Steps to reproduce the issue

The <dlid> tag in component manifests is not being parsed properly in Joomla 5.x, preventing the download key field from appearing in the Extensions → Update Sites interface, even when the database is correctly configured.

Expected result

When a component manifest includes a properly formatted <dlid> tag, the Extensions → Update Sites interface should display a "Download Key" field for premium component updates, allowing administrators to enter their license key. See #26744 "When you edit an Update Site, the Download Key field only displays for extensions which support it (those that have a dlid attribute in their XML manifest file."

Actual result

The download key field does not appear in Extensions → Update Sites, despite:

• Correct <dlid> tag in manifest
• Proper database configuration (extra_query field populated)

System information (as much as possible)

• Joomla Version: 5.x (tested on Joomla 5.3.3)
• PHP Version: 8.4.1.1 with Zend OPcache
• Database: MariaDB 11.8.2
• Browser: Chrome

Additional comments

Steps to Reproduce

1. Create Component with DLID Support

• Create a component with the following manifest structure (A minimal test component demonstrating this issue is attached [com_test-1.0.5.zip](https://github.com/user-attachments/files/22275036/com_test-1.0.5.zip.

<?xml version="1.0" encoding="UTF-8"?>
<extension type="component" method="upgrade">
  <!-- ... other manifest elements ... -->
  <!-- Download Key Support -->
    <dlid prefix="dlid=" suffix="&amp;download=com_test.zip"/>
</extension>

2. Install Component

• Install the component through Joomla administrator
• Verify installation completes successfully

3. Check Update Sites

• Navigate to Extensions → Update Sites
• Locate the installed component's update site
• Expected: Download key field should be visible
• Actual: No download key field appears

4. Verify Database State

• Query the database to confirm update site configuration:

  SELECT update_site_id, name, extra_query
  FROM #__update_sites
  WHERE name LIKE '%Test Component%';

Result: extra_query field may be empty or not properly initialized from <dlid> tag.

5. Manual Database Fix not sufficient.

• Manually set the extra_query field:

  UPDATE #__update_sites
  SET extra_query = 'dlid='
  WHERE name LIKE '%Test Component%';

Result: Database now contains correct value, but UI field still doesn't appear.

Related Documentation

• https://docs.joomla.org/J4.x:Adding_an_Update_Server#Download_Key
• The documentation suggests this feature should just work in Joomla 4.x+

Impact

• Affects premium extension developers using download key authentication
• Forces workarounds through component-specific configuration interfaces
• Breaks expected workflow documented in official Joomla guides

Suggested Fix Areas

1. Manifest parser: Review <dlid> tag processing during component installation
2. Update sites UI: Verify download key field rendering logic

Please contact me, if I can be of more help or I am missing something obvious. I am implementing a workaround by processing the key myself as a component option parameter but it would be nicer not to do this and rely entirely upon Joomla functionality.

Angus