Security

Powered by Drupal
By rprice , 16 October 2012

BOTCHA lets spambots to prove they are bots, and let real users zip by.

BOTCHA is useful for any form that has to be protected from spambots.
How it works

The approach of BOTCHA is to add various elements to forms that need protection from bots. These elements do not present new fields to users, so BOTCHA is completely transparent to humans. Both humans and bots submit those forms and BOTCHA performs heuristic analysis on each submitted form. Bots are usually programs/scripts that are relatively dumb, and most of the time they fail BOTCHA tests and human users don't.

By rprice , 16 October 2012

BOTCHA lets spambots to prove they are bots, and let real users zip by.

BOTCHA is useful for any form that has to be protected from spambots.
How it works

The approach of BOTCHA is to add various elements to forms that need protection from bots. These elements do not present new fields to users, so BOTCHA is completely transparent to humans. Both humans and bots submit those forms and BOTCHA performs heuristic analysis on each submitted form. Bots are usually programs/scripts that are relatively dumb, and most of the time they fail BOTCHA tests and human users don't.

By rprice , 15 October 2012

Locks down image references to the host/domain of your site only, to prevent CSRF attacks, and avoid HTTPS mixed content errors.

In short: This input filter restricts image tags in HTML content submitted by users to your site.

* This input filter finds all IMGs in a text, checks whether their src attribute is relative and points to an image under the Drupal root.
* Images satisfying that requirement are retained and left alone.
* All other images are removed.

By rprice , 15 October 2012

Locks down image references to the host/domain of your site only, to prevent CSRF attacks, and avoid HTTPS mixed content errors.

In short: This input filter restricts image tags in HTML content submitted by users to your site.

* This input filter finds all IMGs in a text, checks whether their src attribute is relative and points to an image under the Drupal root.
* Images satisfying that requirement are retained and left alone.
* All other images are removed.

By rprice , 14 March 2012

Drupal is a huge software project by any measure, with thousands of developers writing code for it and deploying websites and applications on it. Alongside Linux, Apache, and Mozilla, it is one of the largest open source projects in the world. This infographic helps explain the important work of Drupal's Security Team.