I think I'm craving for this functionality.

What I want is, if after a CRON run, Drupal detects that such a security update is available, the site would be taken down for maintenance mode to avoid potential attacks. Well, quite paranoid here. It would be better if Apache can be made to serve a static page from another folder.

I have a vague idea in my mind that we can use drush in this. However, I can't think of how Drupal can "tell" some daemon/service or run some script if the trigger (critical security update available) is uhm, triggered.

I can't seem to find any solution to do this thing, so far. Do you have any suggestions?

  • This could be scripted however, just because your site is in maintenance mode does not mean it is not vulnerable. Oct 15, 2014 at 20:26
  • If you're really paranoid about security I'm not sure Drupal/PHP is the best solution. You could use either the Static or Boost modules to convert your dynamic site into static (and thus completely safe) html files. That only works if you don't need users to be able to login.
    – Thomas4019
    Jul 19, 2015 at 6:20
  • if cron is configured, you will be receiving notifications of updates from the website. As has been said above, putting site in maintenance mode won't protect the site. Applying the update will protect the site
    – marksward
    Jul 19, 2015 at 9:01
  • But what I want is that it's automated - that is, no person needs to apply the update himself.
    – abrahamdsl
    Aug 7, 2015 at 5:27
  • right, let me check that.
    – abrahamdsl
    Aug 7, 2015 at 5:27


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.