Cracking Drupal: A Drop in the Bucket

by Greg Knaddison

Overview

Uncover threats and protect your Drupal® site with proven strategies

What is the worst-case scenario if your Web site gets attacked and the security is broken? By following the strategies in this guide, you don't have to find out. It first walks you through the vulnerabilities you'll face and the steps you should take to protect a basic Drupal site. You'll then discover how to review a module to find weaknesses and fix them. And you'll learn how to keep your site running securely by implementing more advanced techniques.

Take control of your site by learning how to:

• Prevent the common ways that Drupal gets cracked

• Uncover parts of the attack surface that can expose your site

• Install extra modules and configure Drupal to maintain your site's security

• Control the security of your site using Drupal's API

• Utilize the Drupal Access system to limit who can see specific content

• Test your site with automated scanners like Grendel

• Follow strategies to find, exploit, and avoid vulnerabilities

• Leverage resources from the Drupal Security Team

For all the code in this book, as well as all the latest updates, visit the Web site crackingdrupal.com.

Product Details

ISBN-13:	9781118080719
Publisher:	Wiley
Publication date:	03/04/2011
Sold by:	JOHN WILEY & SONS
Format:	eBook
Pages:	240
File size:	7 MB

About the Author

Greg James Knaddison is Principal of Growing Venture Solutions and a dedicated Drupalista. As a member of the Drupal security team, Knaddison has participated in every part of the process including identifying vulnerabilities, creating fixes, testing fixes, and writing security documentation and advisories. He has also contributed modules and publishes the news site DrupalDashboard.com.

Read an Excerpt

Click to read or download

Table of Contents

1. That Horrible Sinking Feeling.

2. Security Principles and Vulnerabilities Outside Drupal.

3. Protecting Your Site with Configuration.

4. Drupal's User and Permissions System.

5. Dangerous Input, Cleaning Output.

6. Safety in the Theme.

7. Drupal Access System.

8. Automated Security Testing.Weaknesses in the Wild

9. Finding, Exploiting and Avoiding Vulnerabilities.

10. Un-cracking Drupal.

Appendix A: Function Reference.

Appendix B: Installing Drupal 6 Fresh Out of the Box.

Appendix C: Leveraging Community Resources.

Glossary: Glosssary of Key Terms.

Index.