After drupalgeddon2, ComputerMinds to migrate all sites to brand new Perl based CMS.

1st Apr 2018

In light of the recent Drupal security release we at ComputerMinds have taken the decision to rebuild all our client sites in a brand new bespoke CMS custom built in Perl.

Our new CMS, codenamed F001, offers significant improvements over the Drupal architecture - mainly by managing to fit the entire codebase into a single line of code. Other significant improvements include :

  1. Support for HTML1.0 only. By standardising on this well established HTML version we have completely eliminated any cross browser issues, drastically reducing testing time and complexity.

  2. Removing all javascript. Everyone knows javascript is a horrid...

Read more

Drupal security release SA-CORE-2018-002 - now the dust has settled

29th Mar 2018

No one seems quite sure what to call SA-CORE-2018-002, although there does seem to be a trend towards drupalgeddon2.  Whatever we call it, it's here and it is every bit as scary as everyone had feared - the key lines from the update :

How difficult is it for the attacker to leverage the vulnerability? None (user visits page).
What privilege level is required for an exploit to be successful? None (all/anonymous users).
Does this vulnerability cause non-public data to be accessible? All non-public data is accessible.
Can this exploit allow system data (or data handled by the system) to be compromised?...

Read more

Preparing for PSA-2018-001

28th Mar 2018

Drupal security patch b-movie poster

If you are reading this, then you are probably already aware of the impending security update that is due to drop this evening (UK time). At this stage, it is not clear quite how serious the security update is, we are hoping it's not at the level of Drupalgeddon (PSA-2014-003 - Oct '14) - but we are working on the assumption that it is.

 

So this means, we are aiming to get all sites we manage - including any test sites - secure and patched within 30 minutes of the release being made available.

 

Our developers are either...

Read more

Class naming for Javascript development in Drupal

14th Mar 2018

We've settled on what we think is a best practice for class naming for Javascript in Drupal – let me explain what I mean and then talk you through our reasoning.

Read more