Security

Summary

The Honeytrap module allows site owners and system administrators to monitor web crawlers that do not follow the rules set out in the robot.txt file or via the RobotsText module or similar method and as a result put an unnecessarily high load on servers.

This is especially important for large, very high traffic and/or high profile sites where the activity of these non-compliant crawlers can bring servers to their knees. If these crawlers are not blocked or slowed down quickly enough then these crawlers can result in servers being knocked completely offline.

Experimental module to enable signing outgoing e-mail.

HSTS (HTTP Strict Transport Security) is a standard used by HTTP client applications to enforce the use of SSL communication between a site and the client. This module adds the appropriate headers to your Drupal site to trigger the HSTS on a supported client.

The Poor Mans Firewall (PMF) provides basic firewall functionality for site owners who do not have access the their server's firewall setup. PMS allows the specified IP addresses to be either throttled (slowed down) or completely blocked from accessing the site. This module can also be used in conjunction with the Honeytrap module.

Separation domains of Backend / Frontend

set a domain for the administration area, the normal user can not access to the administartion pages which the path start with 'admin/...', it will throw a 404 page not found.

Second-factor authentication for Drupal sites. Drupal provides authentication via something you know -- a username and password while TFA module adds a second step of authentication with a check for something you have -- such as a code sent to (or generated by) your mobile phone.

CloudFlare is a FREE reverse proxy, firewall, and global content delivery network and can be implemented without installing any server software or hardware.

On average, CloudFlare-powered websites load 30% faster, use 60% less bandwidth, and process 65% fewer requests. CloudFlare-powered websites are protected from many forms of malicious activity including: comment spam, email harvesting, SQL injection, cross-site scripting, and DDoS (denial of service) attacks.

This is a project to provide client side pgp encryption of user and site-wide contact forms using the OpenPGP.js library.

Visitors with javascript enabled will be able to click on an "Encrypt this message" button on any contact form for a user who has uploaded their public key. Because this encryption happens on the client side, clear text is not transmitted over the network.

This modules allows users to login to from Drupal into Blackboard without re-entering authentication credentials. The Drupal session is recognized in Blackboard.

Drush ACLs is an extension created with the goal of providing an easy way to a choosen set of filesystem permissions to a Drupal deployment, and optionally help you keep them by hooking into Drush commands to apply the permissions as new code is deployed.