Just thought I'd share a drupal-core update script I've written for 7.x. Might save somebody lots of time - it's saving me an age since I wrote it after the most recent release.
so I run a D7 Site, and I already had applied the patch (7.58) coming out late march. I also applied the latest core patch (7.5.9) coming out yesterday.
However, I also analysed the installation (and the database) and I discovered some attempts to hack the page, apparently using the "Drupalgeddon2" attack vector. The attack (attempt?) was carried out on the 22th of April, so the first patch was already applied, but of course not the second one. Those requests vary a bit, but seem to have the same payload and they look like this:
I use color glass theme in my web. User login appears so big. Anyone knows i it's possible to have small userlogin? I would like to put it in header section.
Hello, I inherited a Drupal site and performed a Database and Module update but not a core update, after making a backup of the site DB and Files.
We are running version 7.52. We have a custom registration page which is now missing some elements. I am considering restoring from the backup but any advice regarding resolving this issue perhaps without doing so would be welcome.
We have a platform where we set up Drupal sites for fine artists (they put up own content) http://heavybubble.com.
We always had webforms for visitors contact them. At first through the contact module. When DMARC came along we changed them all to webforms set up to send the message to the artist from webmessages@heavybubble.com, an email we validated as legitimately coming from the web server, setting up all the SPF and such as suggested.