Security

Summary

The module connects any Drupal 7 site with drupalmonitor.com. As the name says, Drupalmonitor is a tool to actively monitor Drupal sites. It's not only a "heartbeat" kind of monitoring. It's much more powerful. Using the drupalmonitor connector, the tool can gather data from the drupal site like how many users, nodes, last cron run, page requests, etc. On drupalmonitor.com, the data will be processed and shown in graphs over time.

This module is not intended to be a remote kill for a client's site. If that is what you need, take a look at killswitch.

Security Questions provides administrator configurable challenge questions for use during the log in and password reset processes. Think of it like most bank website logins.

Log In Process

If enabled, depending on the selected protection mode, the log in form is altered in 1 of 2 ways:

Sessions that expire - in a user-comfy manner

Role-based session expiration/prolongation

Drupal 7's default session settings make sessions live almost indefinitely - that may present security and performance issues.
State get's round the problem by combining roles with user-activitity sensing and AJAX calls.
Sessions may still continue indefinetely for some kinds of users
- say non-logged-in visitors to your web shop.

Diceware.module adds a block with diceware password samples to the site.

Diceware is a technique that uses dice to produce random text for passphrases and other uses. The Diceware method provides an easy way to create strong passphrase that are easy to remember. (see: http://www.diceware.com/ )

This module does NOT change the way drupal handles passwords. It just presents random-examples of passphrases for inspiring the user to use one or better create an own one.

The Mixed Session module enables mixed HTTP(S) sessions for a site, securely and without loss of session data. The phrase "mixed sessions" refers to providing, with respect to a user visiting a site, some content over an insecure (HTTP) connection and other content over a secure (HTTPS) connection. For example, a shopping site may prefer to display product content in insecure mode (HTTP) while being able to protect sensitive content (e.g credit card details and authenticated user account information) using secure mode (HTTPS).

This project will enable you to be automatically signed on on websites that are linked with a broker website, I am writing the whole thing out as an article on my website.

A port of the Joomla module as well as the DynamicDrive silent no right click script code.

[COMING VERY SOON]

Are you serving content to mirrors?

Are those mirrors capturing user logins?

When accidental or fraudulent mirrors are found get: a message in front of admin's faces, watchdog entries, and a report of domains. This is just an awareness tool.

How it works
This module has two modes which will depend on if you've set $base_url in your sites/default/settings.php file...

This module tracks when users have roles assigned or removed and which user did the change.

This provides data that can be used to form a timeline for a user to see what roles they have been granted, or revoked, this ability is at present not included in the module, but using the custom_reports module the implementation can easily get reports on the data they require.

This module has been sponsored by The Economist

Similar module: