Add functionality and customize your Drupal application with thousands of projects contributed by our amazing community.

1,156 modules match your search

A module is code that extends Drupal's by altering existing functionality or adding new features. You can use modules contributed by others or create your own. Learn more about creating and using Drupal modules.

Advanced ban

Advanced ban list
🇺🇦 This module is maintained by Ukrainian developers.

File Upload Secure Validator

This is a very simple and small module which performs a server side validation for the extension of an uploaded file of any content type's file field.

Two-factor Authentication (TFA)

Two-factor authentication for Drupal sites. Drupal provides authentication via something you know -- a username and password while TFA module adds a second step of authentication with a check for something you have -- such as a code sent to (or generated by) your mobile phone.

ClamAV

ClamAV

Drupal integration with the ClamAV virus scanner.

This module will verify that files uploaded to a site are not infected with a virus, and prevent infected files from being saved.

NB: The module integrates with ClamAV, it does not provide an anti-virus scanner engine.

Drupal Perimeter Defence

Basic perimeter defence for a Drupal site. This module bans the IPs who send suspicious requests to the site. The concept is: if you have no business here, go away.

Use the perimeter module if you get a lot of requests to 'wp-admin' or to .aspx urls on a Linux server, or other similar requests. The URL patterns that result in a ban can be configured in the admin settings

Secure Login

Secure Login

For sites that are available via both HTTP and HTTPS, Secure Login ensures that the user login and other forms are submitted securely via HTTPS, thus preventing passwords, authenticated session coo

Invisimail

Invisimail provides a content filter to hide email addresses from spam-bots.

Health check

Note from the maintainer

If you need other endpoint than /health, please use the health_check_url module!

Description

Spamicide

The purpose of Spamicide is to prevent spam submission to any form on your Drupal web site. Spamicide adds an input field to each form then hides it with css, when spam bots fill in the field the form is discarded. The field, and matching .css file, are named in such a way as to not let on that it is a spam defeating device, and can be set by admins to almost anything they like(machine readable please). If logging is set, the log will show if and when a particular form has been compromised, and the admin can change the form's field name (and corresponding .css file) to something else.

Persistent Login

The Persistent Login module provides a "Remember Me" option on the user login form. Persistent Login is independent of the PHP session settings and is more secure (and user-friendly) than simply setting a long PHP session lifetime.

Image CAPTCHA Refresh

Image CAPTCHA Refresh

🇺🇦

This module is maintained by Ukrainian developers.

Mollom

This module is unsupported due to a security issue the maintainer didn’t fix. See Mollom - Critical - Unsupported - SA-CONTRIB-2018-038 for details.

If you want to use this module, your options are:

  • Choose another, actively maintained module instead, for instance Akismet.
  • File an issue in the queue with a patch to fix the module and then contact the security team to have your version reviewed and the project handed over to you following the unsupported project process.
  • Hire someone to fix the security bug so the module can be re-published and supported (Consider hiring companies listed in the Marketplace)

As of 2 April 2018, Acquia will no longer support or maintain the Mollom product. Read more: https://www.mollom.com/eol

Mollom is an intelligent content moderation web service. By monitoring content activity on all sites in the Mollom network, Mollom is in a unique position to determine if a post is potentially spam; not only based on the posted content, but also on the past activity and reputation of the poster. In short, Mollom handles incoming posts intelligently, in much the same way a human moderator decides what posts are acceptable. Therefore, Mollom enables you to allow anonymous users to post comments and other content on your site.

Hidden CAPTCHA

A sample form including a Hidden CAPTCHA!

Description

Hidden CAPTCHA is an extension to the CAPTCHA module. It offers a hidden CAPTCHA (duh!)

The idea is very simple: If you offer an input box in any form, 99% of the time, robots will fill it with something before posting the form. If you offer an input box that has to stay empty, then the CAPTCHA system will prevent posts by robots.

This module allows you to add a Hidden CAPTCHA on forms where you don't absolutely need to have a human enter a text, number, etc. but that still needs a little anti-spam control.

How does it work?

This is just like any text CAPTCHA. You can set it up with a question specific to your website or that people just cannot answer in their right mind (i.e. How many stars are they in the Universe?) By changing the question regularly (once a month?) then you can prevent even more spam as the spammers need to adjust their robots to understand the new question (and some won't do that...) Long questions are better since they are not very likely to have been asked in any CAPTCHA before.

The CAPTCHA system will create a form with your question and an input box. The Hidden CAPTCHA system adds a specific CSS class to that form. The class references a CSS definition in the Hidden CAPTCHA file that says that the whole CAPTCHA box shall be hidden (i.e. display: none;).

Google reCAPTCHA

This module provides integration with Google reCAPTCHA service for protection site forms.
Read more: http://www.google.com/recaptcha
This new service from Google opens new epoch in spam protection technology.

Even if the site has no comment form (or similar) - it is still necessary to protect!
Why? Because CAPTCHA protects login form (Your site has it, right?) and doesn't allow bad guys to brute-force and use vulnerability like this: https://www.drupal.org/node/2378367

Advantages over standard CAPTCHA:

  • During form creation and form submission special requests will be sent to Google servers - Your server will not spend resources for creating CAPTCHA widget or recognition if this is spam or not.
  • This service provides advanced clever technology to recognize spam and permanently improves.
  • This CAPTCHA is very easy for site visitors. In half cases it is enough just to click "I'm not a robot"! :)

Advantages over others CAPTCHA modules:

  • Standalone module - no dependencies, no additional modules! This module provides only the needful functionality for integration and protection - nothing excess!
  • This module uses latest version of Google CAPTCHA V2 API.

Check DNS

Check DNS prevents false registration

INTRODUCTION
------------

The Check DNS module simply prevents user registration with invalid email domain on user registration form.

Spambot

Spambot protects the user registration form from spammers and spambots by verifying registration attempts against the Stop Forum Spam

Password Strength

Password Strength module provides realistic password strength measurement and server-side enforcement for Drupal sites using pattern-matching and entropy calculation.

CAPTCHA Riddler

Captcha Riddler form

Human Question & Answer Captcha

Overview

Captcha Riddler is a sub module of Captcha that lets site administrators create their own questions to foil automated spam bots.

Taxonomy Access Control

Access control for user roles based on taxonomy categories (vocabulary, terms).

HTTPS and WWW Redirect

Admin settings page.

This module simplifies the process of setting a preferred URL and is designed for users who wish to enforce SSL and/or a specific domain without having to edit any files.

Anti-Spam by CleanTalk

Anti-Spam module by CleanTalk to protect your Drupal sites from spambot registration and spam comments publications thru comment and contact forms.

Invisible anti-spam without CAPTCHA, questions, puzzles, counting animals, math and etc. Just install and forget.

CleanTalk is a SaaS spam protection service for Web sites.

CleanTalk uses protection methods which are invisible for site visitors.
Using CleanTalk eliminates needs in a CAPTCHA, questions and answers, and other methods of protection, complicating the exchange of information on the site.

The module is tested and ready to protect against spambots for Webform.

Pages