QA Accounts enables you to login to a Drupal site using a well known username/password combination. When 1.0 was released, it also was marked for security coverage. The module prioritizes ease of use…
Here’s what makes this genuinely difficult. AI generated code compiles and looks clean, which can lead reviewers to trust it more than they should. Human written code with a subtle SQL injection is…
Jul 17, 2026 / 15 min Read Summarize with: An onboarding email sequence is a series of automated emails sent after a user signs up, subscribes, or makes a purchase. Each message guides…
Most sysadmins don’t realize there’s an IP conflict until something goes offline. That’s where IP address management (IPAM) tools help. They keep track of IP addresses so you can spot conflicts before they…
And that is only the part we actually fund. Some of the most critical work of all, like responding to security issues and managing releases, still runs entirely on donated volunteer time or…
Monitoring for your SLOs is not optional, keep it, invest in it, and make sure your alert thresholds reflect the failure modes your users actually experience. Then decide, based on your debugging evidence,…
Both are built on Drupal. This gives organizations a shared foundation for skills, content practices, design systems, security, and integrations, while allowing each site to choose the right balance of speed, simplicity, flexibility,…
In this article I will go through the issue I needed to correct, and how I altered the data coming out of the Whitespace API without creating a new plugin.As it turns out,…
image: type: object title: Image required: [src] properties: src: type: string format: uri-reference contentMediaType: “image/*” x-allowed-schemes: [http, https] # this is image-uri, itself a nested $ref alt: { type: string } width: {…
Experimental workloads present a third case. Testing an architecture. Evaluating a new stack. Running a proof-of-concept that may change significantly before it reaches production, in these situations, committing to bare metal hardware can…
Jul 18, 2026 / Bruno S. / 7 min Read Summarize with: ChatGPT email integration links ChatGPT’s language model to an email inbox so it can draft replies, summarize threads, prepare follow-ups, extract…
As before, security reports should be submitted by clicking the “Report a security vulnerability” link on the project page. If a project has already migrated public issues to git.drupalcode.org, you may also mark…
The ln command in Linux is one of those tools that looks simple on the surface but trips people up constantly. Hard link or symbolic link? What’s the difference? When does it actually…
Each time you complete a sprint (meaning a unit of work that takes place over a preplanned period of time), send a report to the customer about what took place, as well as…
The open standard Anthropic published in November 2024 has moved faster than most anticipated. MCP now sits beneath a growing layer of production agent workflows, and the infrastructure choices teams make at this…
That matters especially after the Drupal 7 experience. If you build a new site on a stable backend today, you can refresh the frontend, design, components, and campaigns for years without replacing the…
DORA requires financial entities to report major ICT incidents within four hours of classification. NIS2 sets a 24-hour window for significant breaches. Both carry penalties of up to 2% of annual global turnover…
Home Articles Drupal core July security updates: what site owners should check now Drupal.org published several moderately critical Drupal core security advisories on July 15, 2026.An audit does not have to be a…
