Drupal requires cookies for user login, but by default no error message is given when a user's browser is set not to accept cookies. The result is a broken site--after attempting to log in, the user is returned to an empty login form with no indication of why login failed.
The password_reset module allows for passwords to be reset without involving e-mail addresses through the use of security questions. This module would typically be used on sites that do not require users to enter their e-mail addresses or prefer not having to deal with spam folder issues etc.
This module supports the following features:
The salt module allows for Drupal passwords to be 'salted' - an internal string is appended to the password prior to storage - making them less prone to dictionary attacks, rainbow tables and the like.
This module currently stores the salted password in the database. Consequently, disabling this module or changing the salt at any time will require users with salted passwords to recover their passwords.
Nocase is a simple module that allows for case insensitive Drupal passwords.
N.B. This module currently stores (and assumes that all stored) passwords in lower case in the database. In other words, it modifies user input (which is not really a good thing) and might require existing users not using all lower-case passwords to reset them. Furthermore, once this module has been installed, uninstalling it is not a recommended course of action as users using mixed-case passwords will not be able to log in unless they type the same password in lower-case.
Patches are welcome :)
Single Login is a session management system for Drupal. It allows the site administrator to create a policy to detect, and prevent, duplicate logins on the same account. This is obviously handy for a site that requires paid subscriptions. Once a duplicate login is detected from a different system, the first login gets logged out. The admin can set a policy that determines how often and within what time period a session can "ping pong" between machines. Should the policy conditions be met, the admin can specify an action,typically to block the offending account.
Module that imports data from vBulletin into Drupal, including social groups, private messages, blogs and birthdays, even Photopost! Also a Drupal module that lets existing vB users login to Drupal.
This module was developed for The Webmaster Forums (yes, we do like Drupal's forum!)
This module allows taxonomy terms will be used as roles. Also collaborates with modules Mass Contact (http://drupal.org/project/mass_contact) and TAC Lite (http://drupal.org/project/tac_lite) to provide categories and restrict access to nodes tagged with a specific term (selected by Taxorole) only to be accessible by the equivalent roles.
This module is abandoned due to a security issue the maintainer never fixed.
If you want to use this module, your options are:
Sends an email to a configurable address whenever a user profile is changed. This module compliments the functionality of User registration notification.
This module stores password hashes securely.
The default password hashes in Drupal 6 (and before) are rather insecure. MD5 is easy to crack, should an attacker find a database dump or gain access to your database. This module implements secure password hashes using the phpass password hashing method - multiple rounds of hashing and salting that make reversing the hash significantly more difficult to break by brute-force attack. This is the same approach that is used for Drupal 7.
