Secure forms

Component type

module

Maintenance status

Development status

Downloads

376

Component created

Component changed

Some forms in Drupal core pose security concerns - for example, the password reset form displays an error message when a username/email address does not exist in the system. This means that valid usernames can be enumerated through the use of the reset password form.

Currently, this module secures the password reset form by overriding core's validation handlers and performing the same steps but instead of setting an error, simply redirecting and displaying a message as if the submission was a success.

Mix form

Component type

module

Maintenance status

Development status

Component created

Component changed

This project aims to solve big problem faced by developers from their non technical clients. It helps to add random configuration field to a admin form page.

Example :

Site configuration page will have password change field and a field to set 2 of the block titles and a particular node field of particular node id and permission settings to access forum.

Another form page will have option to change all the block contents.

please watch this space for further info.

Intershop Password

Component type

module

Maintenance status

Development status

Downloads

816

Component created

Component changed

Intershop and Drupal don't follow the same schema about password storage.
Drupal uses SHA512 algorithm, while Intershop uses MD5.

This module overrides checking methods on Drupal side to allow to copy/paste the Intershop password hash directly into Drupal, and automatically rewrite Intershop password into Drupal password to match stronger policy at the first user login.

Features

  • Support for Intershop's password during authentication process,
  • Rewrite password according to Drupal algorithm, at the first user login.

Pluggable Field Privacy

Component type

module

Maintenance status

Development status

Component created

Component changed

Pluggable Field Privacy provides options for users to override visibility of fields in entities they create or edit.

Features:

  • works on any entity type
  • administrators can enable field privacy explicitly for the fields where needed
  • administrators select privacy levels users can choose from
  • can be easily extended by other modules to provide additional privacy levels

Requirements: Chaos tool suite (ctools)