'; $output .= t('You should take the security of your site very seriously. Fortunately, Drupal is fairly secure by default. The Security Review module automates many of the easy-to-make mistakes that render your site insecure, however it does not automatically make your site impenetrable. You should give care to what modules you install and how you configure your site and server. Be mindful of who visits your site and what features you expose for their use.'); $output .= '

'; $output .= '

'; $output .= t('You can read more about securing your site in the drupal.org handbooks and on CrackingDrupal.com. There are also additional modules you can install to secure or protect your site. Be aware though that the more modules you have running on your site the greater (usually) attack area you expose.', array('!do' => 'http://drupal.org/security/secure-configuration', '!cd' => 'http://crackingdrupal.com')); $output .= '

'; $output .= '

' . l(t('Drupal.org Handbook: Introduction to security-related contrib modules'), 'http://drupal.org/node/382752') . '

'; /*$output .= '

' . t('Contrib modules for additional security and strength') . '

'; $output .= '

' . t('There are a wealth of modules on drupal.org.') . '

'; $items[] = _security_review_help_ssl(); $items[] = _security_review_help_spam(); $output .= theme('item_list', $items);*/ return $output; } function _security_review_help_ssl() { $description = t('The transfer of data between the visitor on your site and you Drupal installation can be secured through encryption.'); $element = array( 'problem' => t("Secure and private communication"), 'type' => 'ssl', 'description' => $description, 'options' => array( array( 'name' => 'Secure Pages', 'href' => 'http://drupal.org/project/securepages', ), ), ); return theme('security_review_help_options', array('element' => $element)); } function _security_review_help_spam() { $element = array( 'problem' => t("Spammers and spam content"), 'type' => 'spam', 'description' => t('Spammers use automated tools and systems to bombarge your site with unsollicited content. You can use modules to prevent the submission of such content.'), 'options' => array( array( 'name' => 'CAPTCHA', 'href' => 'http://drupal.org/project/captcha', ), ), ); return theme('security_review_help_options', array('element' => $element)); } function theme_security_review_help_options($element) { $output .= '
'; $output .= l($element['problem'], 'admin/reports/security-review/help', array('fragment' => $element['type'], 'attributes' => array('class' => 'sec-rev-help-dyn'))); $output .= '
'; $output .= '

' . $element['description'] . '

'; foreach ($element['options'] as $option) { $items[] = l($option['name'], $option['href']); } $output .= theme('item_list', array('items' => $items)); $output .= '
'; $output .= '
'; return $output; }