We had been looking for a "Content Management System" for quite a while, and one of our employees discovered Drupal while researching CMS software on the web. Drupal appeared to be much more flexible than PHP Nuke, which we were using, and the more we looked at it the more impressed we became. At that time all of the features we thought we would need, except one, which we decided to write a module to provide, were on the table to be implemented in the next Drupal release.
I have been noticing an increase of suspicious 404 entries in my Drupal logs. Today I have a bunch that seem to be looking for backdoors to reply to blog entries. The bot started at 5:35 and proceeded to check for nids 1 through 19 at irregular intervals between 13 and 20 minutes.
2005/01/05 - 6:48am 404 error: blog/node/5 not found. Anonymous
2005/01/05 - 6:48am 404 error: blog/comment/reply/5 not found. Anonymous
2005/01/05 - 6:33am 404 error: blog/node/4 not found. Anonymous
2005/01/05 - 6:33am 404 error: blog/comment/reply/4 not found. Anonymous
2005/01/05 - 6:09am 404 error: blog/node/3 not found. Anonymous
2005/01/05 - 6:09am 404 error: blog/comment/reply/3 not found. Anonymous
2005/01/05 - 5:52am 404 error: blog/node/2 not found. Anonymous
2005/01/05 - 5:52am 404 error: blog/comment/reply/2 not found. Anonymous
2005/01/05 - 5:35am 404 error: blog/node/1 not found. Anonymous
2005/01/05 - 5:35am 404 error: blog/comment/reply/1 not found. Anonymous
What is interesting is that these URLs (which look like Drupal URLs) are obviously bogus. Are these possibly URL styles of a previous or forked version of Drupal?
I tried to change the "read more" (the link for full story or article) to something else, such as "full story". But I didn't find "read more" any of the source code of Drupal. The search in phpmyadmin showed that "read more" is located in mysql database (table "locales_source"), but I was not able to see that in the table. Can anyone tell me how I can change from "read more" to something else ("full story", etc.)?
I would love to do the same thing for the nevagation on top of the articles, such as Home » blogs » my blog. How can I change "Home" to some other words?
I am using Drupal 4.5.1. Currently, when I post a blog entry, or a story, or a comment, the time/date of the node is registered as the time I began writing the node. I want to change this to the time that the submit button is pressed. Can this be done?
Does anyone know if Druapal is vulnerable to any of the exploits that hardened PHP addresses? In particular, I'm wondering if the buffer overflow vulnerability in unserialize() might be an issue? A quick look at the code seems to suggest it's not, but I'm hoping someone more experienced with PHP might be able to comment?