Heine

  • Home
  • Drupal
  • About
Home

Drupal

Drupal 5.2 and 4.7.7 released

Heine —Thu, 2007/07/26 - 23:18

It was a difficult delivery, but Drupal 5.2 and 4.7.7 have finally been released. As you can read in the release announcement, several vulnerablities were fixed.

There are two advisories:

  • Drupal
  • Security
  • Read more about Drupal 5.2 and 4.7.7 released

Drupal 5.x Core tables

Heine —Sun, 2007/07/15 - 04:09

Back in the days, we had *.mysql files which contained SQL commands for the Drupal database layout. Now, Drupal 5 comes with an installer and those SQL commands are hidden in modules/system/system.install.

Someone recently asked for the CREATE table statements of Drupal 5.x. Here's a list with a handy prefix_ you can use to search and replace with your own prefix.

  • Drupal
  • Read more about Drupal 5.x Core tables

IN (%s); a security vulnerability waiting to happen

Heine —Tue, 2007/06/19 - 00:14

I've written before about (ab)using %s in IN clauses such as:

  • Drupal
  • Security
  • Planet Drupal
  • Read more about IN (%s); a security vulnerability waiting to happen
  • 1 comment

Drupal Jumpbox License

Heine —Sun, 2007/06/17 - 11:13

Strange JumpBox license. I wonder how this works with the GPL...

END USER LICENSE AGREEMENT

This END USER LICENSE AGREEMENT (the "Agreement") is entered into by and between JumpBox, Inc. ("Licensor") and you ("Licensee") regarding Licensor's license of the Software, as defined below, to Licensee. BY CHOOSING YES BELOW, YOU AGREE TO BE BOUND BY THE TERMS OF THIS AGREEMENT. In consideration of the mutual promises herein, the parties agree as follows:

DEFINITIONS

Software. JumpBox, including the source code to the Software.

  • Drupal
  • Read more about Drupal Jumpbox License

What MyCaptcha 5.2 will bring

Heine —Thu, 2007/06/14 - 22:25

Should time permit I hope to work on MyCaptcha 5.2 this weekend.

Planned features:

  • Support for recaptcha.
  • Configurable location in forms.
  • Configurable description on the CAPTCHA.
  • A minimal API necessary for recaptcha and to silence the voice in my head screaming for a more flexible API.

I promise MyCaptcha won't be about 'APIs'; I will focus on the "Just Works" principle.

  • Drupal
  • Captcha
  • Read more about What MyCaptcha 5.2 will bring
  • 3 comments

An alternative Captcha module for Drupal 5.x

Heine —Sun, 2007/05/20 - 02:58

A 1.0 version of the alternative CAPTCHA module, MyCaptcha, has been released for Drupal 5.x.

Features:

  • Math CAPTCHA
  • Image CAPTCHA
  • Can be added to nearly any form, without changing PHP code.

» Download MyCaptcha

For additional information, please see the MyCaptcha manual.

  • Drupal
  • Captcha
  • Read more about An alternative Captcha module for Drupal 5.x
  • 3 comments

Adding settings to Captcha

Heine —Thu, 2007/03/01 - 16:51

Update: MyCaptcha 1.0 has been released.

I've been adding some settings to the math captcha module I created earlier. An important setting is on which forms you want to have a captcha. While it is possible to hardcode the possible forms a captcha can appear on, I've opted for another approach.

I've created two helper modules called Form store and Form collect. If you enable Form collect, it will collect forms on your site while you visit them. You can view the collected forms on the Form store page. In the image below, you can see that I limited the collection to forms I thought useful for Captcha and that I've given most a more readable description. While I intend to include and add a description to all core forms, this has to be done manually for now.

  • Drupal
  • Captcha
  • Read more about Adding settings to Captcha
  • 3 comments

Math captcha for anonymous users

Heine —Sat, 2007/02/24 - 12:58

This morning I broke down and wrote a simple math captcha module (for Drupal) to use with user registration and anonymous commenting on this site.

Because this site uses caching for anonymous users, the module needs to make sure that whenever a captcha is displayed, the page is not added to the cache.

Caching is handled by includes/common.inc:

  • Drupal
  • Captcha
  • Read more about Math captcha for anonymous users

Cache or PHP-info is none of your business

Heine —Sat, 2007/02/24 - 09:41

I've a few extra scripts in the webroot of several sites to provide me with server information when I need it. These scripts tend to provide too much information to just anyone. Here's how you can quickly limit access to the Drupal admin user (the first user created on the site).

Create a file restrict.php. The example assumes all files (restrict.php, info.php and apc.php) are in the Drupal root directory. You need to adapt the include paths if you save the files elsewhere. You can make the access criteria as baroque as you need; the example simply checks on user id.

  • Drupal
  • PHP
  • Read more about Cache or PHP-info is none of your business
  • 3 comments

Do a quick security review when porting your module

Heine —Thu, 2007/02/22 - 08:48

Adapted from a mail I sent to the Drupal development list.

Porting a module is an excellent opportunity to keep an eye out for security problems (evidence: DRUPAL-SA-2006-031). Here's a quick security reminder regarding input (user-supplied data). Code samples are only included to make a point, do not hold them against me.

  • Drupal
  • Security
  • Planet Drupal
  • Read more about Do a quick security review when porting your module

Pages

  • « first
  • ‹ previous
  • 1
  • 2
  • 3
  • 4
  • 5
  • next ›
  • last »
Subscribe to Drupal

Recent posts

  • Teampassword manager's password generator is biased
  • Other vectors for SA-CORE-2014-005?
  • Lazy loading: hook_hook_info is for hook owners only.
  • "Always offline" problem in EA's Origin due to antivirus
  • From bug to exploit - Bakery SSO
more

Security reviews

I provide security reviews of custom code, contributed modules, themes and entire sites via LimoenGroen.

Contact us for a quote.

Follow @ustima

Copyright © 2021 by Heine Deelstra. All rights reserved.

  • Home
  • Drupal
  • About