Prerequisites

• A web server such as Apache, Nginx or Microsoft IIS
• Any of the following databases: MySQL – 5.5.3 (MariaDB 5.5.20, Percona 5.5.8) or higher with an InnoDB-compatible primary storage engine. PostgreSQL – 9.1.2 or higher. SQLite – 3.4.2 or higher

However, all these requirements can be met by using a program like XAMPP. See here how to use and configure it.

Downloading Drupal for Windows 10

This software can be downloaded for free from here. Please download the compressed file in .zip format.

Creating the new database.

Now it is necessary to create the new database. Indeed, this is essential to be able to use Drupal. Consequently, it opens the XAMMP control center. Once there, please click on the MySQL Configure button.

Immediately the database manager will be deployed. Please click on New. Then assign the name you want and finally click on Create.

Decompressing the downloaded file.

Back to the previously downloaded file, it’s time to do two steps. First decompress it and assign a simpler name to the folder. In my case Drupal. Then move it to the next location:

C:\xampp\htdocs

Starting the Drupal installation in Windows 10

Once these previous steps are done, it is time to start the installation of Drupal. With this in mind, open the following address in your web browser.

http://localhost/Drupal 

Please note that this address may vary depending on the name of the assigned folder. The installer will be immediately deployed. First set the preferred language.

Then, the wizard offers the installation mode. Standard, minimum or a sample Demo. For the purposes of this tutorial, I selected the Standard installation

The assistant will then verify the requirements for running Drupal. In this case, my server needs opcache. However, this component is not essential to run the installation. Therefore, we can skip it

In the next screen, please enter the parameters of the database. Please remember to enter the name of the database you just created.

Now wait a few moments while the installation of Drupal

Once the installation is complete, it is time to set up the website. Please set the name and email address of the website. It is also necessary to assign a username and password. This user must also be provided with an email address. In addition to the region parameters.

Finally the installation will be finished!

From now on, you just have to start the server and paste the following web address:

http://localhost/drupal 

This way we have seen how to install Drupal in Windows 10. So you can enjoy this powerful and friendly framework. See you soon!

The post How to install Drupal in Windows 10 appeared first on Linux Windows and android Tutorials.

Very recently, a botnet has started severe exploitation of the Drupalgeddon2 on a large scale. The botnet consists of servers and smart devices. It also acts more like a worm. For your reminder, Drupalgeddon2 is a vulnerability that can allow running codes on the website from the URL. Learn more about Drupalgeddon2.

Botnet attacking Drupal sites

Security researchers from Qihoo 360 Netlab and GreyNoise Intelligence have been keeping a sharp look on the botnet. They spotted the shift of the botnet’s target from other vulnerabilities to Drupalgeddon2. The shift took place at the starting of this week. Netlab team named the botnet as Mushtik as the botnet uses the name in many of its payloads.

Mushtik is developed on top of a really old malware strain Tsunami that’s being used for years for creating botnets to infect Linux servers and other Linux-based systems. The hacker(s) initially used Tsunami for DDoS attacks, but thanks to its feature set, they’ve shifted towards exploiting known vulnerabilities.

According to the security researchers, the Tsunami in Mushtik can install XMRig Monero miner, CGMiner or launch a DDoS attack from the infected hosts. Using these 3 payloads, the crooks are making money for themselves (illegally).

Infected hosts act as a worm

Researchers also added that besides using those 3 payloads, the infected sites also start searching for other sites to find more targets to exploit. That’s performed by a scanning module downloaded by the malware.

The module contacts with a list of different control and command servers to get a list of IP addresses for scanning. It scans the IP addresses on pre-defined ports to identify the systems. After identifying the next potential target, it contacts with the main Mushtik C&C servers about the next target.

This type of behavior is quite common as IoT botnets at the present days. However, Mushtik is the first known one that’s using Drupalgeddon2 in its arsenal. According to GreyNoise, this malware is also actively targeting Oracle WebLogic systems.

GreyNoise has detected a sharp increase in opportunistic exploitation of Oracle WebLogic Server, specifically CVE-2017-10271.

~1,200 devices have suddenly started broadly exploiting this vulnerability by issuing exploit requests to the “/wls-wsat/CoordinatorPortType” URL.

— GreyNoise Intelligence (@GreyNoiseIO) April 18, 2018

How to stay secured

For staying secured, web admins are strongly recommended to upgrade the software of their websites as soon as possible. Drupal released urgent patches for both of their product lines – v7.58 and v8.5.1. Once infected, you may at a severe loss. So, patch your system while there’s still time.

The post Drupalgeddon2 is The Next Target of Hackers appeared first on Linux Windows and android Tutorials.

Drupal has released a patch for this severe bug. For every Drupal site owner, it’s mandatory to update their software immediately, meaning right now. The latest Drupal version is 8.5.1. Update as soon as possible. The flaw is so severe that Drupal assigned a security score of 21 out of 25!

Drupal’s unauthenticated RCE flaw

The bug was identified very recently, under the identifier CVE-2018-7600. Using this bug, a hacker could execute any code inside the website, despite against the CMS’ core components. Thus, he could successfully take over the website.

Moreover, the bug was easier to exploit. The hacker didn’t have to register/authenticate on the sites to take it over. All he needed was to access an URL.

Drupal credits Jasper Mattsson, a Drupal security auditing firm Druid employee for identifying this bug in the software.

Although it’s not so severe as Drupalgeddon (CVE-2014-3704, severity score 25/25), the community nicknamed the latest one with Drupalgeddon2.

No proof-of-concept, no attacks detected (yet)

Although the bug was quite severe, there’s no proof-of-concept code available anywhere on the internet. Moreover, there has been no report found where this bug was exploited to take over the website. With the latest patches released, security researchers are digging up the code to see what’s patched up.

However, because of the public disclosure about the bug, Drupal team anticipates that within days, we could see the attempts to exploit this bug on unpatched systems.

Note that Drupal v6.x and v7.x are also infected with the bug. Drupal released individual updates for each of the versions, where v6.x was discontinued in February 2016.

What to do now

If you’re an admin of Drupal website, update your website to the latest edition. If it’s quite difficult to apply the patches with the running website, switch to a temporary HTML edition of your website so that you won’t have to suffer the damage.

Patching must not be ignored. For example, when Drupal’s official website patched their system for Drupalgeddon2, the site was down for around half an hour.

Drupal currently powers around 1 million websites on the internet with the market share of 9%.

For Facebook users, it’s quite important to secure their data. Learn how to secure your FB information.

The post Drupal Fixes Drupalgeddon2 – No More Taking Over Websites appeared first on Linux Windows and android Tutorials.

The second advantage would be that non-programmers can actually manage their content, stay in control of their content without having to rely on programs. A lot of content management systems specifically with Drupal, WordPress, and Joomla will allow schedulers along with user permissions so that you can actually work together to have a user workflow to allow different levels of permissions where they can edit the content and then together with the scheduling, release that content in a time sensitive manner.

Absolutely, the 3 Best free CMS systems as of today are going to be WordPress, Joomla, and Drupal. There are probably going to be the most talk about free CMS systems. Now, all three can probably accomplish the same exact product but, the question really comes down to: “is this the right tool?”

WordPress

What precisely is WordPress? Since it was originally launched in 2003, WordPress has become one of the superior well-known web publication platforms and presently, it sways in excess of 70,000,000 sites but what many people don’t comprehend is that WordPress isn’t just a blogging tool! It is also a remarkably pliant CMS that permits you to design and control your own fully-functional website utilizing just your web browser. Hundreds of developers from all around the world are regularly producing and optimizing the code for WordPress and there’re hundreds and even thousands of plugins, add-ons, and templates that permit you to design a thoroughly custom site for just about anything you can think of.

Drupal

More and more organizations choose Drupal. With Drupal, you can build websites. It enables you to easily create and maintain content on a website. Drupal is also a great system to use for a community website or intranet. Drupal is open source. Which means it’s free and everyone is able to view and modify the programming code on which Drupal is built. Security holes in the system will be fixed almost instantly by a worldwide community of active Drupal developers.

Joomla

Joomla! falls amongst the world’s most well-known content management system platforms. It has been downloaded over 30,000,000 times since 2006 with a fresh download recorded every after 2.5 seconds. Joomla’s goal is to make it easy to manage your content online. Once installed on your web host, Joomla gives you the ability to log in and manage your dashboard behind the scenes. Joomla has had over 50 million downloads in counting, hundreds and even thousands of extensions and designs and is user-friendly and mobile-ready out of the box. The mobile-ready part really depends on the template that you use.

The post Best Free CMS Software appeared first on Linux Windows and android Tutorials.