Newsfeeds

Commerce Stripe Payment Request

New Drupal Modules - 18 April 2018 - 11:02pm

Provides a single Stripe payment request button for processing Apple Pay/Google Pay payments on the web for Drupal Commerce.

The paymentRequestButton Element gives you a single integration for Apple Pay, Google Pay, Microsoft Pay, and the Payment Request API —a browser standard that gives your customers the ability to quickly provide you payment and address information they’ve stored with their browser.

Categories: Drupal

Flocon de toile | Freelance Drupal: Set up a simple inventory control with Drupal Commerce 2

Planet Drupal - 18 April 2018 - 11:00pm
If we do not have (yet) a contributed module (commerce_stock should be available soon), Drupal Commerce 2 already has an API to set up an simple inventory control, with the Availability Manager service. Let's look at how to set up a very simple stock control, based on a field (for example field_stock) that has been added on a product.
Categories: Drupal

Sickest Witch Card Game Up On Kickstarter

Tabletop Gaming News - 18 April 2018 - 3:00pm
Sure, we might think of the various parts of a dead animal as potential food, but for a witch, that’s fresh spell components. In Sickest Witch, players are looking to defeat various creatures together, but it’s only the witch that doses out the killing blow that gets the fresh ingredients to create new spells. The […]
Categories: Game Theory & Design

myDropWizard.com: Security Vulnerabilities Affect Your Dev Sites Too

Planet Drupal - 18 April 2018 - 2:25pm

When Drupalgeddon 2 (SA-CORE-2018-002) happened a few weeks back, we saw plenty of buzz from agencies and other organizations throughout the community who were having patching parties.

Yay for patching! But were you left vulnerable by not updating all of your installations?

If you didn’t update development and staging sites, you may be at risk!

Due to the nature of the vulnerability, from the largest of enterprise applications to the smallest of brochure or hobbyist site builds, all Drupal sites were affected. This includes any testing or staging versions of your site. Depending on how you manage your local development sites, even those may have been exposed too!

Still not convinced? Read more to find out why you need to update ALL sites!

Categories: Drupal

Late Pledges Open For The Reckoners

Tabletop Gaming News - 18 April 2018 - 2:00pm
It’s easy to accidentally miss out on a Kickstarter campaign. With all of them running all the time these days, one can slide under your radar. But, thankfully, all is not lost in terms of getting those sweet Kickstarter prices and extras, as there’s usually a Late Pledge period. And such is open now for […]
Categories: Game Theory & Design

Nagual Meso-American Giant Robot RPG Up On Kickstarter

Tabletop Gaming News - 18 April 2018 - 1:00pm
I love when I see a new twist on a theme. We’ve seen giant robots before. We’ve seen alien invasions before. But normally, that sort of stuff is focused on Japan. Well, in the case of Nagual, it’s Meso-America that’s got the giant robots that are fighting off the evil, invading aliens. You can check […]
Categories: Game Theory & Design

Blighted Ogrun Added to Iron Kingdoms RPG

Tabletop Gaming News - 18 April 2018 - 12:00pm
Everblight has spread his vile corruption all across the north, bringing the northern elves under his control, along with the ogrun that inhabited the region. These already-really-hearty creatures were made even tougher and more fierce. If you’d like to torment your players with these lumbering behemoths, Privateer Press is here to help. From the announcement: […]
Categories: Game Theory & Design

Midweek Snippets

Tabletop Gaming News - 18 April 2018 - 11:00am
The middle of the week already? At least, it feels like I should add “already” to the end of that. Week seems to be going by quickly. As you all know, I’m certainly looking forward to the weekend. Hard to believe it’s already the 3rd weekend of the month, which means Board Game Day up […]
Categories: Game Theory & Design

Sooper Drupal Themes: Web Forms In Drupal 8 With Contact Module And Webform Module | 8 Days To Drupal 8 | Day 3

Planet Drupal - 18 April 2018 - 10:57am

We're counting down the days to the official SooperThemes Drupal 8 Release! Count with us as we will be writing a Drupal 8 related blog post every day for the next 8 days.

Drupal 8 web forms and drag and drop forms video tutorial

view on sooperthemes.com if you can't see the video

This tutorial is aimed at people who just need a contact form or some other kind of user input form. We'll cover deciding between the core contact module and the popular webform module. We won't cover using the Drupal API to program complex forms that integrate with external applications.

Drupal 8 Core Contact Module

Whereas the Drupal 7 core contact module was not very useful due to a total lack of flexibility, the Drupal 8 version is much nicer. It's nicer because you can add fields to it. You're no longer limited to just the name, email, subject and message fields that were baked into the Drupal 7 version. 

Not only does the new contact form allow for custom text fields, it even supports file uploads, entity references, date fields, and other Field API fields.This simple yet powerful form builder module is not limited to just contact forms; you can use it to create questionnaires, gather user feedback, etc.  

Drupal 8 Contact module customized form

Better Together: Contact Module + Contact Storage Module

One major inconvenience of the Contact module is that is doesn't store any messages that are sent. Your only option is to send the message via email and afterwards there is no copy of the message in your Drupal site. The contact storage module will store your messages as entities. It lets you administer the messages and provides integration with the views module. Since the messages are stored as Drupal entities you also gain interoperability with other modules in the Drupal ecosystem. This will allow you to do even more, for example exporting messages as CSV, searching messages, and pushing messages to your CRM.

Webform Module

Drupal's popular webform module is a massive framework that offers a ton of extra options that the contact module doesn't have. You should choose the webform module if these extra features are useful to you and you're prepared to learn the ropes around a more complex user interface. The webform module can be intimidating at first because there are so many elements and settings... but once you're familiar with the interface you can configure and design very powerful forms fairly easily. 

To see what the webform module offers it's really better for me to show than tell. Check out the youtube video above where I show you the interface of the webform module.

Drupal 8 Webform module form using the flexbox layout option

Contact Module vs Webform Module

Personally I choose the webform module for anything that is more complicated than just the standard contact form with a subject and message field. The contact module is powerful and extendable, but the webform module gives you everything you need in one place. It's a purpose-built single-purpose application within Drupal and once you get familiar with it it's really very powerful. 

It also lets met build multi-column form layouts, a feature that I use often.

A feature-base comparison of Contact and Module based on features that I think are important: Feature
  • Multi-column layouts
  • Control labels and placeholders
  • Control Submit Button Text
  • Route email with form options
  • Search in submissions
  • Export submissions
Contact
  • ✔ (can't remove Preview)
  • ✔ (needs additional modules)
  • ✔ (needs additional modules)
Webform
Placing Drupal 8 Forms With Our Visual Page Builder

We believe interoperability with the Drupal ecosystem is important for Glazed Builder. This is why we don't include a proprietary form builder in Glazed Builder and instead encourage you to create forms with Drupal's webform module. Currently Glazed Builder let's you place blocks created with the webform module anywhere in your drag and drop page. The contact module doesn't provide blocks that we can drag and drop natively, but you can install the contact_block module to fix that.

Categories: Drupal

Asmodee Digital Creating Video Version of Mansions of Madness

Tabletop Gaming News - 18 April 2018 - 10:00am
Several of my friends are huge fans of Mansions of Madness. However, it’s a game that has a bit of a notorious reputation in terms of set-up time. Having a digital version of it would really cure a lot of those issues. Well, your prayers have been answered, as Asmodee Digital is working on a […]
Categories: Game Theory & Design

Conan: The Book of Skelos Now Available In Print

Tabletop Gaming News - 18 April 2018 - 9:00am
Modiphius likes to give its players options for how they get their books. They offer both digital and physical formats, usually with the digital coming out long before the print hits shops. Well, if you’ve been wanting to get the Book of Skelos for the Conan RPG in physical form, your wait is now over. […]
Categories: Game Theory & Design

Aten Design Group: Consolidating Websites Using Pantheon Upstreams

Planet Drupal - 18 April 2018 - 8:34am

Over the last couple years, organizations have been coming to us with a new problem. Instead of needing a single website, they need dozens, if not hundreds. They might be large universities with many departments, an association with independent franchises nationwide, or a real estate developer with offerings all over the world. Often, these organizations already have several websites supported by different vendors and technologies. They’ve become frustrated with the overhead of maintaining Drupal sites built by one vendor and Wordpress sites by another. Not to mention the cost of building new websites with a consistent look and feel.

While the details may vary, the broad ask is the same. How can we consolidate various websites onto a single platform that can be spun up quickly (preferably without developer involvement) and update and maintain these en masse, while maintaining enough structure for consistency and flexibility for customization. Essentially, they want to have their cake and would also like to eat it.

Over this series of posts, we’ll break down the various parts of this solution. We’ll first look at Pantheon’s hosting solution, and how its infrastructure is set up perfectly to give clients the autonomy they want. Then we’ll look at the command line tools that exist for developers to easily manage updates to dozens (if not hundreds) of websites. Lastly, we’ll look at the websites themselves and how Drupal 8 was leveraged to provide flexible website instances with structured limits.

Pantheon and Upstreams

Pantheon is a hosting solution designed specifically for Drupal and Wordpress websites. For individual sites they offer a lot of features, however the ones we’re most interested in are single click installations of a new website and single click updates to the code base. Using a feature called Upstreams, users can create fresh installs of Drupal 7, Drupal 8, or Wordpress that all reference a canonical codebase. When new code is pushed to any of those Upstreams, any site installed from it gets notified of the new code, which can be pulled into the instance with the click of a button.

Outside of the default options Pantheon maintains internally, developers can also build their own Custom Upstreams for website creation. Anyone with access to the Upstream can log into Pantheon and click a button to install a new website based on that codebase. In short this codebase will handle installing all of the features every website should have, establish any default content necessary, and be used to roll out new features to the entire platform. This setup allows non-technical users to easily create new websites for their various properties, and then handoff specific websites to their appropriate property managers for editing. We’ll go over more specifics of this codebase in a later post.

Since a developer is no longer required for the creation of individual sites, this frees up a lot of time (and budget) for building new features or keeping on top of maintenance. The process for rolling out updates is simple: the developer writes code for a new feature and pushes it to the upstream repository. Once pushed, every site connected to this upstream will get an alert about new features and a shiny button that pulls them in with a single click.

Pantheon and Organizations

At this point it’s worth mentioning that custom upstreams are a feature of a special account type called an Organization. An organization is used to group multiple websites, users, and Custom Upstreams under one umbrella. Organizations also come with additional features like free HTTPS and code monitoring services. It’s recommended that each organization signup with their own organization account, rather than use one tied to their development partner. This gives them full control over who can create new websites using their Custom Upstream, who can manage all their websites, and who can only access specific websites.

Organization accounts and Custom Upstreams go a long way in helping organizations reduce the overhead they may have from managing several properties simultaneously. Having the option to create an infinite number of websites in-house helps reduce the cost of growth. Having every website using the same codebase means new features can easily be rolled out to the entire platform and security vulnerabilities can be handled quickly.

The only downside with this approach is updates are generally applied one site at a time. The developer can push the code to the Custom Upstream, but it’s necessary to log into every website and click the button to update that site. For a handful of sites, this might be manageable. For dozens to hundreds, this problem becomes tedious. In the next post we’ll look at some of the scripted solutions Pantheon has for applying and managing an ever growing number of websites at once.

Categories: Drupal

Security advisories: Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2018-003

Planet Drupal - 18 April 2018 - 8:34am
Project: Drupal coreDate: 2018-April-18Security risk: Moderately critical 12∕25 AC:Complex/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross Site ScriptingDescription: 

CKEditor, a third-party JavaScript library included in Drupal core, has fixed a cross-site scripting (XSS) vulnerability. The vulnerability stemmed from the fact that it was possible to execute XSS inside CKEditor when using the image2 plugin (which Drupal 8 core also uses).

We would like to thank the CKEditor team for patching the vulnerability and coordinating the fix and release process, and matching the Drupal core security window.

Solution: 
  • If you are using Drupal 8, update to Drupal 8.5.2 or Drupal 8.4.7.
  • The Drupal 7.x CKEditor contributed module is not affected if you are running CKEditor module 7.x-1.18 and using CKEditor from the CDN, since it currently uses a version of the CKEditor library that is not vulnerable.
  • If you installed CKEditor in Drupal 7 using another method (for example with the WYSIWYG module or the CKEditor module with CKEditor locally) and you’re using a version of CKEditor from 4.5.11 up to 4.9.1, update the third-party JavaScript library by downloading CKEditor 4.9.2 from CKEditor's site.
Reported By: Fixed By: 
Categories: Drupal

Acquia Developer Center Blog: How Acquia Blocked 500,000 Attack Attempts

Planet Drupal - 18 April 2018 - 8:15am

The Acquia blog has a fascinating and important post by Dries Buytaert and Cash Williams on the recent Drupal critical security vulnerability, and it's aftermath: Acquia blocks 500,000 attack attempts for SA-CORE-2018-002.

It's worth checking out in its entirety, but here are a few take-aways if you haven't gotten to it yet:

Tags: acquia drupal planet
Categories: Drupal

Nothing to Play Card Game Up On Kickstarter

Tabletop Gaming News - 18 April 2018 - 8:00am
Many of us have fairly extensive game collections. But, inevitably, we’ll look at them and go, “man, there’s just nothing to play.” Well, in Nothing to Play, your objective is to collect together consoles and games so that you do, indeed, have something to play. The card game is up on Kickstarter now. From the […]
Categories: Game Theory & Design

Sans Detour Launches Confrontation Classic Kickstarter

Tabletop Gaming News - 18 April 2018 - 7:00am
Confrontation is one of those games that us “old time gamers” tend to talk about with a wistful sigh. A game from the early days of minis that just didn’t quite have the backing to keep going strong. And then it was gone, seemingly forever. But “seemingly” is the operative word, as Sans Detour has […]
Categories: Game Theory & Design

C.A.T.S. One Year Retrospective - Turning fun concept into a hit - by Ivan Verde

Gamasutra.com Blogs - 18 April 2018 - 6:55am
A year ago we released C.A.T.S. Today it has more than 100 mln installs and a Game of the Year award. We want to share how we came up with the idea of the game and how you can remove design risks on early stages of development to create a hit.
Categories: Game Theory & Design

Psych Eval - Monster Hunter - by Nathan Savant

Gamasutra.com Blogs - 18 April 2018 - 6:55am
A discussion of the personality of the protagonist from Monster Hunter World based on gameplay mechanics, and filtered through the lens of the Meyers-Briggs personality profile.
Categories: Game Theory & Design

AdCoin Payments

New Drupal Modules - 18 April 2018 - 6:54am

Allow your customers to pay or donate through AdCoin.

Categories: Drupal

The ‘vocal minority’, feature creep and keeping yourself sane - by Celso Riva

Gamasutra.com Blogs - 18 April 2018 - 6:48am
Listening to users' feedback is important. But it's also important to not fall into the "feature creep" trap, and to learn about the "vocal minority".
Categories: Game Theory & Design

Pages

Subscribe to As If Productions aggregator