Search
Training
New Podcast
Newsletter
Everywhere
Check out DrupalEasy around the web:
Who are we?
DrupalEasy is the collective expertise of Ryan Price and Michael Anello, who joined forces to provide training and consulting services worldwide. Read all about them and what they can do.
What is Drupal?
Drupal is a free, super-powerful content management system for sites that require information posting and collection, including blogs, forums, videos, photos, and databases of information. We think it is the best platform available. Here's why...
Why Drupal?
More and more savvy organizations are going with Drupal for content management, and its no mystery why. It’s free, flexible, and easy to maintain for small or large volume sites. Learn more...
DrupalEasy Podcast 16: Interview with Greg Knaddison, Author of "Cracking Drupal"
Greg Knaddison (greggles) is the author of Cracking Drupal: A Drop in the Bucket, a new book about Drupal security. Greg has been a contributing member of the Drupal community for over three and one-half years and is a member of Drupal's Security Team. He is a maintainer of 2 of Drupal's most widely-used contributed modules: Pathauto and Token.
Join DrupalEasy's Mike Anello as he interviews Greg about all things related to Drupal security including best practices for site administrators and module developers.
Wiley Publishing has provided DrupalEasy with several copies of Greg's book to give away to listeners - listen to the podcast to learn how you can get your hands on a free copy! Be sure to include your contact information in case you win!
Some of the links mentioned in the podcast:
- Drupal Security Scanner module
- Salt module
- Persistent login
- Official Cracking Drupal book site - includes code snippets and modules from the book.
- Greg and Ben Jeavons' proposed session for DrupalCon Paris
- Growing Venture Solutions
- Coder Module
- @knaddison on Twitter
- chx's Drupal.org user profile
- Cross-site Scripting description from Wikipedia.com
- Drupal.org security advisory 2008-063 - this one deals with incorrect hook_menu() upgrades.
I think I had some sort of mind-block that kept me from pronouncing Greg's last name correctly during the podcast. I believe it should be pronounced "ka-NA-da-son" (I insisted on making the "K" silent). My apologies to Greg!
