« Setting an SSL Certificate up on ITS servers | Main | UMBS Tidas Buoy Metadata »

November 16, 2011

Enhancing Drupal Security

Fun stuff. Here are some notes.

I already plan on using an SSL certificate in conjunction with Secure Pages and Secure Pages Prevent Hijack to encrypt forms I use on the Research Gateway.

A fairly exhaustive page with pointers to security modules.

A nice blog post on 10 security modules yields the following:

Secure Password Hashes - will implement the D7 user password encryption on D6. I need to look into how it cooperates with existing passwords before installing it. It appears version 6.x-2.x of this module will rehash existing passwords. This module creates a new table for storing passwords.

Of course, the Password Module implements this same functionality. It has far fewer users, a better known maintainer and claims a more direct upgrade path the D7. Fuuu. Version 1.x is not a security enhancement. This module doesn't create any new tables which should make the upgrade simpler??

Use Login Security to guard against password guessing and put in place automatic account logging and notification.

Posted by kkwaiser at November 16, 2011 03:39 PM

Trackback Pings

TrackBack URL for this entry:
http://mblog.lib.umich.edu/mt-bin/mt-tb.cgi/2301

Listed below are links to weblogs that reference Enhancing Drupal Security:

» venus factor nutrition from venus factor nutrition
Data Discussions: Enhancing Drupal Security [Read More]

Tracked on February 8, 2014 09:35 AM

» ヴィヴィアンウエストウッド 財布 新作 from ヴィヴィアンウエストウッド 財布 新作
Hey mate, thanks for sharing but this page doesnt format correctly in Chrome it is is overlapping.Just want to say your article is astounding. The clarity in your post is simply spectacular and i can assume you are an expert on this field. Well w... [Read More]

Tracked on February 16, 2014 08:18 PM

» ケイトスペード Kate Spade from ケイトスペード Kate Spade
The most popular belief is that if you buy from a Coach outlet then not often obtained have the money to buy on the list of pocketbooks from a normal shop. That belief is not even close reality. [Read More]

Tracked on February 17, 2014 06:36 PM

» アナスイ バッグ 新作 from アナスイ バッグ 新作
The diesel watches were packed in the new trend. These watches were newly introduced after the creation of new watch manufacturing engineering. [Read More]

Tracked on February 19, 2014 04:55 PM

» http://www.36thclan.com/pandora-bracelets.html from http://www.36thclan.com/pandora-bracelets.html
Data Discussions: Enhancing Drupal Security [Read More]

Tracked on February 21, 2014 11:45 AM

» コーチ バッグ 25706 from コーチ バッグ 25706
Its better if you think about what others may have to say instead of just heading for a gut reaction to the topic. Think about adjusting your personal thought process and giving others who may read this the benefit of the doubt. [Read More]

Tracked on February 28, 2014 04:41 AM

» used car from used car
click here for the best pre-owned car around [Read More]

Tracked on March 3, 2014 02:44 PM

» cheap christian louboutin shoes from cheap christian louboutin shoes
Data Discussions: Enhancing Drupal Security [Read More]

Tracked on March 6, 2014 02:33 PM

» ford superduty from ford superduty
click here for the greatest dealership around [Read More]

Tracked on March 15, 2014 07:09 PM

» イルビゾンテ 財布 from イルビゾンテ 財布
Cool. Your blog looks great, and I'm glad i've found something here worth adding to my favorites. [Read More]

Tracked on March 15, 2014 10:33 PM

» ANNASUI アナスイ from ANNASUI アナスイ
Glad to see that this site works well on my iPhone , everything I want to do is functional. Thanks for keeping it up to date with the latest. [Read More]

Tracked on March 18, 2014 02:04 PM

» イルビゾンテ アウトレット from イルビゾンテ アウトレット
I dont know what to say. This blog is fantastic. Thats not really a really huge statement, but its all I could come up with after reading this. You know so much about this subject. So much so that you made me want to learn more about it. Your blog is m... [Read More]

Tracked on April 7, 2014 06:58 AM

» www.hotel-hermes.fr from www.hotel-hermes.fr
I know this site provides quality depending articles or reviews and extra information, is there any other website which offers these stuff in quality? [Read More]

Tracked on April 17, 2014 05:38 AM

Comments

Login to leave a comment. Create a new account.