Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Use it for questions related to site security, in particular those focused on protecting a Drupal site from unauthorized access.

4
votes
5answers
765 views

What are the ways/strategies to maintain Drupal sites a over period of 10-15 years?

We have started using Drupal as a PHP programming framework (and not just as a CMS). As result, we have many projects running on Drupal (6 or 7). Typically, after 2-3 years a project gets over and no ...
96
votes
6answers
14k views

What are the downsides of using PHP Filter code in blocks, nodes, views-args, etc?

I have seen many times people saying not to use custom PHP/PHP filter (from the Drupal UI) in blocks, nodes, views-args, rules, etc. I have searched around a bit and haven't found much, it seems like ...
2
votes
2answers
430 views

Code for page access

I would like to use PHP code in nodes of a specific content type. I can check the user's permission with the global $user if the user can access the node. Is there any module to set view for created ...
3
votes
2answers
216 views

What are the potential security issues when importing an entity type?

I'm working on a module. If the module is enabled, there would be an overview page showing the field structure of different content types. The visitor could then click a button to get a copy of the ...
2
votes
1answer
376 views

Is there any security consideration with webform and Salesforce API?

We are implementing the Salesforce webform module for our client and they are asking us if there are any security issues to consider by having SOAP installed on their server. (The Salesforce API ...
4
votes
3answers
848 views

How do I go about putting standalone PHP files into Drupal 6?

I want to add an extra cool PHP Class, where would I put it in Drupal, how do I make absolutely sure the code doesn't present a security risk, should I just make it into a module?
142
votes
11answers
183k views

What are the recommended directory permissions?

I'm gearing up to deploy a Drupal 7 site and I can't find any documentation about what are the recommended security-conscious file and directory permissions should be set. Specifically default/files/ ...
8
votes
6answers
2k views

Will Drupal 6 be left in a secure state after it becomes unsupported?

I created a custom database interface using Drupal 6 + Views + CCK that works really well for my company and recently I had to migrate it to another server. I thought "Hey, why not install Drupal 7 ...
6
votes
1answer
285 views

What security issues are involved with cross-domain logons using OpenID?

I want to implement cross-domain logons for 3 sites. Is OpenID the best tool for protecting my site and users?