Security

While my team was building an extranet application for a client we came across
a slightly strange requirement from their InfoSec Audit team.

They want to forcibly log users out who have been active on the site for
longer than 12 hours making them re-authenticate.

This is not particularly user friendly - but audit teams tend to not be
particularly negotiable about ISO27000 requirements.

I had a look around and couldn't find anything which did specifically this -
so I took some time to write my first Drupal module.

A small utility module to intercept password from different forms like user login form, user registration form, etc.

The Firewall provides basic firewall functionality for site owners who do not have access the their server's firewall setup. Firewall allows the specified IP addresses to be either throttled (slowed down) or completely blocked from accessing the site.

This module can also be used in conjunction with the Honeytrap module.

The Bogus Legacy Appended-path Miminimizer (BLAM) module is a quick hack to suppress the legacy behavior of Drupal reporting a 200 and passing extra path arguments into the page callback (or silently accepting them).

Scramble (hash) the emails and/or passwords of users in a Drupal install. Some people consider those data items to be sensitive, personally identifiable information. After scrambling the data, you can make a database dump that is safer for distribution to someone you don't entirely trust.

This script is something you would run on a clone of your production site. To help remind you not to run it on your production installation, Bad judgement is a dependency.

Demonstration module for doing IP authentication with content fields.

Hosting Profile Roles extends Aegir to enable more control over what role(s) a client user is assigned during site install. Since, by default, Aegir client's are given UID1 during site installs, this module also allows UID1 to be assigned to another user. This allows tighter control of the client's user experience, and thus support for Software-as-a-Service (SaaS) type business models.

Current features

Additions to the front-end:

The predelete module hooks into the deletion process of nodes. By default it is not possible to react on a deleteion attempt before the deletion of a node. This is cured by providing the hook_predelete_node(). Other modules may implement the hook and add custom checks on the node that is about to be deleted.

The module ships with an API documentation and an example module that provides a single checkbox field. Nodes that contain the field could only be deleted if the checkbox is checked.

Overview

This module provides the ability to determine the appearance of a CAPTCHA challenge based on IP address on a form-by-form basis.

Description :

This module protects users email address, encrypting them into the database. This module doesn't alter user experience.
In case of database hacking, this sensitive data would be useless for the hacker.

It uses the Encrypt module, providing the encryption method.
Easy to use :

• install the DataBase Email Encryption (dbee) module : the encryption will be enabled for all users email address.
• Uninstall it or disable it : it will disable the users email address encryption for all users email address.

The encryption can be enforceded by using the Real AES module.