1.
Drupal
Cryptoparty, Melbourne 27th Oct
@chrischinch

2.
Overview
‘Drupal’ is a Trademark
Released under GPL
license, as are all modules and
themes
Drupal distributions
A healthy consultant /
developer ecosystem
Acquia and commercialisation

3.
You’re in good company…

4.
Why use an Open Source CMS?
Freedom
After a bit of work
Especially with Drupal

5.
Data in
CSV, XML, RSS, JSON, KML, OP
ML, RDF, SQL, SSO, Oauth, Op
enID, Social
Logins, phpBB, Joomla, Wordp
ress, LiveJournal…
And more!

6.
Data Out…
CSV, RSS, XML, JSON, TXT, Seri
alize, Node Code
MORE

7.
Security process
Open source
Security Team
Most vulnerabilities, “Bad
practice”
drupalsecurityreport.org

8.
Security Features
Passwords
Private keys
Cookies / Sessions
Passwords never emailed
Cross-site forgery / Scripting
Data Sanitisation
Database Abstraction Layer

9.
Securing
Disabling PHP Filters
Check HTML Filters
Captcha / Mollom
Status Report
Error Logs

10.
Privacy
Basic user tracking by default
Many other initial flaws slowly
resolved
Public & private fields
Highly configurable
permissions
Cookies / EU compliance

11.
More?
Drupal Melbourne
www.meetup.com/drupalmel
bourne
Australia’s first ‘official’ Drupal
Con
Sydney, 6th Feb 2013