support

support@drupal.org

7912 discussions

Re: [support] support Digest, Vol 142, Issue 4
by Roger 29 Oct '14

29 Oct '14

Hi Ahilan We had similar in Drupal 6 and early and recent Drupal 7 with one ISP. The attacks seemed to be because root access to cPanel or through ssd terminal access was obtained permitting a hacker into the whole Drupal system. Any passwords typed in manually are very vulnerable. User name and passwords are easy to grab on the internet and ISPs can be lax while professing top level security. Very long convoluted user names and passwords, very difficult to type manually need to be copy and pasted. This has given us a modicome of security to date. Users scream about having to copy and paste but it was easier for them to learn copy and paste than take the chance on bog awful passwords especially isp root/admin passwords. Our server admin access words are voluminous, convoluted and difficult to type accurately. May I suggest, keep a zipped copy of /sites folder and the database sql file in a /home/Backups directory, out of the /public_html directory system and do a new version of both once a month so at worst you only lose 1 month of data. You can also create an entirely new Drupal install by installing the latest Drupal 7, rename it's /sites folder and copy the /home/Backup/sites.zip to the new drupal and extract it. Your new Drupal will be instantly useable and you can inspect the previous version code as you wish after you rename the /sites folder to make it unavailable. We always have 2 Drupal installs on the system both with the same /sites folder but the second newer one is named something totally unrelated and meaningless and the sites folder also renamed to something meaningless so the fresh drupal site fails to serve until I allow it. I simply rename the original and change the fresh install and it's /sites folder to the original name to run the latest drupal. Hope this helps Roger >> Hi, >> >> I had installed drupal 7.21 to run a simple website on my server. All >> seemed well till one day last week I started getting huge amount of >> spam emails from the server which was hosting the website. >> >> On further analysis of the postfix mail queue on the server, I found >> all the emails were generated by TWO php files (css76.php in the >> modules/panels/js directory and session.php in the >> sites/all/libraries/jquery.cycle directory) . These two files were >> NEWLY created/injected files and seemed bogus containing a number of >> symbols along with a base64_decode return statement. >> >> Clearly my drupal setup had been hacked and someone had successfully >> injected these files to send spam email (amongst other things I >> presume) >> >> I shutdown the site, installed Security Review and Hacked modules and >> carried out their recommendations and also checked my file permissions >> via recommended scripts. >> >> However I am still not sure what the entry point for this hack was in >> my setup and whether I am fully secure yet in this setup. Any >> suggestions or points in this regard would be highly appreciated. >> >> thanks >> Drupal Newbie >> >> >> -- >> [ Drupal support list | http://lists.drupal.org/ ] >> > >

1 0

Repeat Calendar event
by Néstor 27 Oct '14

27 Oct '14

HI, I have a calendar event that repeats : -------------------------------------------------------- *Repeats every month on the fourth Thursday until Thu Jan 01 2015 except Thu Nov 27 2014, Thu Dec 25 2014. Also includes Thu Nov 20 2014.* *Thursday, January 23, 2014 - 9:00am - 5:00pm* *Thursday, February 27, 2014 - 9:00am - 5:00pm* *Thursday, March 27, 2014 - 9:00am - 5:00pm* *Thursday, April 24, 2014 - 9:00am - 5:00pm* *Thursday, May 22, 2014 - 9:00am - 5:00pm* *Thursday, June 26, 2014 - 9:00am - 5:00pm* *Thursday, July 24, 2014 - 9:00am - 5:00pm* *Thursday, August 28, 2014 - 9:00am - 5:00pm* *Thursday, September 25, 2014 - 9:00am - 5:00pm* *Thursday, October 23, 2014 - 9:00am - 5:00pm* *Thursday, November 20, 2014 - 9:00am - 5:00pm* ------------------------------------------------ Any ideas why October 23rd will not show up but all the others will? I have a view Calendar block and a view Calendar page. but why 1 event of the repeated Calendar event just does not display. Thanks, Nestor

1 0

webform data
by Néstor 27 Oct '14

27 Oct '14

Hi Guys, I have a webform and I trying to figure out in the mysql database where is that data kept. I can find the nid and I can query the node table and see the record for the webform but I do not know where/how to get the data that belongs to my webform. I search but I did not get anything. Can some provide a link that explains where do I get the webform data? Thanks,

2 2

How to remove thousands of blocked users
by James Rome 07 Oct '14

07 Oct '14

I realized that my site has thousands of blocked users that I want to remove in one fell swoop. The People list only lets me do a page at a time. Is there a way to get rid of ALL blocked accounts? -- James A. Rome http://jamesrome.net

3 2

draggable views and display suite
by Bert Van Kets 25 Sep '14

25 Sep '14

Hi all, I have a view using display suite for the formatting and my customer wants to be able to set the order using drag and drop. Draggable views makes light work of manual sorting, but it doesn't play nice with display suite. The view is configured to use display suite for the display and has the draggable views weight field for the sorting, but the weight is totally ignored. I have a separate view to do the sorting. I just need the sort order to be respected in the view using display suite. Can draggable views be used in combination with display suite in a view? How? Thanks Bert

3 3

Verticle tabs of titles
by Juma Ahamadi 25 Sep '14

25 Sep '14

Hello Guys, i have to create a views page from a content type, where it displays the titles of the content as tabs. means when we click on the tab, the content must display under it's tilte. I am doing this for the first time and don't know how to do it. pleas if any one know any way, like module or css codes. share with me. Sincerely, ---------------------- *Juma Ahmadi* *+93 (0) 770 424 164*

2 1

mixing durpal 6 and drupal 7
by Lluís Forns 19 Sep '14

19 Sep '14

I have some drupal 6 sites sharing its users table. Now I will add a new site using drupal 7, but users table structure (and password) changed. Which is the best way to keep just one users table (username, uid, password, ...) accross drupal 6 and drupal 7 sites? I was thinking of using OpenID and configure one site just to act as a server and all the others as clients. Any hint is wellcome. -- *Ser freak no és imprescindible per ser informàtic, però ajuda. *La vida no ha de ser feliç, ha de ser plena. *Abans d'imprimir aquest missatge, pensa en el medi ambient.

4 4

pop-up register or login form
by Don 17 Sep '14

17 Sep '14

hi, I'm trying to do a little pop-up form linked to a download button to have a visitor register before downloading a document. This is part of a D7 upgrade of the site, and i was using the popups module before. Now I'm using the popup module, which works fine. But i can't get the submit handler to work via ajax. I know it's supposed to be really easy and in core now, but i'm wondering what i'm missing. I get a full post and page refresh every time i hit the button. Here's what i've got on the login form. I show both forms, though they're actually separate. I'm guessing i'm just sleepy enough i'm missing something simple. The form validate just looks up the email in a table and sees if they're already registered. If they are, the link to the pdf is added to the download button. function myform(){ $form['guest_email'] = array( '#type' => 'textfield', '#default_value' => t('Email Address'), '#size' => 60, '#maxlength' => 60, '#attributes' => array('class' => 'defaultText', 'onClick' => "SelectAll('edit-guest-email');"), '#required' => TRUE, ); $form['submit'] = array( '#type' => 'submit', '#value' => t('Download'), '#ajax' => array( 'callback' => 'custom_login', 'wrapper' => 'inner', 'method' => 'replace', 'effect' => 'fade', ), ); return $form; } Thanks. -- -Don Pickerel- Fane Software

2 2

jcarousel module does not display image field
by Juma Ahamadi 12 Sep '14

12 Sep '14

Hello to all, I created a block through views page. The display format is jcarousel, the seclected field is image from a specific content type. It shows the empty field with an icon instead of images. If i add other fields like title... it is showing but only with image fields it has problem. The conteny type as well have many contents with images and texts. Sincerely, ---------------------- *Juma Ahmadi* *+93(0)77 0424164*

1 0

Multiple roles access a site while in maintenance mode
by Drupal 29 Aug '14

29 Aug '14

Hi, The site I’m working on is pretty much done but I still can’t make it public until website editors do some content changes and spelling corrections. I don’t want to give them the admin access so I was wondering how to make their role (editor) bypass the maintenance mode - without any changes in the code or me writing a new module. Thanks

5 9

← Newer
1
...
7
8
9
10
11
12
13
...
792
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

support