Have you built your site with Drupal and do you have frequent security issues?
I have one site I built on Drupal. It is not as easy to maintain and keep up to date as WordPress and I plan to switch it at some point. I get tons of spam comments and signups, but haven't noticed any security problems at this point.
I had my site compromised recently and I have seen many people post the same issues in the forums. I think Joomla have better security.
I blame myself because when I used the motion captcha it kept out the spammers but one of my friends said she was having difficulty signing up so I removed the captcha for a few hours and BAM! I was attacked.
I am switching to Joomla.
I've a Drupal site too. Spam comments are an issue, but I don't let them get published without approval. And I do the clean up of approval queue once in a few days using SQL queries.
There are no other security issues.
By the way, spam comments are not a security issue of Drupal - one should start using Disqus for comments if they want authorised users to comment.
One problem I've had with Drupal is that Open id does not work as you would expect it to. In which case, I would simply make comments only allowed by authorised users of the website itself, which I think woudl be quite effective in avoiding spam.
Anusha, I had a lapse in judgement. I allowed my users to post without approval and that's where the problem arose. It was just for a few hours that I removed the security feature to allow some who said she had problems signing up. Biggest mistake.
Do you want some help? How many comments are there? I've to remove unpublished comments ranging from 60 -500 or even more if I haven't done the cleanup for some time. You can delete the published comments too - matter of a few minutes. Let me know if you want help. It's possible to do it from UI as well as command line (mysql queries).
It's not the comments. What happened was that I allowed members to place codes in their content, such as Adsense and Amazon. When I removed the captcha, they signed up and created content adding a code which would not allow me to remove their content, even though the permission is set that way.
It's a lot of spam and porn content so I placed the site in maintenance mode in order to remove them but it's really taking a lot of technical work. I going to have to adjust the htaccess file but am considering switching to WP or Joomla.
It also seems that it's affecting the function of the entire site as well.
It's a creative writing site for poetry and short stories only.
I'm not a Drupal Pro but I think this should not be tough. You can ask someone on Drupal forum to confirm this, as well as get some step by step instructions.
There are two "user" related tables in my Drupal 6.x database (might vary in your version).
There is a field which says: "created". All you have to do is delete all the users from tables - users and and user_roles who were created in the duration when you faced the attack.
Similarly, delete all the content - may be it will automatically get deleted if you delete users, I'm not sure - but a set of mysql queries would do your job. Consider taking help from Drupal forums.
Hope this is helpful.
Another thing, such stuff can occur in WP or Joomla too. Authorised users, who have permissions to post content, can break havoc on a website.
I tried that and it's the accounts just wont delete.
If this was the only issue I had, I would probably spend the energy on it but Drupal has had a lot of issues and I need an application I can count on. I love using Drupal because it very easy to build with but I find them to be unstable. I find that Joomla is better.
by thaivalentine 7 years ago
CMS is a great tool and I would love to hear feedback from people on preferences for Wordpress, Drupal or Joomla. Thanks in advance:)
by Csanad 5 years ago
I read that with Drupal you can do absolutely everything, but Wordpress is easier to learn and for administration of your blog. So which is better on the long term, Drupal or Wordpress?
by sumit4322 7 years ago
Which CMS should I choose for my business website? Joomla or Drupal?Want to revamp the old static website from scratch.
by plusMinus 5 years ago
Which CMS you like best between Joomla, Wordpress, Drupal and Blogspot?Lots of CMS are available and Joomla, Wordpress, Drupal and Blogspot are some of them. Which one you like best?
by Shahidullah Kaysar 5 years ago
What is your favorite CMS Blogger,Wordpress,Drupal or Joomla?
by Sonjakuzmanovic 3 years ago
Moodle vs. Wordpress vs. Totara vs. Drupal vs. JoomlaHi,We are about to release beta version of Nimble Orbit and we need your VOTE!Nimble Orbit enables easy digital file management integrated with most popular CMS and LMS platforms is about to release beta version. In order to prepare most suitable...
Copyright © 2018 HubPages Inc. and respective owners. Other product and company names shown may be trademarks of their respective owners. HubPages® is a registered Service Mark of HubPages, Inc. HubPages and Hubbers (authors) may earn revenue on this page based on affiliate relationships and advertisements with partners including Amazon, Google, and others.
|HubPages Device ID||This is used to identify particular browsers or devices when the access the service, and is used for security reasons.|
|Login||This is necessary to sign in to the HubPages Service.|
|HubPages Traffic Pixel||This is used to collect data on traffic to articles and other pages on our site. Unless you are signed in to a HubPages account, all personally identifiable information is anonymized.|
|Remarketing Pixels||We may use remarketing pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to advertise the HubPages Service to people that have visited our sites.|
|Conversion Tracking Pixels||We may use conversion tracking pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to identify when an advertisement has successfully resulted in the desired action, such as signing up for the HubPages Service or publishing an article on the HubPages Service.|