0

enter image description hereMy Drupal Website is possibly compromised through a SQL injection and lot of database updates are visible. How to avoid further SQL injection?

closed as too broad by Mołot, Shawn Conn, Clive Oct 26 '15 at 8:53

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Welcome to Drupal Answers :) Advising on how you could secure an entire website is too broad for the Q+A format here, so this will need to be closed. Please have a look through the help center to find out what kinds of questions are on-topic. Separately, you might find it useful to look through the top questions in the security tag - they may contain some useful information – Clive Oct 26 '15 at 9:12
  • Thank You Clive, do I need to ask the same question again with only saecurity tag? – Anjels Oct 26 '15 at 9:14
  • No, please don't - this question isn't appropriate for this website, it's too broad in nature. It could never be answered objectively and completely, which is something that's required for good Q+A – Clive Oct 26 '15 at 9:15
1

Install Security Review for maintaining security of your website. Or if you have custom modules, make sure form handling is done only via drupal forms.

  • I checked with this, each time do i need to login to my site? Is there any other method of avoid further SQL injection from people? – Anjels Oct 26 '15 at 7:47
  • have you checked drupal.org/project/hacked ? to make sure there is no change to the core and contrib files ? – Himanshu Pathak Oct 26 '15 at 7:53
  • drupal.org/project/hacked is something which gives me the log report, but my requirement is people should not access DB and make changes without permission – Anjels Oct 26 '15 at 8:00
  • can you be bit descriptive .. like what content was changed by which user .. Are you sure it was changed by anonymous user ? if yes then install module drupal.org/project/content_access – Himanshu Pathak Oct 26 '15 at 9:05
  • Above I have added an Image, hope this will figure out what exactly i need to work on. Please have a look – Anjels Oct 26 '15 at 9:10

Not the answer you're looking for? Browse other questions tagged or ask your own question.