4

I'm working on my very first drupal website and it will consist of a login form which will then give the user access to a form. This next form will allow the user to query my database to show the closest matches in the category they search - and when they select one they will able to fill in some details on another form, attach some files and then send the information via email.

Security is the most important factor here as the information is all confidential. Can you help me work out what plugins/modules I should be looking at to make my system most secure. And what possible security problems I need to be aware of?

[Note: I have used cmsmatrix.org to compare what the CMS can do and one thing I've noticed is for Drupal it says it can't do things like ssl logins or ssl pages. So should I even be using Drupal in that case?]

Improve this question
1
  • kindly tag the version of your drupal installation as modules recommended to you (if any) in this context might greatly depend on it
    – optimusprime619
    Commented Feb 11, 2012 at 12:15

2 Answers 2

Reset to default
6

I serve several Drupal sites on HTTPS, I don't see what Drupal has to do with that, that's the webservers job to handle. You can test the login for yourself in via HTTPS on drupal.org.

For querying the database in a safe fashion, I would recommend Views. For gathering data with forms, the Webform module. I haven't collected files with Webform, and I'm not sure if that's doable in it's current form. This may require some custom work.

There's a Securing Drupal guide which also specifically mentions getting HTTPS up.

Improve this answer
4

There are several guides available (free or not-free) which might be useful to you:

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.