By: Prem Tiwari | Last Updated: | In: Drupal, Drupal Beginners
Hi friends, hope you are doing good. In this tutorial, I will explain the importance of security parameters you should use in Drupal website. In this tutorial, you should find the 7 security modules for Drupal you should use on your website or web application.
Below is the list of 7 Drupal security modules which will increase the security level of your website and prevent from hacking your site.
A password policy can be defined with a set of constraints which must be met before a user password change will be accepted. Each constraint has a parameter allowing for the minimum number of valid conditions which must be met before the constraint is satisfied.
Example: An uppercase constraint (with a parameter of 2) and a digit constraint (with a parameter of 4) means that a user password must have at least 2 uppercase letters and at least 4 digits for it to be accepted.
This module is intended to add an administration interface for hidden flood control variables in Drupal 7, like the login attempt limiters and any future hidden variables.
This module provides various security-hardening options. This lets you mitigate the risks of exploitation of different web application vulnerabilities.
Content Security Policy implementation via Сontent-Security-Policy (official name), X-Content-Security-Policy (Firefox and IE) and X-WebKit-CSP (Chrome and Safari) HTTP response headers (configuration page and reporting CSP violations to watchdog)
Control over Internet Explorer / Apple Safari / Google Chrome internal XSS filter via X-XSS-Protection HTTP response header
This module provides a site administrator the ability to log users out after a specified time of inactivity.
It is highly customizable and includes “site policies” by role to enforce log out.
By default, a session is created for each browser that a user uses to log in. This module will force the user to log out any extra sessions after they exceed the administrator-defined maximum.
This module supports two ways of interacting with Nagios. NRPE or standard checking over HTTP. The NRPE approach is recommended, as it is far more secure. If you are using the HTTP check method then be aware this module exposes the following information from your website.
SSL Certificate is essential for every site to maintain security and protect user confidential data. There are various types of SSL Certificate available in the market such as Domain Validation Certificate for the single domain protection, Extended Validation to display company in the browser address bar, Wildcard Certificate to secure unlimited subdomain, etc. A customer can select best SSL Certificate based on their requirement. Many resellers like Cheap SSL Shop offers cheap SSL certificate of popular brands like Comodo, RapidSSL, GeoTrust & Thawte. Once you install SSL Certificate on your web server, a small and easy process which will redirect the required pages to an SSL version of the web pages. This module makes sure that the user is running on a secure page when they create or edit content, view user details or administer the site.
Prem Tiwari is the founder of FreeWebMentor.com and also a professional developer who has vast experience in PHP and open source technologies. Apart from this, he is a blogger by hobby and also he has been a regular speaker of WordPress sessions in various IT Companies. View all posts by Prem Tiwari
Drupal, drupal security check, drupal security module, drupal security modules, drupal security review, password, Security, Technology
