サクサク読めて、アプリ限定の機能も多数!
トップへ戻る
今年の「かわいい」
www.drupal.org
Some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows GET, PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8,
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploi
There will be a security release of Drupal 7.x, 8.4.x, and 8.5.x on April 25th, 2018 between 16:00 - 18:00 UTC. This PSA is to notify that the Drupal core release is outside of the regular schedule of security releases. For all security updates, the Drupal Security Team urges you to reserve time for core updates at that time because there is some risk that exploits might be developed within hours
If it’s available, go to Administer (or Administration) > Reports > Status report. This will list your version number if you have Drupal 6.0 or later. In Drupal 5.x and earlier, the path to go to is Administer > Logs > Status report. Failing that, look for a file called CHANGELOG.txt in the root of your Drupal directory and open it up to find the version you are running. If CHANGELOG.txt is missin
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised. The security team has written an FAQ about this issue. Edited 2020, February 13 to fix links to patch files. Upgrade to the most recent version of Drupal 7 o
Drupal 7 and 8 core highly critical release on March 28th, 2018 PSA-2018-001 Advisory ID: DRUPAL-PSA-2018-001 Project: Drupal Core Version: 7.x, 8.x Date: 2018-March-21 Description There will be a security release of Drupal 7.x, 8.3.x, 8.4.x, and 8.5.x on March 28th 2018 between 18:00 - 19:30 UTC, one week from the publication of this document, that will fix a highly critical security vulnerabilit
This security advisory fixes multiple vulnerabilities in both Drupal 7 and Drupal 8. See below for a list. Comment reply form allows access to restricted content - Critical - Drupal 8 - CVE-2017-6926 Users with permission to post comments are able to view content and comments they do not have access to, and are also able to add comments to this content. This vulnerability is mitigated by the fact
Overview Paragraphs is the new way of content creation! It allows you — Site Builders — to make things cleaner so that you can give more editing power to your end-users. Instead of putting all their content in one WYSIWYG body field including images and videos, end-users can now choose on-the-fly between pre-defined Paragraph Types independent from one another. Paragraph Types can be anything you
Twig Tweak is a small module which provides a Twig extension with some useful functions and filters that can improve development experience. ✧ Cheat sheet About 8.x-2.x branch Even though the code is not much different from 8.x-1.x, the API is not fully compatible. It should take you a few minutes to update your Twig templates. Otherwise you can stay on 8.x-1.x branch which is still supported. Rec
Drupal 9 is here: the easiest to use, most powerful version yet. Built by the world's best open source community. Disabling Drupal 8 caching (render cache, dynamic page cache, Twig cache) during development is useful for seeing changes without clearing the cache. IMPORTANT NOTE: Accessing the site as an anonymous user still makes use of caching even when local development settings have been enable
Advertising sustains the DA. Ads are hidden for members. Join today Drupal 8 includes support for a Kwalify (http://www.kuwata-lab.com/kwalify/) inspired schema/metadata language for configuration YAML files. Kwalify itself is written in Ruby and we needed slight adjustments in the format, so not all of the details of Kwalify are directly applicable, but it is pretty close. Table of contents Cheat
Note: If you use PHPStorm, it provides a similar functionality (blog, docs), as does the Devel module. This module enables you to use Xdebug breakpoints with Twig templates. INSTALLATION On Drupal 8.3.x or higher, use Composer to install the module and its dependencies (with the --dev flag so you can omit it on production builds): composer require --dev drupal/twig_xdebug Installation methods for
Composer can be used to manage Drupal and all dependencies (modules, themes, libraries). Make sure you have composer installed on your local machine before executing any Composer commands. Download Drupal core using Composer Use the composer template at drupal/recommended-project. This template ensures Drupal Core dependencies are the exact same version as the official drupal release. Other approa
Advisory ID: DRUPAL-PSA-2016-001 Project: Drupal contributed modules Version: 7.x Date: 2016-July-12 Security risk: 22/25 ( Highly Critical) AC:None/A:None/CI:All/II:All/E:Theoretical/TD:All Vulnerability: Arbitrary PHP code execution Update: Release Annoucements The following modules have security releases that are now available, listed in order of severity. There are no more releases planned for
Theming guide for Drupal. You can browse contributed themes or build a custom theme for your site. Defining a theme with an .info.yml fileDefine a Drupal 8 theme with an .info.yml file. Drupal theme folder structureA theme is a collection of files that define the presentation layer. You can also create one or more "sub-themes" or variations on a theme. Adding Regions to a ThemeAdding regions to a
Now is the time to change the history of diversity and inclusion in open source. At DrupalCon Global from Jul 14-17 our featured speakers are tackling this issue head-on. Advisory ID: DRUPAL-PSA-2014-003 Project: Drupal core Version: 7.x Date: 2014-October-29 Security risk: 25/25 ( Highly Critical) AC:None/A:None/CI:All/II:All/E:Exploit/TD:All Description This Public Service Announcement is a foll
Radix is a base theme for Drupal. It has Bootstrap 4, Sass, ES6 and BrowserSync built-in. Documentation See https://docs.radixtheme.org. Watch the Getting Started with Bootstrap 4 using Radix in Drupal 8 video by Ivan Zugec. Quick start for Drupal 8 Which version? For Bootstrap 4, download 8.x-4.x. For Bootstrap 3. download 8.x-3.x. Download and enable radix and components: composer require drupal
Fieldgroup will, as the name implies, group fields together. All fieldable entities will have the possibility to add groups to wrap their fields together. Fieldgroup comes with default HTML wrappers like vertical tabs, horizontal tabs, accordions, fieldsets or div wrappers. The field group project is a follow-up on the field group module in CCK. Available group types Fieldsets Horizontal tabs Vert
Replaces administrative overview/listing pages with actual views for superior usability. Features Filter all administrative views via AJAX. Perform any kind of bulk/mass operations on items in administrative views. Filter content by title, node type, author, published status, and/or vocabulary. Filter comments by title, author, node title, or published status. Filter users by name, ban/blocked sta
Transform Data into Information. Charts are a very good way to visualize a lot of data in a way that can be quickly digested. Features (All) Wide chart type support: Pie, Line, Bar, Column, Area or Scatter charts. API: A Drupal-friendly syntax for creating charts easily, regardless of the underlying library. Views integration: Display the Views results as charts. Examples: The module includes lots
Contribution is a key part of every DrupalCon, and DrupalCon Global is no different. Anyone can be part of the virtual contribution effort. NOTE: We are now using a different system to track version-to-version changes in Drupal. Most of the theme changes between Drupal 6 and Drupal 7 are noted on this page, but changes that were recorded after we adopted the new system can be found here: http://dr
Sleek, intuitive, and powerful mobile first front-end framework for faster and easier web development. Bootstrap has become one of the most popular front-end frameworks and open source projects in the world. This base theme bridges the gap between Drupal and the Bootstrap Framework. Features jsDelivr CDN for "out-of-the-box" styling and faster page load times. Bootswatch theme support, if using th
Advertising sustains the DA. Ads are hidden for members. Join today A theme hook suggestion is an alternate template (.tpl.php) file that you have created to override the base or original template file. For Drupal 8 follows Template naming convention URL. Theme debug mode As of Drupal 7.33, Drupal core has a theme debug mode that can be enabled and disabled via the theme_debug variable and is very
The modules list page can become quite big when dealing with a fairly large site or even just a dev site meant for testing new and various modules being considered. What this module aims to accomplish is the ability to quickly find the module you are looking for without having to rely on the browsers search feature which more times than not shows you the module name in the 'Required by' or 'Depend
Advertising sustains the DA. Ads are hidden for members. Join today A theme is a collection of files that define the presentation layer. You can also create one or more "sub-themes" or variations on a theme. Only the .info file is required, but most themes and sub-themes will use other files as well. The following diagram illustrates the files that are found in a typical theme and sub-theme. Drupa
Smart App Banners invite users to install or open a native iOS mobile app if the site provides one; available in iOS 6 and higher. THIS MODULE IS NOT NECESSARY ANYMORE The metatags necessary for Smart App Banners, and more are now available in the Metatag module itself (no additional download necessary). There is no migration option. Old module description Mobile Safari includes the following feat
This guide includes tutorials and other information that you need to create modules for Drupal 7. Other helpful resources: API reference: https://api.drupal.org/api/drupal/7 Coder module: https://www.drupal.org/project/coder The successor to this guide is the Drupal 8 guide to creating custom modules Getting startedMain topic described: module file name and location Telling Drupal about your modul
This module allows Drupal to bypass the PHP mail() function and send email directly to an SMTP server. The module supports SMTP authentication and can even connect to servers using SSL if supported by PHP. Drupal 8/9 version requires PHPMailer 6.x If you're using the most recent version of SMTP, you must download the PHPMailer library. It is suggested you install the SMTP module via composer: comp
Description This project is a drop-in solution to enable the collections of schemas available at schema.org on your Drupal 7 site. The major search engines including Bing, Google and Yahoo! have agreed to recognized these in order to improve the display of search results. Documentation Screencast: learn how to use this module to build Google Rich Snippets for people, events and recipes. Features S
次のページ
このページを最初にブックマークしてみませんか?
『Drupal - Open Source CMS | Drupal.org』の新着エントリーを見る
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く