Help protect the website from attackers or bad actors, by identifying, preventing, or mitigating security vulnerabilities.

Two-factor Authentication (TFA)

Two-factor authentication for Drupal sites. Drupal provides authentication via something you know -- a username and password while TFA module adds a second step of authentication with a check for something you have -- such as a code sent to (or generated by) your mobile phone.

⋅ Categories: Actively maintained, Under active development, Access control, Security

CloudFlare

CloudFlare is a FREE reverse proxy, firewall, and global content delivery network and can be implemented without installing any server software or hardware.

On average, CloudFlare-powered websites load 30% faster, use 60% less bandwidth, and process 65% fewer requests. CloudFlare-powered websites are protected from many forms of malicious activity including: comment spam, email harvesting, SQL injection, cross-site scripting, and DDoS (denial of service) attacks.

8.x Features

  • Cache clearing by Tag (Recommended) and Path.
  • Restore client's original IP address.

7.x Features

  1. Corrects $_SERVER["REMOTE_ADDR"] so it contains the IP address of your visitor, not CloudFlare's reverse proxy server.
  2. Integrates with CloudFlare's Threat API so you can ban and whitelist IP addresses from the Drupal Comment administration screen.
  3. Integrates with CloudFlare's Spam API.
  4. Integrates with CloudFlare's Client Interface API (planned).

How do I get started with CloudFlare?

  1. Visit http://www.cloudflare.com to sign up for a free account.
  2. Follow their 5-minute configuration wizard.
⋅ Categories: Actively maintained, Under active development, Performance, Security, Integrations

PGP Contact Forms

pgpcontact.png

This is a project to provide client side pgp encryption of user and site-wide contact forms using the OpenPGP.js library.

⋅ Categories: Minimally maintained, Maintenance fixes only, Developer tools, Integrations, Security

Blackboard Single Signon BbSSO

This modules allows users to login to from Drupal into Blackboard without re-entering authentication credentials. The Drupal session is recognized in Blackboard.

⋅ Categories: Actively maintained, Under active development, Administration tools, Access control

Drush ACLs

Drush ACLs is an extension created with the goal of providing an easy way to a choosen set of filesystem permissions to a Drupal deployment, and optionally help you keep them by hooking into Drush

⋅ Categories: Actively maintained, Under active development, Security, Developer tools

BanHammer

BanHammer is a module for identifying spambots and blocking them from accessing your website. This module is still experimental.

⋅ Categories: Under active development, Security

Pages

Subscribe with RSS Subscribe to RSS - Security