page. Both have been fixed, and a deliberate request for a missing page now returns a correct, styled 404.
• No Joomla 3 code left anywhere in the template. The main layout, the print and component-only layout, the error page and all of the template's Joomla output overrides were swept for the old Joomla 3 shortcuts (the older ways of reading the application, the document, text strings, URLs, modules and so on). The final scan finds zero of them, which is why Delta runs with Joomla 6's backward-compatibility layer switched off.
• Search uses Joomla's Smart Search. Joomla 6 no longer includes the old Search component. The header search and the demo's search menu item now use Smart Search, Joomla's current search engine, so searching keeps working after the upgrade.
• The main layout file is protected against direct access. It was missing the standard one-line guard that stops the file being run on its own outside Joomla. The guard has been added.
• PHP 8 safety. The login and breadcrumbs layouts no longer assume variables exist before using them, which is what produces warnings (and, on some hosting set-ups, blank modules) on PHP 8.
• Checked on a current Joomla. The demo runs on Joomla 6.1.3, and the template's installation manifest now declares Joomla 6.1 as its target platform.

Bootstrap 5 migration and page layout

• Moved from Bootstrap 2 to Bootstrap 5. Delta was built on Bootstrap 2, which Joomla stopped shipping several major versions ago. The template now loads Bootstrap 5 together with a compatibility layer that keeps Delta's original grid class names working, so your module positions, content and any custom HTML you have written keep their layout instead of collapsing into a single column. Both stylesheets were confirmed loading in the browser, not just present on disk.
• The layout's own grid was converted too. 45 places where the layout built its column classes in the old Bootstrap 2 style were converted to the modern equivalents, and the inner pages with a sidebar were checked against the original design at desktop, tablet and phone widths.
• The page keeps Delta's original proportions. Bootstrap 5 changes a long list of defaults that Bootstrap 2 layouts quietly relied on: page width, column gutters, clearing of floated content and how padding is counted inside a box. The compatibility layer restores each of these, so the content column, sidebars, header and full-width bands sit where the original design put them.
• The print and error views were modernised as well. The component-only layout (used for printing and pop-ups) and the error page had never been brought forward. Both now load Bootstrap 5 and the compatibility layer, and dead links to stylesheets that no longer exist, which produced several failed requests on every visit to those pages, have been removed.
• Internet Explorer leftovers removed. The conditional comments and helper scripts that existed purely to prop up Internet Explorer 6 to 9 have been taken out, along with the Internet Explorer-only stylesheets. Less to download, and nothing left behind to conflict with modern browsers.
• Style changes reach your visitors straight away. The template's stylesheets now carry a version stamp taken from the file itself, so after you update, browsers and caching services fetch the new copy instead of carrying on with a stale one.

JavaScript and jQuery

• About 700 KB of old scripts removed. The menu, select-box, background and touch plug-ins Delta shipped with (superfish, supersubs, selectnav, dropkick, backstretch and jQuery Mobile), the old Camera slideshow script, the Bootstrap 2 script and the long-removed jQuery browser-detection call have all been taken out, along with their call sites. These had been broken or silently failing since jQuery 3 dropped the features they relied on, and several threw errors on every page load.
• No more second copy of jQuery. The print view loaded its own bundled jQuery 1.8.1 alongside the jQuery that Joomla already provides. It now uses Joomla's own jQuery 3.7.
• Older jQuery add-ons keep working. A small compatibility script restores a handful of jQuery shortcuts that jQuery 3 removed. None of Delta's own remaining scripts need it any more, but it means an older third-party jQuery add-on you place on your site will not fail on the jQuery version Joomla 6 ships.
• Zero JavaScript errors on the front end. The browser console is clean on the home page at both desktop and phone width.
• Google Fonts load directly. Fonts were being fetched by a JavaScript loader that ran after the page had started drawing, which caused a flash of the wrong typeface. They are now requested straight from the page head.

Slideshow and testimonials

• The slideshow has been rebuilt on Swiper. The old Camera slideshow script, which depended on jQuery plug-ins that no longer work, has been replaced with Swiper, a modern and actively maintained slideshow library. Your existing slideshow settings (timing, transition speed, pause on hover, pagination, arrows and pause on click) carry straight across, so there is nothing to reconfigure.
• The slideshow fills its band at every width. The new slideshow now fills the full height of the slideshow area on desktop, tablet and phone, instead of sitting in a shorter box inside it.
• Slide captions look as designed again. The captions use Delta's original caption styling once more, so the headline, the lighter sub-line, the text and the buttons have the intended sizes, weights and colours, and they scale with the screen rather than staying frozen at their desktop sizes.
• Slideshow arrows behave on every device. On phones the previous and next arrows are always shown, because a touch screen has no hover to reveal them. On desktop they follow your setting, so if you have turned them off they stay off.
• The testimonials carousel no longer spins. With autoplay set to 0 the carousel was treating it as "advance every 0 milliseconds", so it never settled and always showed two half-visible slides. An autoplay value of 0 now means autoplay is off, as you would expect.
• Testimonial text shows its formatting instead of code. Line breaks and other simple formatting in the testimonial band were being printed as literal <br> tags. They now render as formatting. The same applies to the site name and slogan, which accept HTML safely.

Icons and social links

• Icons moved to Font Awesome 6. Delta now loads Font Awesome 6.5.2 together with the version 4 compatibility shims, so any older icon class you have used in your own content keeps working. The remaining old-style icons in the layout (account, register, search and the menu buttons) were converted by hand, and all 15 icons on the home page were confirmed rendering in the current font rather than as blank boxes.
• Social network set brought up to date. The old set has been replaced with a modern thirteen-network set: X, Facebook, Instagram, Threads, Bluesky, Mastodon, LinkedIn, YouTube, TikTok, Vimeo, Pinterest, Discord and RSS, each with its own on/off switch. The dedicated Google+, StumbleUpon, Digg and Blogger fields, all for services that have closed or faded away, have been retired, and Twitter is labelled "X (formerly Twitter)". Your five custom social icon slots are still there.
• Social links open safely in a new tab. Every outbound social link now carries the standard rel="noopener" attribute, so the page you link to cannot reach back into your site's tab.
• Joomla's own icons show up. Joomla emits its own icon names for things like pagination and the password show/hide control, and Delta's original stylesheets had no mapping for them, so those buttons could render blank or as empty squares. The First, Previous, Next and Last pagination buttons and the password reveal eye are now mapped to Font Awesome 6. The eye is drawn with a properly centred pupil and takes on the colour of the button it sits in.
• A broken icon font was retired. The template's stylesheet still pointed at an old Joomla 3 icon font that Joomla no longer ships, which produced failed downloads on every page. That font reference has been switched off.
• Old sprite images no longer paint over the new icons. Leftover rules that drew the old Bootstrap 2 icon sprite behind Joomla's icons, including the password eye, have been neutralised so each icon shows once and cleanly.

Desktop navigation

• Drop-down menus stay open while you move onto them. Delta's drop-downs start some way below the menu heading, and once the old menu script was retired they closed the instant the pointer left the heading, so the menu disappeared on the way down. A drop-down now waits 0.6 seconds before closing, which is enough to reach it at a normal hand speed, while opening stays instant and moving across to another heading still closes the previous menu straight away.
• Drop-downs are wide enough for their longest item again. They had shrunk to a fixed narrow width, so longer entries wrapped onto two lines. They are sized to their longest item again, and the "Min column width (em)" option on the Options screen works again.
• The header search box is a usable size. The search that drops down from the magnifier in the header was a narrow box with a small field. On desktop it now opens as a 340 pixel panel with a 40 pixel field, and on tablets it opens as a full-width panel directly under the header with a 44 pixel field, instead of squeezing into the width of the magnifier button.
• Header icons back at their designed size. The account, register and search controls at the top right are back at their intended size and sit on one line, as in the original design.

Mobile experience

• Mobile navigation rebuilt. A menu button, a full 44 by 44 pixel tap target, sits centred on the logo row and opens a full-width drawer. Submenus expand as an accordion, so a deep menu no longer pushes the rest of the list off the screen.
• A utility row of five controls. On phones a row of five evenly spaced 44 pixel buttons sits under the header: a section menu, your account, register, search and social links. The search button opens a full-width search field with a proper Search button, and the social button opens your social links.
• A second menu that is the same on every page. The section-menu button now always opens the same menu, with its full set of sub-levels, formatted exactly like the main drawer. Previously it showed a different menu depending on which page you were on, and on inner pages it lost its second-level items.
• Logging in on a phone works. Tapping the account button on a phone did nothing, because the login panel was trapped inside a part of the header that is hidden on small screens. The panel now opens directly under the header at full width, with its fields ready to type into.
• The password and username reminders can be reached. Beside the Log in button sat a small drop-down arrow left over from the old framework. It did nothing when clicked, so the "Forgot your password?", "Forgot your username?" and "Create an account" links hidden behind it could never be reached. The dead arrow has been removed and the three links now show underneath the Log in button, on desktop and on phones.
• The page cannot be dragged sideways. At phone width nothing overflows the screen, which is what used to let a visitor swipe the layout off centre. It also keeps the menu drawer and panels sized to the screen rather than to the overflow.
• Headings and text stay inside the screen. On phones, page headings, module titles and article text were touching or running past the left and right edges. They now sit inside a comfortable margin, and a stray "Main Menu" title that was painting above the article on inner pages has been removed.
• Article details wrap on phones. The line under an article title (written by, category, published and so on) now wraps onto further lines on a small screen instead of running off the side of the page.
• Form fields no longer make iPhones zoom. iOS Safari zooms the page in whenever you tap a field smaller than 16 pixels and does not zoom back out, which strands visitors on a page wider than their screen in the middle of logging in. Form fields on phones are now 16 pixels with a 44 pixel tap height, and fields on the contact and login pages use the full width of the screen instead of a narrow fixed box.
• Footer text is centred on phones. The footer's text blocks now line up centred on a small screen instead of mixing left- and right-aligned paragraphs.
• The passkey button's icon is the right size. Joomla 6's "Sign in with a passkey" button draws its icon without a set size, so it could render far too large. It is now sized in proportion to the button text and drawn in the button's own colour.

Appearance and accessibility

• Mobile controls use your colour preset's own colour. The mobile menu and utility buttons were falling back to a generic crimson because Delta's colour presets had never declared an accent colour. Each of the six presets now declares its own, taken from that preset's button colour, with the icon colour chosen for readable contrast. The demo's teal preset shows teal controls.
• Controls are readable in every preset. The utility buttons and the small expand buttons in the mobile drawer now always draw their icon in a contrasting colour, so a light preset cannot leave a white icon on a white button.
• Featured article view no longer clips. In a single-column featured layout, tall intro articles could be cut off at their title. The full intro now shows.

Security

• Template options are escaped or validated before they reach the page. Values typed into the template's Options screen were being written into the page markup as-is. 175 of those output points now pass through a helper, so a stray quote or angle bracket in a setting cannot break the page or be used to inject markup.
• Colour settings are validated. Colour values are checked as real hex colours, at more than 100 places where they are written into the page's styles. HTML escaping alone does not protect a stylesheet, because a value like red;}body{background:url(//somewhere) passes straight through it; a value that is not a colour is now replaced with a safe default.
• Formatted settings are filtered. The site name, slogan and testimonial text, which are meant to accept simple HTML, now go through Joomla's own input filter, which strips scripts, embedded frames and event-handler attributes while keeping ordinary formatting.

Administrator and template options

• Favicon suite with a built-in crop tool. A new Favicon tab lets you upload one image, crop it, and produce the icon sizes browsers and devices ask for without leaving Joomla.
• On/off settings are Joomla's native switches. 52 on/off settings that were old Bootstrap 2 checkbox toggles are now standard Joomla switch fields that look and behave like the rest of the Joomla administrator.
• Cleaner tab names. The Options tabs lost their redundant trailing "Settings", so they now read Favicon, Site Name & Slogan, Fonts, Community Links and so on.

Version numbering

• Version is now consistent everywhere. Delta previously carried two different legacy date-and-version strings (04.07.2024 5.1.12 in the installation manifest and 04.07.2024 5.1.1 on the Options screen), so it was impossible to tell which build you had. The installation manifest, the version shown on the template's Options screen and the version note in the layout file now all agree on 6.1.3, and this changelog matches them.
• How the number works. The first three digits track the Joomla release the template is built and tested against, so 6.1.3 means built for Joomla 6.1.3. A fourth digit is used for our own point fixes between Joomla releases.

A cleaner Quick Start

• A fresh site starts clean. The Quick Start no longer carries our demo's own history into your new site: every hit counter (articles, contacts and web links included) starts at zero, the administrator action log is empty, nothing is left locked as "checked out", and old logged "page not found" addresses have been cleared out of the redirect list.
• Only the useful welcome messages. The post-installation messages in the administrator are trimmed to the ones that matter for a new site (action logging, privacy, multi-factor authentication and automated updates), and Joomla's "What's new" guided tour no longer takes over the administrator the first time you open a component.
• No statistics prompt. The "Enable Joomla Statistics?" question is already answered (off), so it does not greet you on your first login.
• Current copyright year and bundled extensions. The footer copyright shows the current year, and the bundled Akeeba Backup is the current 10.4.0.

Known limitations

• jQuery is still loaded. The testimonials carousel (Owl Carousel) still relies on jQuery. It works correctly on Joomla 6, but it has not yet been rebuilt without jQuery.

With thanks to Michael Mullan, whose Expression bug report led to this maintenance pass across our templates.

• Upgraded: Template Ccompatatible 6.0.0
• Minor Bugs fixed

• Upgraded: Template Ccompatatible 5.2.5
• Security Fix: XSS Vulnerabilities in Menu Override

• Update - Template updated to Joomla 5
• Minor Bugs fixed

• Update - Template updated to Joomla 5

• Fixed - Template updated to be compatible with Joomla 4.2