Kindly suggest me if any solutions are there to resolve the below security issues in drupal 7.
Files can be downloaded without authentication and authorization.(Note: How public file system(sites/default/files/) can be restricted ?
Malicious files can be uploaded to server (Note: Attacker can upload malicious file in pdf or any format and upload it to server which can have very bad impact on server.
[solution: oh my gosh, it really was a silly little mistake. The location path should not begin with a forward slash. That's it! That was the trouble! Sorry to have bothered you!]
Dartmouth’s Advancement Division uses its digital properties to create meaningful engagement with alumni and maximize gifts in support of the College. The Division—made up of the offices of Alumni Relations and Development—is charged with conveying the vision of one of the world’s leading liberal arts colleges.
Hello, on the My Account page, I've added a text field called "Crypto Address". As the user create content (nodes), is there a way to pull a report that shows every user's and their "Crypto Address" and number of content? Or just a list of all users with their "Crypto Address"?
I am currently running a small Drupal site (Drupal 7.34) as a web based vinyl records database which I would like to migrate to a new server on latest Drupal. I have a lot of questions regarding this "double" migration (migrate from an old to a new drupal core, and change physical servers) but I think its better that I solve my current issues before I actually migrate my data.