Security

This module implements some aspects that helps your site to be compliant to the Spanish LOPD Law about personal data management.

Its views integration help you to manage how do you use the registered data in reports and exports.

Features

• Register login and logout events.
• View report of registered events (requires views module)

Maintainers for 8.x: penyaskito, facine, jlbellido.
Maintainers for 7.x: penyaskito, facine, jlbellido.
Maintainers for 6.x: jlbellido.

Paranoid Form Validator can be used to prevent security attacks (cross-site scripting, SQL injection) carried out by submitting forms with malicious data in some cases. It works by adding extra validation to forms and raising error if unsafe data were submitted in form fields.

Manages OpenSSH public keys for Drupal accounts.

• Allow associating more than one key to a user.
• Disallow adding the same key twice by calculating and using the key fingerprint.
• Validates the key format.
• Checks keys against the openssh-blacklist using ssh-vulnkey.

Description

Need to add a list of admin OpenIDs to many websites and not lose sanity while maintaining that list across all servers? This module is for you.

You can still maintain arbitrary list of OpenIDs on each site, but the framework ensures a list of allowed and banned OpenIDs (for the "admin" user), in addition to the local list.

This tool is for Drupal service-providers that maintain many websites and need to give admin access to a number of people, across multiple websites, for maintenance and support purposes.

The whitelist input filter disables HTML forms whose domains are not part of an approved whitelist. It works by stripping out the "action" attribute for all forms which are not on the whitelist. For example, you could use this to enable all forms that submit to http://www.good-site.com while disabling forms that submit to http://www.evil-site.com or other suspicious destinations.

Content protector allows an arbitrary directory to be protected by Drupal authentication.

For example, a legacy folder that must live inside the webroot of which its contents cannot be viewed without valid Drupal login credentials or a particular user role.

This module achieves this by writing a .htaccess to the protected folder and redirecting all traffic transparently through Drupal.

The 443 Session module makes using HTTPS on your site simple. It is most useful for doing mixed HTTPS where some pages are sent via HTTP, and others via HTTPS. It can be used to protect credit card transactions or to protect against session hijacking (via tools such as Firesheep).

Droptor monitoring service has been discontinued.

PermMill is a module that allows you to define fine-grained permissions on a per-page basis, by altering the menu.
It provides a way to re-define 'required' and 'sufficient' permissions to access a menu item, plus a custom user_access-like function to evaluate the new, more complex, 'access arguments' definition.

Overview

The Lightweight Directory Access Protocol (LDAP) project provides integration with LDAP for authentication, user provisioning, authorization, feeds, and views. It also provides apis and building blocks (query and server configuration storage) for other modules.