Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options questions only user 5147

Use it for questions related to site security, in particular those focused on protecting a Drupal site from unauthorized access.

1
vote
1answer
On my site, users do not have permission to create content. However, looking through the watchdog logs, I found several accounts that were attempting to access node/add/article node/add/page and s …
asked Jun 14 '15 by Patrick Kenny
4
votes
1answer
. Putting such data in code inside a module immediately set off an alarm inside my head. Is this a terrible thing to do from a security standpoint? If so, why? …
asked Apr 7 '12 by Patrick Kenny
1
vote
1answer
In Watchdog, I started seeing several entries like this: Login attempt failed for admin. And access denied 2016/04/04 - 15:06 admin These are generating a fair number of log entries. The …
asked Apr 4 '16 by Patrick Kenny
0
votes
2answers
A security update to Search API (7.x-1.18) adds new sanitation as a security measure. Great! ..Except it now causes my custom field to be displayed as plaintext instead of HTML. Here is the …
asked Apr 27 '16 by Patrick Kenny
4
votes
2answers
There was a security advisory issued for Views yesterday, but the new version is two ahead of the last (3.10 to 3.8). What happened to 3.9? The Views release page doesn't list a 3.9, or a reason why there is no such version. Is this some new security rule I don't know about? …
asked Feb 12 '15 by Patrick Kenny
2
votes
1answer
I am using Drupal 8 and drush cex to commit my configuration to my repository. However, I want to keep passwords and API keys out of the repository. How do I do that? (selectively exclude sensitive …
asked Feb 17 '16 by Patrick Kenny
2
votes
1answer
I am trying to put my API keys in a separate file instead of storing them in config management. For example, I installed the Commerce Stripe module. When I export the config, it looks like this: co …
asked Sep 21 '17 by Patrick Kenny