Help protect the website from attackers or bad actors, by identifying, preventing, or mitigating security vulnerabilities.

Apache authentication

The module maintains Apache access control files (.htpasswd). User name/password is taken from Drupal user database.
Users are listed according role.

Taxonomy Access Control Lite

This node_access module governs access to nodes based on the taxonomy terms applied to the nodes. A simple scheme based on taxonomy, roles and users controls which content is visible.

Admin RSS

Features

The AdminRSS module creates RSS feeds for the administrative information for Drupal websites.

Invisimail

Invisimail provides a content filter to hide email addresses from spam-bots.

Bad Behavior

Bad Behavior is a set of PHP scripts which prevents spambots from accessing your site by analyzing their actual HTTP requests and comparing them to profiles from known spambots. It goes far beyond User-Agent and Referer, however.

Security

This module is about strengthening the security of your Drupal site. Drupal is fairly secure out of the box, but as new technology emerges with HTML5, site maintainers must keep up.

This module:

  • Allows you to move your administration panel from /admin to /something-else. This is done by modifying the menu entries, not simply by rewriting URL's on input and output.
  • Manage Javascript sources to minimize the risk of Cross Site Scripting (XSS) attacks
  • Hash passwords client side
  • More to come...

Change URL of administration panel

Move all of the administration panel URL's from admin/something to secret/something. This prevents attackers from targeting vulnerable admin pages because the location does not exist. Note that enabling this module will cause issues with core's Toolbar module. The majority of links will be removed from the menu because the Toolbar module specifically looks for URL's with the path admin/% when building the menu. These paths do not exist and therefore the menu links are not added. This is not an issue with the Admin Menu module.

Preventing Cross Site Scripting

Pages

Subscribe with RSS Subscribe to RSS - Security