Drupal

Drupal (/ˈdruːpəl/)[5] is a free and open-source web content management framework written in PHP and distributed under the GNU General Public License.[4][6][7] Drupal provides a back-end framework for at least 12% of the top 10,000 websites worldwide[8][9] – ranging from personal blogs to corporate, political, and government sites.[10] Systems also use Drupal for knowledge management and for business collaboration.[11]

Drupal
Drupal 8 in action. Showing in-context editing and previews (WYSIWYG).
Original author(s)Dries Buytaert
Developer(s)Drupal community
Initial releaseJanuary 15, 2001 (2001-01-15)[1]
Stable release
9.1.4[2] / 2021-02-03[±]
RepositoryDrupal Repository
Written inPHP, using Symfony
Operating systemUnix-like, Windows
PlatformWeb platform
Size140 MB (uncompressed Drupal 9.1 core)[3]
TypeContent management framework, content management system, blog software
LicenseGPLv2+[4]
Websitewww.drupal.org

As of December 2019, the Drupal community comprised more than 1.39 million members,[12][13] including 117,000 users actively contributing,[14] resulting in more than 44,000 free modules that extend and customize Drupal functionality,[15] over 2,800 free themes that change the look and feel of Drupal,[16] and at least 1,300 free distributions that allow users to quickly and easily set up a complex, use-specific Drupal in fewer steps.[17]

The standard release of Drupal, known as Drupal core, contains basic features common to content-management systems. These include user account registration and maintenance, menu management, RSS feeds, taxonomy, page layout customization, and system administration. The Drupal core installation can serve as a simple website, a single- or multi-user blog, an Internet forum, or a community website providing for user-generated content.

Drupal also describes itself as a Web application framework.[18] When compared with notable frameworks, Drupal meets most of the generally accepted feature requirements for such web frameworks.[19][20]

Although Drupal offers a sophisticated API for developers, basic Web-site installation and administration of the framework require no programming skills.[21]

Drupal runs on any computing platform that supports both a web server capable of running PHP and a database to store content and configuration.

History
Latest major releases
VersionRelease date
Current stable version: 9.1.3January 20, 2021[3]
Older version, yet still maintained: 8.9.13January 20, 2021[22]
Older version, yet still maintained: 7.78January 20, 2021[23]
Old version, no longer maintained: 6.38February 24, 2016[24]
Old version, no longer maintained: 5.23August 11, 2010[25]
Legend:
Old version
Older version, still maintained
Latest version
Latest preview version
Future release
Legend:
Old version
Older version, still maintained
Latest version
Latest preview version
Future release

Originally written by Dries Buytaert as a message board, Drupal became an open source project in 2001.[26] The name Drupal represents an English rendering of the Dutch word druppel, which means "drop" (as in a water droplet).[27] The name came from the now-defunct Drop.org website, whose code slowly evolved into Drupal. Buytaert wanted to call the site "dorp" (Dutch for "village") for its community aspects, but mistyped it when checking the domain name and thought the error sounded better.[26]

Interest in Drupal got a significant boost in 2003 when it helped build "DeanSpace" for Howard Dean, one of the candidates in the U.S. Democratic Party's primary campaign for the 2004 U.S. presidential election. DeanSpace used open-source sharing of Drupal to support a decentralized network of approximately 50 disparate, unofficial pro-Dean websites that allowed users to communicate directly with one another as well as with the campaign.[28] After Dean ended his campaign, members of his Web team continued to pursue their interest in developing a Web platform that could aid political activism by launching CivicSpace Labs in July 2004, "...the first company with full-time employees that was developing and distributing Drupal technology."[29] Other companies began to also specialize in Drupal development.[30][31] By 2013 the Drupal website listed hundreds of vendors that offered Drupal-related services.[32]

As of 2014 Drupal is developed by a community.[33] From July 2007 to June 2008 the Drupal.org site provided more than 1.4 million downloads of Drupal software, an increase of approximately 125% from the previous year.[34][35]

As of January 2017 more than 1,180,000 sites use Drupal.[36] These include hundreds of well-known organizations,[37] including corporations, media and publishing companies, governments, non-profits,[38] schools, and individuals. Drupal has won several Packt Open Source CMS Awards[39] and won the Webware 100 three times in a row.[40][41]

Drupal 6 was released on February 13, 2008,[42] on March 5, 2009 Buytaert announced a code freeze for Drupal 7 for September 1, 2009.[43] Drupal 7 was released on January 5, 2011, with release parties in several countries.[44] After that, maintenance on Drupal 5 stopped, with only Drupal 7 and Drupal 6 maintained.[45] Drupal 7 series maintenance updates are released regularly.[46] Previously, Drupal 7's end-of-life was scheduled for November 2021, but given the impact of COVID-19, the end of life has been pushed back until November 28, 2022. Drupal 8 will still be end-of-life on November 2, 2021. [47]

On October 7, 2015 Drupal 8 first release candidate (rc1) was announced.[48] Drupal 8 includes new features and improvements for both users and developers, including: a revamped user interface; WYSIWYG and in-place editing; improved mobile support; added and improved key contributed modules including Views, Date, and Entity Reference; introduced a new object-oriented backend leveraging Symfony components; revamped configuration management; and improved multilingual support. Drupal 8 rc1 is the collective work of over 3,200 core contributors.[48]

Drupal 8.0.0 was released on November 19, 2015.[49] Subsequent major and minor releases which bring numerous improvements and bug fixes (including CKEditor WYSIWYG enhancements, added APIs, an improved help page) can be found on the Releases page.[2]

Drupal 9 initial release 9.0.0 was on June 3, 2020.[50]

Drupal 10's initial release schedule is on July 2022.[51]

Core

In the Drupal community, "core" refers to the collaboratively built codebase that can be extended through contributory modules and – for versions prior to Drupal 8 – is kept outside of the "sites" folder of a Drupal installation.[52] (Starting with version 8, core is kept in its own 'core' sub-directory.) Drupal core is the stock element of Drupal. Common Drupal-specific libraries, as well as the bootstrap process, are defined as Drupal core; all other functionality is defined as Drupal modules including the system module itself.

In a Drupal website's default configuration, authors can contribute content as either registered or anonymous users (at the discretion of the administrator). This content is accessible to web visitors through a variety of selectable criteria. As of Drupal 8, Drupal has adopted some Symfony libraries into Drupal core.

Core modules also includes a hierarchical taxonomy system, which lets developers categorize content or tagged with key words for easier access.[21]

Drupal maintains a detailed changelog of core feature updates by version.[53]

Core modules

Drupal core includes modules that can be enabled by the administrator to extend the functionality of the core website.[54]

The core Drupal distribution provides a number of features, including:[54]

  • Access statistics and logging
  • Advanced search
  • Books, comments, and forums
  • Caching, lazy-loading content (using BigPipe) and feature throttling for improved performance
  • Custom content type and fields, and user interface to create, manage, and display lists of content.
  • Descriptive URLs
  • Multi-level menu system
  • Multi-site support[55]
  • Multi-user content creation and editing
  • RSS feed and feed aggregator
  • Security and new release update notification
  • User profiles
  • Various access control restrictions (user roles, IP addresses, email)
  • Workflow tools (triggers and actions)

Core themes

Drupal includes core themes, which customize the "look and feel" of Drupal sites,[56] for example, Garland and Bartik.

The Color Module, introduced in Drupal core 5.0, allows administrators to change the color scheme of certain themes via a browser interface.[57]

Localization

As of January 2017, Drupal had been made available in 100 languages and English (the default).[58] Support is included for right-to-left languages such as Arabic, Persian, and Hebrew.[59]

Drupal localization is built on top of gettext, the GNU internationalization and localization (i18n) library.

Auto-update notification

Drupal can automatically notify the administrator about new versions of modules, themes, or the Drupal core.[59] It's important to update quickly after security updates are released.

Before updating it is highly recommended to take backup of core, modules, theme, files and database. If there is any error shown after update or if the new update is not compatible with a module, then it can be quickly replaced by backup. There are several backup modules available in Drupal.

On October 15, 2014, a sql injection vulnerability was announced and update released.[60] Two weeks later the Drupal security team released an advisory explaining that everyone should act under the assumption that any site not updated within 7 hours of the announcement are infected.[61] Thus, it can be extremely important to apply these updates quickly and usage of a tool to make this process easier like drush is highly recommended.

Database abstraction

Prior to version 7, Drupal had functions that performed tasks related to databases, such as SQL query cleansing, multi-site table name prefixing, and generating proper SQL queries. In particular, Drupal 6 introduced an abstraction layer that allowed programmers to create SQL queries without writing SQL.

Drupal 9 extends the data abstraction layer so that a programmer no longer needs to write SQL queries as text strings. It uses PHP Data Objects to abstract the database. Microsoft has written a database driver for their SQL Server. Drupal 7 supports the file-based SQLite database engine, which is part of the standard PHP distribution.

Windows development

With Drupal 9's new database abstraction layer, and ability to run on the Windows web server IIS, it is now easier for Windows developers to participate in the Drupal community.

A group on Drupal.org is dedicated to Windows issues.[62]

Accessibility

Since the release of Drupal 7, Web accessibility has been constantly improving in the Drupal community.[63] Drupal is a good framework for building sites accessible to people with disabilities, because many of the best practices have been incorporated into Drupal Core.

Drupal 8 saw many improvements from the Authoring Tool Accessibility Guidelines (ATAG) 2.0 guidelines which support both an accessible authoring environment as well as support for authors to produce more accessible content.

The accessibility team is carrying on the work of identifying and resolving accessibility barriers and raising awareness within the community.

Drupal 8 has good semantic support for Rich Internet Applications through WAI-ARIA. There have been many improvements to both the visitor and administrator sides of Drupal, especially:

  • Drag and drop functionality;
  • Improved color contrast and intensity;
  • Adding skip navigation to core themes;
  • Adding labels by default for input forms;
  • Fixing CSS display:none with consistent methods for hiding and exposing text on focus;
  • Adding support for ARIA Live Regions with Drupal.announce(); and
  • Adding a TabbingManager to support better keyboard navigation.[64]

The community also added an accessibility gate for core issues in Drupal 8.[65]

Extending the core

Drupal core is modular, defining a system of hooks and callbacks, which are accessed internally via an API.[66] This design allows third-party contributed modules and themes to extend or override Drupal's default behaviors without changing Drupal core's code.

Drupal isolates core files from contributed modules and themes. This increases flexibility and security and allows administrators to cleanly upgrade to new releases without overwriting their site's customizations.[67] The Drupal community has the saying, "Never hack core," a strong recommendation that site developers do not change core files.[52]

Modules

Contributed modules offer such additional or alternate features as image galleries, custom content types and content listings, WYSIWYG editors, private messaging, third-party integration tools,[68] integrating with BPM portals,[69] and more. As of December 2019 the Drupal website lists more than 44,000 free modules.[15]

Some of the most commonly used contributed modules include:[70]

  • Content Construction Kit (CCK): allows site administrators to dynamically create content types by extending the database schema. "Content type" describes the kind of information. Content types include, but are not limited to, events, invitations, reviews, articles, and products. The CCK Fields API is in Drupal core in Drupal 7.[71][72]
  • Views: facilitates the retrieval and presentation, through a database abstraction system, of content to site visitors. Basic views functionality has been added to core in Drupal 8.[73]
  • Panels: drag and drop layout manager that allows site administrators to visually design their site.
  • Rules: conditionally executed actions based on recurring events.
  • Features: enables the capture and management of features (entities, views, fields, configuration, etc.) into custom modules.
  • Context: allows definition of sections of site where Drupal features can be conditionally activated
  • Media: makes photo uploading and media management easier
  • Services: provides an API for Drupal.
  • Organic Groups Mailing List

Themes

As of December 2019, there are more than 2,800 free community-contributed themes.[16] Themes adapt or replace a Drupal site's default look and feel.

Drupal themes use standardized formats that may be generated by common third-party theme design engines. Many are written in the PHPTemplate engine[74] or, to a lesser extent, the XTemplate engine.[75] Some templates use hard-coded PHP. Drupal 8 and future versions of Drupal integrate the Twig templating engine.

The inclusion of the PHPTemplate and XTemplate engines in Drupal addressed user concerns about flexibility and complexity.[76] The Drupal theming system utilizes a template engine to further separate HTML/CSS from PHP. A popular Drupal contributed module called 'Devel' provides GUI information to developers and themers about the page build.

Community-contributed themes at the Drupal website are released under a free GPL license.[77][78]

Distributions

In the past, those wanting a fully customized installation of Drupal had to download a pre-tailored version separately from the official Drupal core. Today, however, a distribution defines a packaged version of Drupal that upon installation, provides a website or application built for a specific purpose.

The distributions offer the benefit of a new Drupal site without having to manually seek out and install third-party contributed modules or adjust configuration settings.[79] They are collections of modules, themes, and associated configuration settings that prepare Drupal for custom operation. For example, a distribution could configure Drupal as a "brochure" site rather than a news site or online store.

Architecture

Drupal is based on the Presentation Abstraction Control architecture, or PAC.

The menu system acts as the Controller. It accepts input via a single source (HTTP GET and POST), routes requests to the appropriate helper functions, pulls data out of the Abstraction (nodes and, from Drupal 5 onwards, forms), and then pushes it through a filter to get a Presentation of it (the theme system).

It even has multiple, parallel PAC agents in the form of blocks that push data out to a common canvas (page.tpl.php).[80]

Community

Drupal.org has a large community of users and developers who provide active community support by coming up with new updates to help improve the functionality of Drupal.[81] As of January 2017 more than 105,400 users are actively contributing.[14] The semiannual DrupalCon conference alternates between North America, Europe and Asia.[82] Attendance at DrupalCon grew from 500 at Szeged in August 2008, to over 3,700 people at Austin, Texas in June, 2014.

Smaller events, known as "Drupal Camps" or DrupalCamp, occur throughout the year all over the world.[83] The annual Florida DrupalCamp brings users together for Coding for a Cause that benefits a local nonprofit organization, as does the annual GLADCamp (Greater Los Angeles Drupal Camp) event, Coders with a Cause.

The Drupal community also organizes professional and semi-professional gatherings called meetups at a large number of venues around the world.

There are a number of active Drupal forums, mailing lists and discussion groups.[84][85][86] Drupal also maintains several IRC channels on the Freenode network.[87]

There are over 30 national communities[88] around drupal.org offering language-specific support.

Notable Drupal users include NBC, Taboola, Patch, and We the People.[89]

Security

Drupal's policy is to announce the nature of each security vulnerability once the fix is released.[90][91]

Administrators of Drupal sites are automatically notified of these new releases via the Update Status module (Drupal 6) or via the Update Manager (Drupal 7).[92]

Drupal maintains a security announcement mailing list, a history of all security advisories, a security team home page, and an RSS feed with the most recent security advisories.[93][94][95]

In mid-October 2014, Drupal issued a "highly critical" security advisory regarding an SQL injection bug in Drupal 7, also known as Drupalgeddon.[96][97][98]

Downloading and installing an upgrade to Drupal 7.32 fixes the vulnerability, but does not remove any backdoor installed by hackers if the site has already been compromised.[99] Attacks began soon after the vulnerability was announced. According to the Drupal security team, where a site was not patched within hours of the announcement, it should be considered compromised and taken offline by being replaced with a static HTML page while the administrator of its server must be told that other sites on the same server may also have been compromised.

To solve the problem, the site must be restored using backups from before October 15, be patched and manually updated, and anything merged from the site must be audited.[100]

In late March 2018, a patch for vulnerability CVE-2018-7600, also dubbed Drupalgeddon2, was released. The underlying bug allows remote attackers without special roles or permissions to take complete control of Drupal 6, 7, and 8 sites.[101][102] Starting early April, large scale automated attacks against vulnerable sites were observed, and on April 20, a high level of penetration of unpatched sites was reported.[103]

On 23 December 2019, Drupal patched an arbitrary file upload flaw. The file-upload flaw affects Drupal 8.8.x before 8.8.1 and 8.7.x before 8.7.11, and the vulnerability is listed as moderately critical by Drupal.[104][105]

Drupal 6 Long Term Support

While Drupal 6 is no longer supported as of 24th Feb 2016, there are two approved Long Term Services Vendors.[106]

Drupal 7 Extended Support

Just like Drupal 6 Long Term Support, Drupal 7 will have its own after its official end-of-life 28th November 2022.[107][108]

Drupal certifications

Drupal certifications managed by Acquia is available whether you're an experienced Drupal developer or a Drupal site content editor. As of Jul 2020, you can choose from either Drupal 7, 8 or 9.[109]

See also

References
  1. "CHANGELOG.txt". Drupal.org. Retrieved 8 June 2020.
  2. "Releases for Drupal core". Drupal Project. Retrieved 2021-02-05.
  3. "Drupal 9 releases; drupal.org". Retrieved 2021-01-22.
  4. "Licensing FAQ". drupal.org. Retrieved 2009-04-08.
  5. A query on Drupal's official website on March 2009: How does one pronounce "Drupal"? (accessed 19 June 2013)
  6. "The Drupal Overview". drupal.org. Retrieved 2009-04-08.
  7. "System Requirements". drupal.org. Retrieved 2009-04-08.
  8. W3Techs (2011-07-15). "Usage of content management systems for websites". Retrieved 2011-07-15.
  9. BuiltWith (2011-03-28). "Drupal Usage Statistics". Retrieved 2020-12-06.
  10. "The State of Drupal 2010 speech". 2001-03-10. Retrieved 2011-08-31.
  11. "Knowledge management with Drupal".
  12. "Getting Involved | Drupal.org". www.drupal.org. 2019-12-21. Archived from the original on 2019-12-22. Retrieved 2018-09-21. Drupal.org Activity
  13. "1 Million Users on Drupal.org!". www.drupal.org. 2013-10-11.
  14. "Drupal for Developers | Drupal.org". www.drupal.org. 2019-12-21. Archived from the original on 2019-12-22. Retrieved 2017-04-21.
  15. "Module project | Drupal.org". www.drupal.org. 2019-12-21. Archived from the original on 2019-12-22. Retrieved 2017-09-21.
  16. "Theme project | Drupal.org". www.drupal.org. 2019-12-21. Archived from the original on 2019-12-22. Retrieved 2017-09-21.
  17. "Distribution project | Drupal.org". www.drupal.org. 2019-12-21. Archived from the original on 2019-12-22. Retrieved 2017-09-21.
  18. "Drupal 7 as an enterprise web application framework". drupal.org.
  19. O'Connor, William (2014-08-19). "The Drupal API turns a CMS into a true enterprise application - O'Reilly Radar". O'Reilly Media. Retrieved 2017-04-11.
  20. Diana, Dupuis (2013-05-15). "Drupal Is a Framework: Why Everyone Needs to Understand This". Linux Journal.
  21. "Features". drupal.org. Retrieved 2009-04-08.
  22. "Drupal 8 releases; drupal.org". Retrieved 2021-01-22.
  23. "Drupal 7 releases; drupal.org". Retrieved 2021-01-22.
  24. "Drupal 6 releases; drupal.org". Retrieved 2021-01-22.
  25. "Drupal 5 releases; drupal.org". Retrieved 2021-01-22.
  26. "History". drupal.org. Retrieved 2009-04-08.
  27. "Druppel: Dutch to English Translation". Babylon Translation. Archived from the original on 2009-04-13. Retrieved 2009-04-08.
  28. Benjamin Melançon; et al. (2011). The Definitive Guide to Drupal 7 (2nd ed.). Apress. p. 823. ISBN 9781430231356.
  29. Critchley, Spencer (2006-05-03). "Digital Politics: An Interview With CivicSpace Founder Zack Rosen". O'Reilly Media. Retrieved 2012-05-27.
  30. Kreiss, Daniel (2012-03-05). "Dean, Romney, and Drupal: Values and Technological Adoption". Culture Digitally. Retrieved 2012-05-27.
  31. Samantha M. Shapiro, "The Dean Connection", The New York Times December 7, 2003, accessed May 27, 2012.
  32. "Marketplace". drupal.org. Retrieved 2013-04-18.
  33. Koenig, Josh. "Growth Graphs". Groups.Drupal. Retrieved 2009-04-08.
  34. Buytaert, Dries (2008). "Drupal Download Statistics". Retrieved 2009-04-08.
  35. Buytaert, Dries (2007). "Drupal Download Statistics". Retrieved 2009-04-08.
  36. "Usage statistics for Drupal core".
  37. "Drupal Sites". Dries Buytaert. Retrieved 2010-07-20.
  38. "List of Nonprofit, NPO, NGO Websites Using Drupal". ENGINE Industries. Archived from the original on 2009-12-24. Retrieved 2010-07-20.
  39. "OSS CMS Award Previous Winners". Packt Publishing. Archived from the original on 2009-07-07. Retrieved 2009-04-08.
  40. "Drupal is a Webware 100 winner for the third year in a row". Drupal.org. Retrieved 2011-08-31.
  41. "Cnet.com". News.cnet.com. 2009-05-19. Retrieved 2011-08-31.
  42. "Drupal 6.0 released | Drupal.org".
  43. "Buytaert.net". Buytaert.net. Retrieved 2011-08-31.
  44. "Drupal 7 to be released on January 5 (with one ginormous party)". Buytaert.net. Retrieved 2011-08-31.
  45. "Xplain Hosting Drupal 7 Quickstart training seminar". Scoop. 2010-12-16.
  46. "drupal 7.24". drupal.org. Retrieved 2013-11-20.
  47. "Extending Drupal 7's End-of-Life - PSA-2020-06-24". Retrieved 2020-07-05.
  48. "Drupal 8.0.0-rc1 announcement". drupal.org.
  49. "Drupal 8.0.0 released". drupal.org. Retrieved 19 November 2015.
  50. "drupal 9.0.0". Drupal.org. Retrieved 2020-06-03.
  51. "State of Drupal presentation (July 2020)". dri.es.
  52. "Never hack core". drupal.org.
  53. "Drupal 7.39 released". drupal.org. Retrieved 2015-09-19.
  54. "Documentation: Core modules and themes". drupal.org. Retrieved 2021-01-22.
  55. "Documentation: Multisite Drupal".
  56. Buytaert, Dries. "Garland, the new default core theme". drupal.org. Retrieved 2009-04-08.
  57. "Color: Allows the user to change the color scheme of certain themes". drupal.org. Retrieved 2009-04-08.
  58. "Drupal core translation downloads". drupal.org. Retrieved 2017-01-30.
  59. "Drupal 6.0 released". drupal.org. Retrieved 2009-04-08.
  60. "SA-CORE-2014-005 - Drupal core - SQL injection". Https. Retrieved December 3, 2014.
  61. "Drupal Core - Highly Critical - Public Service announcement - PSA-2014-003". Https. Retrieved December 3, 2014.
  62. "Drupal on Windows Group". drupal.org. Retrieved 2011-02-14.
  63. Killesreiter, Gerhard (2013-02-25). "Accessibility statement". drupal.org. Retrieved 2013-04-16.
  64. "Drupal 8 Accessibility Features".
  65. Scholten, Roy (2012-12-10). "Drupal core gates". drupal.org. Retrieved 2013-04-16.
  66. "API Reference". drupal.org. Retrieved 2009-04-08.
  67. "File and directory management". drupal.org.
  68. "Integrating Drupal with External Systems". specbee.com. 2018-08-24. Retrieved 2018-08-24.
  69. "Drupal Camunda BPM Integration". Srijan Technologies. Srijan Technologies.
  70. "Project usage overview". Drupal.org. Retrieved 2011-08-18.
  71. "DRUPAL 5 TO DRUPAL 7". Archived from the original on 2017-07-04. Retrieved 2015-03-24.
  72. "Field API". 2009. Retrieved 2009-05-08.
  73. "Views in Drupal Core initiative: Status report and roadmap". Retrieved 2014-11-04.
  74. "PHPTemplate theme engine". drupal.org. Archived from the original on 2009-03-08. Retrieved 2009-04-08.
  75. "XTemplate theme engine". drupal.org. Archived from the original on 2009-03-16. Retrieved 2009-04-08.
  76. "How does Drupal compare to Mambo? discussion thread". drupal.org. 2005-01-17. Retrieved 2009-04-08.
  77. "Drupal themes". Drupal.org. Retrieved 2011-08-31.
  78. "Adding your theme to Drupal.org". Drupal.org.
  79. "Top Drupal Distributions". AGLOBALWAY Consulting Services Inc. Archived from the original on 2014-04-13.
  80. "MVC vs. PAC".
  81. Drupal - CMS Grew Overnight By MAAN Softwares, Retrieved, June 8th, 2017
  82. "drupal.org discussion on DrupalCon event management". Groups.drupal.org. Retrieved 2011-08-31.
  83. "Drupal Camps and Cons". Retrieved 25 January 2013.
  84. "mailing lists". Drupal.org. Retrieved 2011-08-31.
  85. "forums". Drupal.org. Retrieved 2011-08-31.
  86. "Drupal Groups". Groups.drupal.org. Retrieved 2011-08-31.
  87. "Drupal IRC channels on FreeNode". Drupal.org. Retrieved 2011-08-31.
  88. "Language specific communities". Drupal.org. 2011-08-26. Retrieved 2011-08-31.
  89. Spencer, Jamie (7 April 2017). "CMS Battle for Beginners: WordPress vs Joomla vs Drupal (Infographic)". MakeAWebsiteHub.com. Retrieved 17 May 2017.
  90. Drupal. "Security announcement and release process".
  91. Drupal. "How to report a security issue".
  92. "Update manager (and Update status)". drupal.org. Retrieved 2011-07-01.
  93. "Security advisories". drupal.org. Retrieved 2009-04-28.
  94. "Drupal security team". Drupal.org. Retrieved 2011-08-31.
  95. "Drupal Security RSS feed". Drupal.org. Retrieved 2011-08-31.
  96. Leyden, John. "Drupal megaflaw raises questions over CMS bods' crisis mgmt". www.theregister.com.
  97. "SA-CORE-2014-005 - Drupal core - SQL injection". Security advisories. Drupal security team.
  98. "Drupalgeddon strikes back: outdated Drupal allegedly linked to "Panama Papers"". Blog. Drop Guard.
  99. "Drupal Core—Highly Critical—Public Service Announcement—PSA-2014-003". Security advisories. Drupal security team. October 29, 2014 – via Drupal.org.

    You should proceed under the assumption that every Drupal 7 website was compromised unless updated or patched before Oct 15th, 11pm UTC, that is 7 hours after the announcement.

    Simply updating to Drupal 7.32 will not remove backdoors....updating to version 7.32 or applying the patch fixes the vulnerability but does not fix an already compromised website. If you find that your site is already patched but you didn’t do it, that can be a symptom that the site was compromised - some attacks have applied the patch as a way to guarantee they are the only attacker in control of the site.

  100. Robinson, Brian (2014-11-07). "Attacks on open source call for better software design -". GCN. Retrieved 2016-07-29.
  101. "How we installed a Drupal security patch on 1300 sites, stress-free!". Dropsolid. Retrieved 2019-03-11.
  102. "FAQ about SA-CORE-2018-002". Drupal Security Team. Retrieved 23 April 2018.
  103. Goddin, Dan (20 April 2018). ""Drupalgeddon2" touches off arms race to mass-exploit powerful Web servers". Ars Technica. Retrieved 23 April 2018.
  104. "Drupal Patches Arbitrary File Upload Flaw". Decipher. Retrieved 2019-12-23.
  105. "Drupal core - Moderately critical - Denial of Service - SA-CORE-2019-009". Drupal.org. 2019-12-18. Retrieved 2019-12-23.
  106. "Drupal 6 end-of-life announcement | Drupal.org".
  107. "Drupal 7 will reach end-of-life in November of 2022 - PSA-2019-02-25". Drupal.org. February 25, 2019.
  108. "Extending Drupal 7's End-of-Life - PSA-2020-06-24". Drupal.org. June 24, 2020.
  109. "Acquia Certification". Acquia.

Further reading
  • Abbott/Jones (2016), Learning Drupal 8, England, Packt Publishing. ISBN 978-1-78216-875-1
  • Pol, Kristen (2012). Drupal 7 Multilingual Sites. Birmingham, England: Packt Publishing. ISBN 978-1-84951-818-5.
  • Mercer, David (2010). Drupal 7. Birmingham, England: Packt Publishing. ISBN 978-1-84951-286-2.
  • Travis, Brian (2011). Pro Drupal 7 for Windows Developers. Berkeley: APress. ISBN 978-1-4302-3153-0.
  • Butcher, Matt; Larry Garfield; John Wilkins; Matt Farina; Ken Rickard; Greg Dunlap (2010). Drupal 7 Module Development. Birmingham, England: Packt Publishing. ISBN 978-1-84951-116-2.
  • Bhavin, Patel (Aug 2010). Drupal 6 Panel Cookbook. Canada: Packt Publishing. ISBN 978-1-84951-118-6.
  • Beighley, Lynn (2009). Drupal for Dummies. New York: For Dummies. ISBN 978-0-470-55611-5.
  • Herremans, D. (2009). Drupal 6: Ultimate Community Site Guide. Switzerland. ISBN 978-2-8399-0490-2.
  • Peacock, Michael (2008). Selling Online with Drupal e-Commerce. Birmingham, England: Packt Publishing. ISBN 978-1-84719-406-0.
  • VanDyk, John K. (2008). Pro Drupal Development, Second Edition. New York: Springer Verlag/Apress. ISBN 978-1-4302-0989-8.
  • Kafer, Konstantin; Emma Hogbin (Apr 2009). Front End Drupal: Designing, Theming, Scripting. Jersey, USA: Prentice Hall. ISBN 978-0-13-713669-8.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.