Are there any special security measures when deploying a Drupal site on a production server?
For example: I can display that we need to remove install.php from the root directory. Are there any other actions?
Or a module may be available that checks the site for “world readiness”
The status report http: // your-site / admin / reports / status will tell you something is wrong.
, .
greggles drupal, .
, . Drupal , http://drupal.org/project/security_review
:
, update.php .
(re) / webroot
, , . , CHANGELOG.txt ..
, cron.php . , , .
, .inc PHP.
, , drupal , - drupal ! , drupal , , - . , drupal , , , Drupal. , Drupal, - , (, drupal.) , "" " ", drupals . , - .
Here's a great example for Drupal 7: http://www.madirish.net/242 .
Most of his suggestions also apply to Drupal 6.
You should also remove the theme registry recovery setting.
It restores your registry of topics in each folder, so it makes your site very slow.