Questions tagged [security]

Use it for questions related to site security, in particular those focused on protecting a Drupal site from unauthorized access.

Filter by
Sorted by
Tagged with
96
votes
7answers
14k views

What are the downsides of using PHP Filter code in blocks, nodes, views-args, etc?

I have seen many times people saying not to use custom PHP/PHP filter (from the Drupal UI) in blocks, nodes, views-args, rules, etc. I have searched around a bit and haven't found much, it seems like ...
2
votes
2answers
431 views

Code for page access

I would like to use PHP code in nodes of a specific content type. I can check the user's permission with the global $user if the user can access the node. Is there any module to set view for created ...
3
votes
2answers
216 views

What are the potential security issues when importing an entity type?

I'm working on a module. If the module is enabled, there would be an overview page showing the field structure of different content types. The visitor could then click a button to get a copy of the ...
2
votes
1answer
376 views

Is there any security consideration with webform and Salesforce API?

We are implementing the Salesforce webform module for our client and they are asking us if there are any security issues to consider by having SOAP installed on their server. (The Salesforce API ...
4
votes
3answers
848 views

How do I go about putting standalone PHP files into Drupal 6?

I want to add an extra cool PHP Class, where would I put it in Drupal, how do I make absolutely sure the code doesn't present a security risk, should I just make it into a module?
143
votes
11answers
185k views

What are the recommended directory permissions?

I'm gearing up to deploy a Drupal 7 site and I can't find any documentation about what the recommended security-conscious file and directory permissions should be set to. Specifically default/files/ (...
8
votes
6answers
2k views

Will Drupal 6 be left in a secure state after it becomes unsupported?

I created a custom database interface using Drupal 6 + Views + CCK that works really well for my company and recently I had to migrate it to another server. I thought "Hey, why not install Drupal 7 ...
6
votes
1answer
285 views

What security issues are involved with cross-domain logons using OpenID?

I want to implement cross-domain logons for 3 sites. Is OpenID the best tool for protecting my site and users?