Security

User Permissions provides an interface for giving additional permissions to individual users without the need to assign them to a special role. When this module is enabled, users with the 'administer permissions' permission can access the 'User Permissions' tab on each user's account.

Donations

If you found this module useful, please consider making a donation via PayPal.

Tutorial of Alpha 4 in action

NOTE: This module is deprecated in favor of Auto Assign Role, which can be configured to provide the same functionality (and much more)

• Auto Assign Role Module

Allows the user to add a fifth component on the user registration URL containing a comma-separated list of roles to be automatically assigned to the newly-created user.

For example:

Stale IP addresses clog up your database with useless data, not to mention, may be subject to subpoena by legal authorities in some jurisdictions.

The IP anonymize module helps ensure users' privacy by implementing a retention policy for IP addresses logged in Drupal's database tables. IP addresses are scrubbed on each cron run according to a configurable retention period. For example, you may wish to preserve IP addresses for a short while for purposes of identifying spam.

This module implements the OAuth 1.0 standard for use with Drupal and acts as a support module for other modules that wish to use OAuth.

For OAuth 2.0, install the Oauth 2.0 module instead of this one.

Automated XSS scan of your Drupal website through Simpletest.

Hashcash is a module which implements the Hashcash algorithm to help protect sites from spam. This module is similar to the popular wordpress plugin wp-hashcash.

Administrators are able to specify which roles need to pass a Hashcash check, and also which forms should have the hashcash check inserted into them

This module works with aggressive caching mechanisms employed by modules like Boost.

Formerly part of the Devel module package, Devel Node Access (DNA) displays information related to the node access mechanism of your Drupal installation.

The {node_access} table and functionality are part of Drupal core, but they lie dormant until you install one or more node access modules that supply entries into the {node_access} table. Each node access module provides different strategies for controlling what each user can do with your nodes.

DNA has three audiences:

• It helps Drupal admins understand what is happening on their site, visualize how node access modules interact, verify that their customizations give the intended results, and finally answer the famous question: Why does this user have access to that node?
• It helps module and website support diagnose issues with node access on remote sites by instructing their clients to post screenshots and/or cut&paste listings of DNA output.
• It helps node access module developers implement and test proper behavior of their modules.

DNA is a tool for module and site development; it is not intended to run continuously on production sites, and its output is of no interest to website visitors, but if you run any node access module, DNA will help you with your work.

The htmLawed module uses the htmLawed PHP library to restrict and purify HTML for compliance with site administrator policy and standards and for security. Use of the htmLawed library allows for highly customizable control of HTML markup. See the handbook for more on the module. Current htmLawed modules for Drupal 7 and 8 can use an htmLawed library that is specified by the Libraries module.

About htmLawed