The CodeTree Backup for Drupal

Component type

module

Maintenance status

Development status

Component created

Component changed

This module will allow the user to make backups of their drupal installations along with a SQL dump of their Drupal database. By itself, the module operates manually, unrestricted.

With an active subscription from http://mycodetree.com, the module will automatically make the backups daily and the backups will be stored off-site, securely on the MyCodeTree servers.

PCI Update

Component type

module

Categories

Maintenance status

Development status

Downloads

8808

Component created

Component changed

A simple module to encompass updates to Drupal to satisfy vulnerabilities reported by Approved Scan Vendors (ASV), often as a result of the PCI DSS compliance processes.

Currently this module only affects the login form, but will be a home for updates as they are identified in the future

FileField Track

Component type

module

Maintenance status

Development status

Downloads

3985

Component created

Component changed

A simple module that tracks downloads of files added through CCK/Fields by asking anonymous users to enter their email address. Returning anonymous users are tracked using a cookie. A tracking interface shows email address and user account information for tracked files downloaded on the site.

Why only have users enter their email address? Email addresses are a unique and easy way to identify users, and the barrier for entry is lower than actually registering for the site.

Set up is easy:

Modalframe Authenticate

Component type

module

Maintenance status

Development status

Component created

Component changed

This module is an add-on to the Modalframe API module. It enables administrators to insert an additional authentication to send certain forms. This will serve as means of protecting certain duties from maluse or mistakes.
Administrator needs to define forms which will receive the extra authentication. When user tries to submit the form, this module will popup a new modalframe with the username prefilled, prompting for password. If no password is given or it's wrong, the form is not sent.

Menu token protect (CSRF protection)

Component type

module

Categories

Maintenance status

Development status

Component created

Component changed

Automatically adds a drupal_get_token query string parameter to any menu links that correspond to a menu router item that has 'token' => TRUE in its hook_menu() definition. This helps prevent certain links from CSRF attack requests.

Protection support for core menu callbacks

By default this module adds token CSRF protection for the following core menu callbacks:

user/logout

Which in turn ensures any menu links are output as:

user/logout?token=hash-string-here

And the token is checked using hook_menu_site_status_alter().

Usage

function mymodule_menu() {
  $items['mymodule/path'] = array(
    'title' => 'Sample dangerous callback',
    'description' => 'A sample menu callback that should be protected from CSRF attacks using tokens.',
    'page callback' => 'mymodule_dangerous_callback',
    'access arguments' => array('administer mymodule'),
    'token' => TRUE, // Add this to automatically have this path protected.
  );
  return $items;
}

Auditing

Component type

module

Maintenance status

Development status

Component created

Component changed

Auditing is a module that adds a permission to Drupal. Roles with that permission are no longer able to submit forms and therefore are only able to see content. You can administer which form ids are still usable by users with the given permission (like login or search forms). Together with the built-in permissions it is so possible to create an audit role that can be given to internel or external auditing department or just to the head of a marketing to department ot be able to see what is going on on the site.