"Cracking Drupal
is probably going to be
the first Drupal book I buy."
- Angie 'webchick' Byron
In the listing for the function unvulnerable_show_me_the_data(), the first line of the function seems to have a typo:
drupal_set_title(t('Searching for %suser-name', array('%user-name' => $user_search)));
The bolded placeholder in the text above passed to the translate function should probably be %user-name instead of %suser-name.
Written by a Drupal expert, this is the first book to reveal the vulnerabilities and security issues that exist in the sites that have been built with Drupal and how to prevent them from continuing.
Curious about Drupal's security? Consider Drupal but want to make sure it's good enough? Read the Drupal Security Report
If you are concerned about whether your site is secure, consider using the Security Review Module to get an initial sense. If you're looking for something much more in depth than a module or a book, Drupal Scout offers a Security Review Service for Drupal Sites.
Comments
Also in the same code
Also in the same code listing, the delimiting quotes on many of the strings are incorrectly represented by double tick/apostrophe marks.