Audit Custom PHP Code with PHPCS Security Audit
Apply PHPCS security rules to custom Drupal modules and themes while excluding third-party code.
Security
Audit Production npm Dependencies with GitHub Actions
Use npm audit in GitHub Actions to detect high-severity vulnerabilities in frontend packages shipped to production.
Scan the Current Checkout for Secrets with Gitleaks
Use Gitleaks in GitHub Actions to detect credentials and tokens in the current checkout without exposing findings.
Composer Dependency Audit with GitHub Actions
Audit locked PHP dependencies for known vulnerabilities and abandoned packages with Composer and GitHub Actions.
Set Up SMTP in Drupal with Your Company Email Server
A practical Drupal guide to sending site email through a company SMTP server, including SMTP module setup, credentials, TLS, SPF/DKIM/DMARC, testing, troubleshooting, and production safety.
Common GitHub Workflows for Code Scanning, Image Builds, Lighthouse, and Deployments
A practical guide to common GitHub Actions workflows: PHPCS, PHPStan, CodeQL, dependency review, Docker image builds, container scans, Lighthouse tests, smoke tests, and deployment gates.
Drupal CORS Configuration for APIs and Decoupled Applications
A practical guide to configuring Drupal CORS for JSON:API, REST, decoupled frontends, credentialed requests, preflight debugging, and secure production deployments.
How to Secure Drupal Forms Against Spam and Abusive Content
Build a layered Drupal form protection strategy with Honeypot, CAPTCHA, rate limiting, and a custom abusive-word validation service for contact forms.
How Drupal Handles the Real Client IP Behind Akamai or a CDN
Learn how Drupal determines the real client IP behind Akamai, a CDN, reverse proxies, or Acquia hosting, including AH_CLIENT_IP, trusted headers, and spoofing risks.
How to Connect the Samlauth Module in Drupal with Your Company IDP
A practical step-by-step guide to connect Drupal with a company Identity Provider using the SAML Authentication samlauth module, including metadata exchange, attribute mapping, testing, and common troubleshooting fixes.