James Oakley: How to secure a Drupal website

Planet Drupal - 13 January 2017 - 2:45am

OK - I'll hold my hands up. The title of this post is misleading. I'm not going to give you an ABC on how to secure a Drupal site (maybe another day). I'm responding to a post on the Reseller Club blog entitled How to Secure Your Client's Drupal Website.

There is some good advice in that article, but it's mixed in with some bad advice, and in other parts it's just plain confused. In the hope that it helps people, I'm going to try and untangle things.

Blog Category: Drupal Planet
Categories: Drupal

Unpublished Nodes Redirect

New Drupal Modules - 13 January 2017 - 2:44am

Unpublished Nodes Redirect is a simple module to allow admin users to setup redirects for each node type on their site. They can also set different types of redirects per node type. Developers can alter the node type list if required. The redirect will only effect anonymous users, if you have admin users that do not have permissions to view unpublished nodes, they will still see a 403 Access Denied for these pages.

Categories: Drupal

ADCI Solutions: Drupal 7 Performance Tips

Planet Drupal - 13 January 2017 - 2:34am

Drupal 8 has been released more than one year ago, but Drupal 7 is still widely used: it's totally stable, feature-rich, actively maintained and has tons of available modules for functionality extension. In this article I would love to draw your attention to Drupal 7 performance only. You can find a lot of information on Drupal 7 performance over the Internet since Drupal 7 is available for a long time, but anyway things change and new options appear. Website performance is very important because it can lead to higher conversion rates, higher search ranking and hosting costs reduction. I'll focus on Drupal 7 performance on the server side, but there are other areas where website performance can and should be improved including front-end, database, etc. These options are highlighted here.


Categories: Drupal

Snow White – Digital Art and Map Pack

New RPG Product Reviews - 13 January 2017 - 2:28am
Publisher: AAW Games
Rating: 5
An review

All right, I usually don\'t cover packages like this, but here, I consider it to be justified. This art and map pack consists of an archive containing no less than 1.2 GBs of high-res .tif files.

Upon unpacking the archive, you\'ll be presented with 3 general folders - one containing Snow White Artwork, one that features the cartography and one for the puzzles.

Let me elaborate: Inside the artwork folder, you\'ll find sub-folders for flora, fauna, items, locations and NPCs - including three variations of Catsle Morsain in fall, winter and summer, the stunning rendition of the water fall of Pondy Falls, the plants and weird animals of the haunted forest (including the smoking worm and the minitaur - not a typo, btw.) or the desktop-worthy rendition of a certain character\'s kidnapping.

Now Snow-White, in case you do not yet own this gem (Why not? Seriously, it is one super-amazing, unconventional and awesome mega-module!!), does feature some of the best cartography you\'re bound to see in either the 3.X or PFRPG-era - Tommi Salama delivers not only amazing top-down maps, we also get isometric maps of the complexes, from humble cabins to castle Morsain to dungeon-levels. And yes, the player-friendly iterations do not have the annoying keys or big secret door \"S\"-markers. Once again, all maps are presented in high-res .tifs, with two exceptions - the GM\'s maps of Morsain with the numbered key are presented as pdfs - and yes, one actually does feature the district map as well.

Finally, the module excelled by not only engaging the hands, but also the mind - there are a couple of simple, but fun puzzles within the pages of the module and if you want the representation of the graphics of both puzzles and solutions, you\'ll find these in the respective folder, depicted as .jpgs.

How much do you get? Well, over 100 files. Let that sink in. Yes, this book is a gorgeous beauty - and if you\'re looking for a way to drive that home via playing it online or want the art and maps for VTT purposes...well, this ought to do the trick. Now it should be noted that this is not required to run the module in the traditional manner...but those of us who\'re using a lot of tech to game will certainly appreciate this pack. It does what it says on the tin and delivers some truly amazing art and cartography. Hence, my final verdict will clock in at 5 stars.

Endzeitgeist out.
Categories: Game Theory & Design

Pronovix: Graph databases in Drupal: a Neo4j module that integrates with Rules

Planet Drupal - 13 January 2017 - 12:20am

SQL databases are really fast when you need all the information stored together in a record row, but they are a bad fit when you need to search for relationship patterns that are not already stored together in your database. A significant performance penalty is incurred for every additional table that needs to be joined for a query. That is why SQL databases are notoriously bad at deducting relationships from datasets. Graph databases however are really good at this task.

Categories: Drupal

Nintendo will launch paid online game service this fall

Social/Online Games - Gamasutra - 12 January 2017 - 10:11pm

Nintendo on Thursday night said it would be offering a paid online game service this fall for the upcoming Nintendo Switch. ...

Categories: Game Theory & Design

Kris Vanderwater: Hedron: Or my dissatisfaction with local development.

Planet Drupal - 12 January 2017 - 6:22pm
Hedron: Or my dissatisfaction with local development. Kris Vanderwater 12 January 2017

I like things that work. I think most technicians do, but as a web developer I have a very serious problem. My most effective environment for doing web development is the one that exists on my own personal box. It can also be a rather impractical place to develop because most of my customers (current and historic) are on rather customized server stacks. Typically, the host has customized the environment to their own specifications. It's not uncommon to find additional services like solr or maybe a memcache server in the mix.

Categories: Drupal

Drupal core announcements: Drupal core security release window on Wednesday, January 18, 2017

Planet Drupal - 12 January 2017 - 3:35pm
Start:  2017-01-17 12:00 - 2017-01-19 12:00 UTC Organizers:  stefan.r David_Rothstein Fabianx catch xjm cilefen Event type:  Online meeting (eg. IRC meeting)

The monthly security release window for Drupal 8 and 7 core will take place on Wednesday, January 18.

This does not mean that a Drupal core security release will necessarily take place on that date for any of the Drupal 8 or 7 branches, only that you should watch for one (and be ready to update your Drupal sites in the event that the Drupal security team decides to make a release).

There will be no bug fix or feature release on this date. The next window for a Drupal core patch (bug fix) release for all branches is Wednesday, February 01. The next scheduled minor (feature) release for Drupal 8 will be on Wednesday, April 5.

Drupal 6 is end-of-life and will not receive further security releases.

For more information on Drupal core release windows, see the documentation on release timing and security releases, and the discussion that led to this policy being implemented.

Categories: Drupal

Web Wash: Video: Create Custom Pages using Page Manager and Panels in Drupal 8

Planet Drupal - 12 January 2017 - 2:20pm
Yesterday I presented WebWash’s first webinar on Page Manager and Panels. I had lots of fun doing the presentation and was asked some pretty good questions at the end. In the video I cover the following: What’s new in Drupal 8. Demonstrate how to create a custom page. Show you how to use multiple variants. Demonstrate Panels IPE (in-place editor). Finally, I show you how to use Bootstrap Layouts.
Categories: Drupal

Mantic Games launches The Walking Dead: All Out War Painting Competition

Tabletop Gaming News - 12 January 2017 - 2:00pm
My painting skills are lacking. They really are. I’ve not painted anything of note for some time now. So, that means you don’t have to worry about me swooping in and taking the top prize in Mantic’s The Walking Dead: All Out War Painting Competition. From the announcement: That’s right, we want to see your […]
Categories: Game Theory & Design

SPIN.a.4 Cricket Board Game Up On Kickstarter

Tabletop Gaming News - 12 January 2017 - 1:00pm
Behind football (or, as Americans call it, soccer), Cricket is the most popular professional sport on Earth. Sure, we here in the states might not get too involved in it, but that’s just our corner of the globe. And, like most sports, those of us in the gaming community would like to have a tabletop […]
Categories: Game Theory & Design blog: Recognizing more types of contribution in the Marketplace

Planet Drupal - 12 January 2017 - 12:56pm

Within weeks of introducing the contribution credit system on we realized we had created something powerful. Like all open source projects, Drupal has a behind-the-scenes economy of contribution in which individuals, organizations, and end users work together to maintain the software as a public good. That behind-the-scenes economy was brought to the fore when we chose to rank the Drupal Marketplace by issue credits. For the first time, gave businesses a direct financial incentive to contribute code.  

Being good stewards of these incentives is a sobering responsibility, but also a great opportunity. We can use this system to recognize the selfless effort of our community volunteers, to reward the organizations that sponsor their employees' time to give back to the project, and to connect end-users with the organizations that are the biggest contributors.

But as we often say in this community—contribution is more than code. It is the time provided by dedicated volunteers; the talent of community organizers, documentation maintainers, and developers; and the treasure provided by organizations that sponsor Drupal events and fund the operations and infrastructure that maintain the project.

What are we changing?

We’re updating the ranking algorithm for’s Marketplace of service providers and list of all organizations in the Drupal ecosystem. We've expanded on the issue credit system to create a more generic contribution credit system which lets us recognize more types of contribution. Each type of contribution is now weighted to give the organization an overall amount of contribution credit. We've built this system so that we can continuously evolve the incentives it creates by adjusting the weight given to each type of contribution as the project's needs change. To prevent gaming, we will not be publishing the exact weights or total contribution score, but those weights have been reviewed by the Association Board and Community Working Group.

We've carefully chosen a few new types of contribution to factor into the ranking. These were selected because they create incentives to reach specific goals: encouraging organizations to sponsor development of Drupal, gathering more Drupal 8 success stories that can be used to promote Drupal adoption, and recognizing the financial contributions that promote the fiscal health of the Drupal association.

We now calculate the following 4 types of contribution into overall contribution credit:

What about other types of contribution?

Of course, these new factors still don't include all types of contribution. This iteration aims to add measurable factors that reward the behavior of organizations that are good Drupal citizens, and incentivize some of the most important contributions that have a big impact in moving the project forward. But there are other factors we'd like to include in the future! We're keeping track of these additional kinds of contribution, such as sponsoring local user groups, organizing training days, writing documentation, and more, in this issue: #2649100: Improve contribution statistics on user and organization profiles.

There are two factors in particular that we are not yet including that we'd like to address.

The first is project application reviews. These reviews are a critical part of the lifecycle of a new project on, but because we are making the Project Application Revamp a key priority for the first part of 2017, this was not our focus in this initial update. We may revisit this factor as the Project Application Revamp initiative gets underway.

The second is camp organization. We know that there are many individuals and organizations who invest heavily in Drupal Camps, and this has been a critical part of the project's success. However, at this time our data about the individuals and organizations who participate in camp organization is purely self-reported, and therefore too vulnerable to manipulation to include in the algorithm at this time. In the future we hope we can find a responsible way to measure and credit this kind of contribution.

We’ll continue to look for other good factors to add, and do our best to weigh them fairly.

How often will the algorithm change? Who governs these changes?

As this is our first major change to the marketplace ranking system since the launch of issue credits, we may need to make some small adjustments in the first weeks following the launch. However, we know that too frequent changes to the incentive structure will be frustrating for the individuals and organizations who are contributing to the project. Therefore, after the initial tuning we intend to update the marketplace ranking system on a roughly 6 month cycle.

While the primary responsibility to manage the contribution credit system is ours, we have committed to vetting these and future changes with members of the Drupal Association Board and Community Working Group.

Categories: Drupal

Lost World Lunch Card Game Up On Kickstarter

Tabletop Gaming News - 12 January 2017 - 12:00pm
Kids love dinosaurs. At least, as a kid, I did. I never really grew out of it, either, to be honest. The giant lizards that used to roam our Earth seem almost too cool to be actually true. And while there are some dinosaur-themed games out there, a lot of them have you hunting the […]
Categories: Game Theory & Design

Thursday Terrain Corner

Tabletop Gaming News - 12 January 2017 - 11:00am
The “week of being back to normal” continues. I’m certainly a creature of habit, and so getting back into “the regular swing of things” has been rather relaxing. Plus, there’s some really awesome things going on here at the office that I’ve been part of. I mean, just for example, yesterday I (REDACTED) and then […]
Categories: Game Theory & Design

Come to GDC 2017 and level up your community management skills!

Social/Online Games - Gamasutra - 12 January 2017 - 10:21am

GDC 2017 organizers highlight a handful of great game community management GDC 2017 talks from seasoned talent around the industry! ...

Categories: Game Theory & Design

Gale Force Nine Previews The Tenth Doctor In Time of the Daleks

Tabletop Gaming News - 12 January 2017 - 10:00am
The cultural impact of Doctor Who is undeniable. Especially if you’re in the “nerd crowd,” you see references and allusions to it all over. And it’s not just the older Doctors who get referenced. The newer ones have their own followings, as people debate about which was the best. Well, the Tenth iteration certainly has […]
Categories: Game Theory & Design

GDC State of the Industry: Devs weigh in on Nintendo Switch, Vive interest surges

Social/Online Games - Gamasutra - 12 January 2017 - 9:04am

The 2017 Game Developers Conference survey of over 4.5k devs reveals many findings, including that devs are optimistic about Nintendo's Switch & uncertain about mid-cycle PS4/Xbox console refreshes. ...

Categories: Game Theory & Design

Dice Stars Now Available From WizKids

Tabletop Gaming News - 12 January 2017 - 9:00am
Don’t you know that you are a shooting Dice Stars? Well, that sounded a lot better in my head, but it has helped mold what playlist I’m going with today here in the office. For those that are less concerned with classic rock and more concerned with dice games, you’ll be happy to know that […]
Categories: Game Theory & Design

Feeds Fetcher Archive

New Drupal Modules - 12 January 2017 - 8:50am
Categories: Drupal

Red Route: Talking about How We Work

Planet Drupal - 12 January 2017 - 8:08am

Following the previous blog post about our software engineering team culture that I wrote with my colleague Andrew Harmel-Law, I spoke about the subject at the January Drupal Show & Tell last night.

I've been meaning to speak at a meetup for a long time, and if I hadn't done it last night, I'd probably be putting it as one of my objectives for the year. The trouble was, I could never think of what to say. But conversations turned to tweets turned to blog posts, and it felt right to talk about this subject, particularly given that one of the themes of the blog post is the importance of communication between people.

I'd been to the Drupal Show & Tell meetup a couple of times before, and it's a friendly group with some familiar faces, so when I saw the call for speakers, it seemed the ideal opportunity for my first venture into public speaking.

As I rode my bike through the snow to the meetup, I was a little worried that the attendance might be a little sparse, and my blocked nose wasn't helping my confidence. After a few anxious moments where we thought there might be more speakers than people in the audience, more people arrived, and we got started, with interesting and thought-provoking talks from Anthony Seale and Nigel Milligan.

Finally, it was my turn, and despite losing my thread once or twice, I think it went fairly well for a first attempt. As I mentioned in the talk, one of the key points is about improving through iteration - I'll be tweaking the talk and delivering a new version of it at one of our internal lightning talks sessions soon.

My slides for the talk are available online, and I've embedded them below. Thanks to Cameron & Wilding for organising the meetup, and to everyone who came along.

Your browser does not support iframes. Please visit to view the presentation.

Tags:  Drupal Presentation development All tags
Categories: Drupal


Subscribe to As If Productions aggregator