Join the open source coding forum

How to set secure permissions at a Drupal 7 website

Drupal 7 comes with complex permissions. I would like to make sure that the permissions are always setup correct. I also remember that I used in the past a module to block the permissions module to get modified by hackers. What's the best practice to handle with the site's permissions? 

shah's picture

Security Review module to find out security errors

Vote the answer: 
5
Average: 5 (2 votes)

The Security Review is a  module which lets you automate hardening many of the common mistakes. These common mistakes may make your site insecure. With many other parameters, it checks access control, secure file system permission, massive database errors. Sometimes it may site you false reports. Check issue of the module to prevent being fouled by it.

Rafsan's picture

Use File Permission module

Vote the answer: 
5
Average: 5 (1 vote)

File Permission ​​​​​​ is a module that may help you with permissions. It lets you setup file permissions on your Drupal. It uses drush and requires complete root access to perform the actions. That's why it may be problematic to use it on shared hosting.