Security

This is a drush plugin for running security checks against Drupal sites.

These are basic sanity checks, they aren't intended to replace more thorough reviews of a site build. The tests are designed to stop a badly misconfigured site going live.

To run this against a site, simply run "drush secchk" from the docroot or using a site alias.

The Security Check module is developed and maintained by Dave Hall Consulting.

This puppet module provides the Aegir Hosting System with the highly experimental ability to automate updates to Drupal platforms and sites, including Aegir itself.

We fear that this module may enable autonomous machine evolution and eventually trigger sentience and the inevitable Robot Apocalypse. We apologize in advance.

This module provides HoneyPot and timestamp methods of deterring spam bots from completing drupal commerce checkout form.

Acknowledgement

This module exists thanks to the generous support of Monsoon Consulting.

This is currently in development.

No information until the release.

Beef up the security of your site with Authy Two Factor.

You will need to sign up for an account with Authy in order to use this module but there is a FREE tier (https://www.authy.com/product/pricing/) that will work for most small sites.

Users can choose to require Authy on their own account, or the Admin can require all users, or just users of a given role to use two factor authentication.

Provides way of accepting and logging cookies submitted from XSS vulnerable sites, as well as generating XSS injection strings.

cron_sec, when enabled as the lightest module, implements key security similar to
Drupal 7's enhanced key security, and optionally allows cron to run at an elevated
permission level thought the use of switching the active user for the session to
one specified in its configuration, and then switching the user back as the cron
session ends to the anonymous user.

The purpose of Login Notify is to alert you when someone logs in to your account from an unrecognized browser. It also gives you the opportunity to "lock out" a browser if you wish.

The goal of this is to minimize the damage that can be done by a malicious user in the event that someone obtains your password, or through some other means manages to log in to your account.

This module was inspired by a similar Facebook feature introduced in 2010.

Isolated the Nagios/Icinga functionality from drush_multi.

For the usage as Nagios/Icinga NRPE Plugin.

It just prints a message and exit with an exit status.

Commands

drush_nagios includes the following commands:

check-updates

Checks for pending updates.

Asirra is a human interactive proof that asks users to identify photos of cats and dogs. It is developed using Captcha module. It provides spam protection to your drupal site using external antispam service Asirra.