Hi everyone,

I released a first version of security.module a few minutes ago. The module is sort of an intrusion detection system for your Drupal site. It helps the site admin to check and ensure the security of his Drupal installation.

Some features and/or wishlist items:

  • Check if the Drupal installation is vulnerable to any known exploits
    or vulnerabilities. If yes, warn the user and provide a link to the
    relevant Drupal security advisory.
  • Check for world-writable files and directories.
  • Check for problematic configurations.
  • Check for files which should be removed.
  • etc.

The code is in ALPHA stage, so don't expect everything to work. Also, there's only a CVS version at the moment, but the module will be branched for Drupal 4.6 as soon as it's stable enough.

I'm open to any feature suggestions, ideas, comments and patches.

Uwe.

Comments

njkt’s picture

This is cool, I hope to check it out in beta (i dont have a test server to really test this on heh) :-)