Understanding and Implementing Website Security: Application Layer
We're going to turn our focus to the application layer and look at the kinds of threats we need to guard against in Drupal and WordPress.
We're going to turn our focus to the application layer and look at the kinds of threats we need to guard against in Drupal and WordPress.
As I have written and talked about before, my favorite feature of Drupal 8 is Configuration Management.
Editor's Note: The structure of Terminus commands have changed since this post was written. The example commands have been updated to reflect the current structure of terminus command:subcommand <site>.<env>
. Also when this post was written, Drupal 8 was the newest version of Drupal and was a large technical departure from Drupal 7 (hence the need for robust migration processes described in this post).
Australia-based digital design agency and Premier Pantheon Partner Morpht provides valuable thought leadership at the forefront of the digital mad dash. Managing Director of Morpht, Murray Woodman, had this to say about this rapidly evolving landscape and where Drupal 9 fits in: “Over the years, we’ve seen an explosion in the number of marketing and social platforms on the market, and many new services are coming and going — creating a rapidly evolving landscape.
Content authoring can be painful. Drupal Gutenberg is an editor, originally written by the WordPress community, that makes it easy to create content—from long-form feature articles to rich landing pages.
As soon as we started presenting Gutenberg in client meetings, we knew it was huge. “How fast can we get this?” was the usual response. The people most eager to get started were always content producers. We were not surprised.
There’s a tendency in our industry to think of Drupal and WordPress as opposing camps, like Xbox vs PlayStation or iOS vs Android. Agencies pick sides, defend their choice, feel slightly superior to those on the other side, and get deep into specialization.
Have you had “the talk” with your clients? You know, the one where you tell them that if they are going to be doing it, they need to be safe. If they are going to collect private information or integrate external services like PayPal or MailChimp, it is time to sit down and have a discussion—about security. A company’s website is a portal to customer information, and if hacked, can lead to a very public breach resulting in loss of customers, fines, and brand damage.
Drupal configuration is the all-important glue that instructs the Drupal core and contrib code how to operate in the context of the current web application. In Drupal 7, there was no formal configuration API in core. The ctools contrib module provided an exportables API that was widely implemented, but was not universally supported. Drupal 8 has greatly improved on this state of affairs by providing the Configuration Management API in core. Now, configuration can be handled in a uniform and predictable way.
Before diving into specifics on the RainU story itself, we’d first like to introduce Pantheon partner agency Mediacurrent and the best-in-class Drupal solutions it offers to its clients.
Every engagement metric from content reach to conversions is downstream from site speed. Good performance means good user experience, and expectations are ever rising. Research from Google estimates that most sites lose half their mobile visitors while the page is loading.
In light of this, I wanted to see what the numbers actually showed for how our platform (and others) measured up. Speed is one of our core value propositions, but does Pantheon actually deliver?