Drupal Security for Coders and Themers
Drupal Security for Coders and Themers
Day:
Tuesday, 24. august 2010
Time:
09:00-09:50
45 minutes (+15 minutes Q&A)
Room:
tags
Learn from members of the Drupal security team about common vulnerabilities in module and theme code, how to spot them, and how to write secure code yourself.
A conceptual framework for handling user input safely, as well as the security aspects of Drupal APIs will be covered.
We will demonstrate Cross Site Scripting vulnerability and Cross Site Request Forgery vulnerabilities that have been found in contributed modules, and show how dangerous they are to your site and how they were fixed.
The "drupal confirmation
The "drupal confirmation form" API is actually http://api.drupal.org/api/function/confirm_form/6
a PDF of the slides are at:
a PDF of the slides are at: http://acquia.com/blog/drupal-security-presentation-drupalcon