Site Policy

Categories

Component ID

2393105

Component name

Site Policy

Component type

module

Maintenance status

Development status

Component security advisory coverage

not-covered

Downloads

1085

Component created

Component changed

Component body

This module provides some optional best practice configuration for your Drupal site to ensure all the correct policies are applied.

User 1

On Cron run, the user 1 account is checked
The user 1 account can be disabled if its not being used
The user 1 password can be scrambled

The user 1 account has all privileges. Losing control of the user 1 account can be a major security breach. It is better to have crafted user accounts on the site for audit purposes and security control.

Setup instructions

Instructions are contained in the project readme. Configuration is done in the settings.php file.

Here is an example of what you might put in there

// Scramble the user 1 password every 28 days.
$conf['site_policy_user_1_pw_scramble'] = 2419200;
// Disable the user 1 account after 7 days of not being used. $conf['site_policy_user_1_active_time'] = 604800;