All customers patched against vulnerability SA-CORE-2018-004

Xplain Hosting has finished protecting all its Drupal customers against a critical security vulnerability recently found in Drupal 6, 7 and 8. A FAQ was also released to address the impact of SA-CORE-2018-004.

Automatic Drupal core updates is a core feature of Xplain Hosting: we don't leave patching to unavailable or busy Drupal development companies. Security is our number one priority. Security updates are free and included in every plan.

How to Determine Whether You Can Upgrade From Drupal 6 to Drupal 8 (Yet)

Elliot Christenson writes about upgrading from Drupal 6 to Drupal 8:

Like many of you, I have a few sites that are fairly complex, utilize dozens of modules - and still run on Drupal 6. At this point, I don't want to invest the time to migrate them to Drupal 7 because I feel the momentum is finally beginning to shift into high gear for Drupal 8.

So, how do you know whether the Drupal 8 ecosystem is ready for a relatively straightforward migration? Thankfully, there are some great resources available!

Three Things Every Drupal Site Needs to Kick Ass

Why Xplain Hosting provides free Drupal core upgrades: Security is not a deliverable, it's a discipline says Lullabot. Having a secure website is not something we ever complete, but is an ongoing process. The costs of ignoring that process can be severe.

Mollom is shutting down, what are the alternatives?

Mollom has reached its End of Life. 2bits blogs about an alternative, antibot.

The recommended alternative by Acquia is a combination of reCAPTCHA and Honeypot.

But there is a problem with this combinationa: reCAPTCHA, like all modules that depend on the CAPTCHA module, disable the page cache for any form that has CAPTCHA enabled.


Another alternative that we have been using that does not disable the page cache is antibot module.

Drupal console

A new tool may help you with Drupal 8, Drupal console:

The Drupal Console is a suite of tools run from a command line interface (CLI) to generate boilerplate code and interact with a Drupal 8 installation. From the ground up, it has been built to utilize the same modern PHP practices which were introduced in Drupal 8.

Drupal Console provides a number of commands for creating module scaffolding and boilerplate code. For any command, you will be asked a series of questions about what you want to generate. Based on that user interaction, it will then generate the required boilerplate to build the requested component.

Drush commands for every day usage

Fluffy writes about everyday Drush commands:

Drush stands for "Drupal shell" which means a powerful tool for managing Drupal installation from command line interface. Drush provides a lot of useful commands for dealing with a cache, modules, cron, database etc. But some of contrib modules also provide some extra drush commands for specific functionality (like features module comes with commands for managing features). Here's a bunch of a useful drush commands which I use every day.

Good form: 5 tips for a smooth sign-up process

Cheryl writes about sign-up and contact forms, and provides 5 tips to improve them:

A lot of effort goes into engaging your visitors to ‘Sign-up’ or ‘Contact’ you. You send them a warm and fuzzy invitation to complete the form, tell them all the great reasons why they should complete the form… but who likes to complete a form? You can help guarantee a smooth sign-up process and increase the completion rate of your web forms with these five tips.

5 Mistakes to Avoid on Your Drupal Website - Number 1: Architecture

Heather James writes about mistakes in architecture with Drupal sites:

From an architecture standpoint, these are the most vital decisions you'll make to ensure the success and performance of your Drupal website.

  • How you structure content
  • How you configure the display
  • How you organize functionality

Developer magic: develop locally, but retrieve sites/default/files from production server

Lullabot nailed it: If you work on large Drupal sites, you probably run into the problem of the enormous "files" directory. Keeping your development server (or personal computer) in sync with production is a big pain, but without those uploads and file attachments it's easy to miss important design problems with site content.

They provide a fix, but one thing we would like to do is serve the local file if it exists, only then access the remote server. This is the set of rewrite rules we recommend you put in your vhost definition (don't touch your Drupal .htaccess):

A Simple Drupal 7 to Drupal 8 Migration

Blake Hall writes about his experience doing a simple Drupal 7 to 8 migration:

The developer in me has been itching to give it a try on a "real" project. The Drupalize.Me site itself is pretty complex: e-commerce (with recurring billing), video delivery, and piles and piles of content. Suffice it to say it's not a prime candidate for migration right now. Our blog however, is definitely a better prospect. Justin has a great new design for us. Amber has mentioned how much she'd like the new Drupal 8 authoring tools. The blog is relatively straight-forward which makes it a great way for our whole team to start using Drupal 8. So, as we start to think about upgrading our blog the first thing we're going to have to think about is data migration. Let's take a look at Migrate module, that's now part of Drupal core, and see how much work we might have ahead of ourselves.