Having problems installing Drupal? See the Installation Guide for more information.

Secure Drupal under Plesk

I am trying to set up a Drupal site with e-commerce. I want all personal information (the address book the user account and login) to be over a secure connection. I have to use Plesk hosting, although I don't know it myself very well. What I learned is that Plesk uses two folders, one for secure and one for insecure files. The hosting provider (abansys.com) do not want to symlink the two folders for me.

editor possibly Safari compatible?

Hi all,
I think I have a problem using tinymce with safari.
: the browser doesn't display editor's toolbar.
Is tinymce the best choice for a WYSIWYG javascript editor? Can anyone suggest me some other editor possibly Safari compatible?

My webhoster has an extremely low security config -> Is that normal?

Hi,

this is not a particular installation problem but the topic fits here better than in other categories.

The apache and security settings on my webhoster's machine are really strange. PHP-scripts are executed with the rights of the user "www-data" for each user.
First of all: I couldn't access some directories which were created by Drupal (files/images and files/pictures) by ftp since I have to use normal user to log in. (Let's call it web100).
I installed phpshell (http://mgeisler.net/php-shell/) to change permissions and ownership of these two directories. It worked flawlessly. It's a normal Linux machine.

Then I got curious. The PHP scripts of each user of the machine are executed under the same user. I tried to sneak in other users directories to find out if I could read there php scripts. I found out 3 things:
1. Most users don't use php
and:
2. Of course it worked. Database passwords provided as plain text are easily accessible by everyone on that box. That scared me.
3. /etc/shadow is not readable. Pheeeeew.

Now I have some questions:
1. That's not normal! Is it? (Please tell me that I am not paranoid :)
2. I don't know anything about apache configuration.. Is there an easy way to setup mod_php so that php scripts are executed under the user belonging to the directory? In my case web100?
3. Is there a mechanism to hide the database pw? I think it's impossible without a password box popping up on every access of the page.

No theme or CSS

I've just installed drupal on my local machine (Mac) and its all up and running, except without any kind of style/theme. It's the damnedest thing:

If I set the base url to
$base_url = 'http://localhost/drupal/index.php';
all the links work but theres no style.

Cron problem after new member added

I have just finished the installation of Drupal, latest version, using the Goofy theme as my default theme. All appeared to run smoothly.... until I signed up another member. At this point the following happened...

1 - Every time cron.php is run i get the following error message...

Duplicate entry '' for key 2 query: INSERT INTO users (created, changed, uid) VALUES ('1131709172', '1131709172', '12') in .../includes/database.mysql.inc on line 66.

If you only have default theme showing up

I had battled this 2 days. I was having the default theme show up and not able to change themes. I traced it down to the variable $theme. Somehow this was getting set globally so that any page could see it. I had made a t.php and could still see $theme set to WolfCoast theme. Must be an older version issue with php or some php.ini setting.

I have PHP Version 4.3.10 on my hosting server and had PHP Version 4.4.1 (which didn't have this problem).

So I fixed the problem by setting,
$theme = ""; at the top of index.php.

Pages

Subscribe with RSS Subscribe to RSS - Installing Drupal