Questions tagged [security]

Use it for questions related to site security, in particular those focused on protecting a Drupal site from unauthorized access.

Filter by
Sorted by
Tagged with
-1
votes
2answers
50 views

Safety of letting user define javascript paths in fields

I have a module that uses the Fields API to insert a HTML5 canvas element and allows users to define paths to user scripts to be loaded with the page: The scripts are relative to a hard-coded path ...
-1
votes
1answer
79 views

Security issues with v7.59 [closed]

I have updated various Drupal 7 sites to version 7.59 (and included all relevant updates) because of the security update. However I've still experienced issues with sites being hacked, there were ...
-1
votes
1answer
108 views

How to locate the Entry Points of a Drupal 8 Core module?

I'm to perform a security audit on the Drupal 8 Core modules, and was curious if there were any telltale signs of Entry Points (ie, how a module communicates with an external module and vice-versa). ...
-1
votes
1answer
426 views

How do I fix the following security issue that were reported from a security check?

After running some security checks on my website with Detectify & Tinfoil, I'm faced with some concerns. There seem to be a lot of security issues that I thought were covered by Drupal, and I'm ...
-1
votes
1answer
52 views

How to write custom node_access that works with searchapi?

I'm trying to write a custom node access module, implementing hook_node_access. I have a searchapi index of all my nodes, which I would like to return results that obey the hook_node_access ...
-1
votes
1answer
32 views

code change alert/email [closed]

Is there a module to help me receive email for any change in drupal site ? https://www.drupal.org/project/logging_alerts this module help a lot in log in / log out and add content .. but I need to ...
-1
votes
2answers
111 views

Hardening Drupal server running the Update Manager

We are going to do the hardening on one of our Linux server running SELinux and Drupal 7 with firewall; on the Drupal Update Manager, if we want only to get periodic emails / notifications on modules ...
-2
votes
1answer
138 views

Is this way safe to bootstrap Drupal from an external PHP script? [duplicate]

I want to bootstrap Drupal from an external PHP file located in Drupal's root directory. The following code will do the job. error_reporting(E_ALL); ini_set("display_errors", 1); define('DRUPAL_ROOT',...
-3
votes
0answers
24 views

Scan error of “The following CGIs are not protected by a random token”

A scan run against my Dev Drupal 7 website lists the following error: The following CGIs are not protected by a random token: /contact-ocr /civ-rts-coordinators The content of these 2 URLs are ...