Page 37 - Cyber Warnings
P. 37
Drupal (Core) Updates Screen
Be Selective When Choosing Modules
Drupal allows you to extend and customize your site with thousands of modules. Extending your
site's capabilities and customizing it to your requirements is important, however, it should never
come at the price of your website's security.
Even if your Drupal installation and modules are all up to date, it does not mean that a site is not
vulnerable to attack. Attackers can try to enumerate installed modules to discover what modules
you have installed on your Drupal site. By avoiding the installation of unnecessary modules, you
would automatically be reducing your site's attack surface.
When choosing modules to install, be selective. Before installing an extension, read about it
(ideally read reviews from other users on websites other than the extension developer's site).
This prevents you from installing malware or modules that do not fit your purpose.
Check how many downloads the extension has and when it was last updated by its authors. The
more downloads and recent updates the extension has, the more likely it is for a vulnerability
found, to be fixed quicker.
37 Cyber Warnings E-Magazine – March 2016 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide
