Security question

Hi Folks,

I recently switched some of my client sites to TSO Host (https://www.tsohost.com), their "cloud" hosting. I been generally happy with the switch but have a serious concern that I'm looking for advice on.

Doing an upgrade to 7.19 of one of the sites I did a sanity check on permissions using the secruity review module. I'd set all files and folders as follows;

find . -type d -exec chmod u=rwx,g=rx,o=r '{}' \;
find . -type f -exec chmod u=rw,g=r,o=r '{}' \;
chmod -R 664 sites/default/files
find -name settings.php -type f -exec chmod 640 '{}' \;

TSO however still allows www to write to all files and folders....

When I asked them about this I got the following responses;

TSO, "It has write access because everything runs under your username. It's not really a problem ".
I replied, "But surely that a security risk? From what I been able to understand anyway."
TSO, "Yes, but there is no alternative on a shared system."
I call BS here...

2 Sites, 2 Databases, One Domain Issue

I currently have two sites on two separate databases and installs under one domain, let's call it domain.com. One site is at domain.com and the other site is at domain.com/newsite. If this is possible, this is how I want everything to be setup, two sites, two databases and installs on one domain. Everything at domain.com works perfectly. If I go to domain.com/newsite the "Welcome to your new Drupal site" page appears as it should with a new empty site.

However, if I attempt to go to any of the admin pages under the second site domain.com/newsite/admin/*, I get a access denied page. If I log into my admin account for the first site at domain.com, I can then access the admin pages for the second site, however the admin pages appear to be using the content (content types, content, modules, blocks, themes, etc.) from the first site's database.

It appears that the admin sections for both sites are attempting to use the first site's database, as it relates to creating content, types, etc. For example, as long as you're logged in to domain.com, or have the correct permissions, going to domain.com/admin/* is the same as going to domain.com/newsite/admin/*. I don't know why specifically this is occurring, and if possible, I'd like to resolve this.

Toggle menu like this?

I've seen many websites with dropping menu by clicking on toggle button. On this site: (...)
For an example:
On the top of the screen there is a toggle button "Product families" and when a user clicks on that button it comes a very nice dropping menu with features. Please anybody help how can I create such as this kind of menu on Drupal website?

How to change System URL

Is there any module which can help me change the system URL like this

From: http://mysite.com/node/add/mycontent
To: http://mysite.com/mycatalogues/mysubcatalogue/add/mycontent

redirect to next node after comment save

I want to redirect the user to the next noe once they have saved a comment. I am using hook_FORM_ID_form alter().

For some reason my callback function 'chris_form_redirect' is not being called when the user clicks on 'Save and continue'. I know this because the watchdog message does not appear in the debug log.

I am able to see the dpm($form) messages. and confirmed that the $form['#submit'] is pointing to the right spot in $form.

What could be the reason why this is not working?

Here is my code.

Formatting Submit button, input.file and layout webforms for drupal 7

Hi there,

Hoping you can help me. I'm trying to set up an inline layout while using webforms. Less work in 7 now that it is built in but I really need the labels and the input fields to link up in proper column justifications:

For example

label ___________

Longer label ___________

Not

Label ___________

longerlabel___________

I've tried every css trick I know and I've created a webform-form.tpl but nothing seems to work.

Pages

Subscribe with RSS Subscribe to RSS - Drupal 7.x