Security is increasingly an issue on the internet. The development environment we use at Turtlereality is very secure, based as it is on Drupal, which has a very good security profile. Here is a round up of articles relating to internet security.

Don't be the Next Victims of a Data Leak

Posted on Mon, 04/11/2016 - 10:11
Drupal Security
If we had built the Mossack Fonseca website, they wouldn't be in this mess!
Reading about the Panama papers I spotted that the information originates from a compromised mail server. Somebody got admin access to the mail server, which then allowed them to download all emails sent through the company and all emails sitting in user's mail boxes. That's a lot of data - 2.6 terrabytes in total - and a lot of information which really should have been better secured.

Secure your E-commerce website with SSL and Drupal 7

Posted on Mon, 09/14/2015 - 14:12
Improve Internet Security with SSL & Drupal

The situation with SSL and Drupal 7 is all a bit of a mess, there is a module - Secure Pages - which allows mixed use, but it seems to be riddled with problems and needs core to be patched! So, what is the alternative? After a frustrating day, I've finally got the method, so here it is before I forget...

In settings php you need to add the following - it is NOT there in the default version:

$_SERVER['HTTPS'] = 'on';

This then works with these re-write rules which are now baked into D7 .htaccess