By alexanderhiggins on

i find some sites used by outsidres for thier own processes , how is that possible , how to secure sites from that

⋅ Categories: Drupal 6.x

Comments

Anonymous’s picture

Anonymous (not verified) commented

I think that your query is far too vague to get a good answer. A very general suggestion from this not-very-technical contributor would be to update to the latest secure release of a supported version (ie. stop using 6 and convert your sites), follow best practices for Drupal and web server security from various articles (search), review installed modules, check and enforce strong passwords for all accounts, and deal with any compromised accounts. And perhaps enable your browser's spelling checker…

rabattdigga’s picture

rabattdigga commented

Hi Alexander, this usually happens due to misconfigured permissions, exposed APIs, or compromised accounts, so securing your Drupal site involves keeping core/modules updated, tightening user roles, disabling unused services, and reviewing access logs regularly.

cynthiamarshal0010’s picture

cynthiamarshal0010 commented

This usually happens because the Drupal site has weak permissions, open forms, exposed URLs, or outdated modules. Best fix: update Drupal and all modules, review user roles and admin accounts, block unknown access, secure forms, and tighten server permissions.