By dreadfulcode on

So I'm getting ready to take a stab at designing my own custom drupal theme, for the drupal 6x core with the default 'phptemplate' theme engine. After poring over the details in the many forums and covering this subject, I've stumbled across quite a few comments from drupallers discussing the issue of security holes, vulnerabilities from poor custom theming practices.

What are these security vulnerabilities, and how do I make a secure custom theme?

⋅ Categories: Drupal 6.x

Comments

vm’s picture

vm commented

security issues would only come from incorrect and lazy usage of php and MySQL where coding and security standards aren't being followed.

follow the standards of a core theme or a well known base theme (zen, fusion, genesis, adaptive among others). if you stick to using drupal hooks, preprocess functions and following coding standards you should be fine.

dreadfulcode’s picture

dreadfulcode commented

Thanks VeryM

Makes sense. I never cut corners for my pet projects, so no worries then....

binford2k’s picture

binford2k commented

This is a good start: http://drupal.org/node/360052