Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.
By sada.lala on
Recently several websites including Drupal based ones have been compromised not due to anything in Drupal probably but for some other reasons like ftp attacks. You can see here some more details http://drupal.org/node/454692
I want to know is it possible to do security by obscurity, which means hiding all source or means to understand that it is a Drupal site. Like view source not showing any drupal specific code.
If any one knows of such methods please help.
Comments
?
When the problem lies within ftp-usage and not within Drupal, why would you gain anything by hiding it?
Furthermore if it is that easy to check if a site is a Drupal site ( http://isthissitebuiltwithdrupal.com/ ), hiding could be somewhat complicated. But I am certainly no expert on this.
be secure, not obscure ;)
I said this on the other post, but it's worth repeating here. Security by obscurity won't get you nearly as far as simply running your site in a secure manner in the first place.
How do you run a secure site? I suggest you read
--
Morris Animal Foundation