Post installation

For a new 4.7 installation, both the Recent posts block and the Active forum topics block is showing on the front page, even if anonymous users does not have access to the content.

How can this happen?

Those blocks only have their default block settings, visible to everyone, cannot be turned off by users.
They should still not be visible for anonymous on a site where the "access content" permission is turned off for anonymous, right?

Hi,

I'm pretty much a newbie when it comes to drupal and php. I have been testing it for week now. Yesterday I was messing around with modifying themes. I was searching the drupal handbooks and found a php statement print_r($GLOBALS). If for some reason users were allowed to post php code, they could print the globals, including the username and password for your database. If your using a hosting service that allows phpMyAdmin access over the web this would allow someone to mess directly with your database.

As I am sure you all have encountered, there are often problems when you want permissions based on each taxonomy term. I tried a few of these access control modules, but I came to feel that, for my site at least, it made more sense to make a custom node type, and create a vocabulary that only uses that node type. For example, I have user news, and site news. I didn't want regular users to use the site news term, but despite clear instructions, unless it's not available, they will anyway.

Is there a "preferred" way to dynamically change the theme being used by a site using custom PHP code?

By "preferred", I think I have in mind approaches which are not resource intensive and are also reliable (i.e., not dependent on quirks of Drupal's current core code, which could change sometime in the future).

Is it possible to have the content of the "access denied" page displayed by LoginToboggan use a different theme than the default theme?

I've looked at the code for the module, and there are suggestions that this is possible. But, as a relatively new user, I'm not able to establish how to use this functionality (if it's present).

Hi
I'm working with Apache 2.2.2, MySQL 5.0.19 and PHP 5.1.2
I have a default site http://abcd
This works fine.
Now i would like to enable a site http://abcd/def which will have its own tables, users, modules, themes - basically a site by itself.