Security

A CAPTCHA is a challenge-response test most often placed within web forms to determine whether the user is human. The purpose of CAPTCHA is to block form submissions by spambots, which are automated scripts that post spam content everywhere they can. The CAPTCHA module provides this feature to virtually any user facing web form on a Drupal site.

Co-maintainer wanted

We do this our spare time, which is unfortunately almost nonexistent at the moment due to real life obligations. To give the CAPTCHA module the required level of maintenance, an extra co-maintainer would be welcome. If you're interested in helping with this very popular module, please contact me or open an issue in the CAPTCHA module issue tracker.

Access control for user roles based on taxonomy categories (vocabulary, terms).

Allows users to assign role-based viewing and editing permissions for nodes. This module has a couple of different objectives from other node permissions modules.

1) If you only need to manage who can edit content (not who can view pages that are in the published state), you can disable and hide the view permissions component of this module.

2) Users can optionally be restricted from editing their own node permissions.

Implements simple challenge-response authentication. Reduces susceptiblity to replay attacks. last release was 4.5

This module is about strengthening the security of your Drupal site. Drupal is fairly secure out of the box, but as new technology emerges with HTML5, site maintainers must keep up.

This module:

Bad Behavior is a set of PHP scripts which prevents spambots from accessing your site by analyzing their actual HTTP requests and comparing them to profiles from known spambots. It goes far beyond User-Agent and Referer, however.

This node_access module governs access to nodes based on the taxonomy terms applied to the nodes. A simple scheme based on taxonomy, roles and users controls which content is visible.

The module maintains Apache access control files (.htpasswd). User name/password is taken from Drupal user database.
Users are listed according role.

This module prevents your site from being framed by another one by adding a Javascript frame buster (also known as a frame breaker) to your site.

Breaking out of frames helps add another layer of clickjacking prevention for secure environments like shopping carts.

Frameprevention supports the X-Frame-Options HTTP response header values of SAMEORIGIN and DENY and/or a Javascript and CSS-based method to break out of frames.

This module has five main functions.

1. Alter the appearance of the core node search form
2. Group content types for more meaningful searching
3. Restrict search results by the content type.
   This is a role based restriction.
4. Restrict search results from showing individual items.
   
5. Alter the pager limit (aka number search item results per page).
   

Admin user (uid 1) is exempt from restrictions.