Keep your code safe - Tips from the security team

heine — Tue, 07 Jul 2009 19:48:14 +0000

This session is aimed at the typical Drupal developer.

The session starts with a short overview of the most common security issues, their consequences and how you can use the Drupal API to prevent them. The second half of the talk is devoted to string handling as the most prevalent vulnerability, Cross site scripting (XSS), happens when you get it wrong. You should leave the session with a clear understanding of when to use filter_xss, check_plain, check_url & check_markup.

Speaker bio:

Heine Deelstra has been a member of the Drupal security team since 2006 and is its current Technical Lead. Other presenters may be added.

Enterprise Drupal Site And Team Management Panel

nnewton — Wed, 08 Jul 2009 16:44:12 +0000

In this panel, we will be discussing the challenges of team and site management in an enterprise Drupal environment; as well as the solutions we have each found to overcome these issues. The topics covered will be:

* Subversion management of a large Drupal installation, with multiple branches and tags for development and deployment.
* Testing newly developed modules and patches for deployment
* Managing a large distributed team of developers
* Managing Drupal upgrades and specifically an upgrade to Drupal 6.X

Speaker bio:

Narayan Newton is the Server Coordinate for Drupal.org and Partner at Tag1 Consulting. He is an former System Administrator at the Open Source Lab, with a large amount of experience in team management, technical management and the challenges associated with the development and deployment of new web sites in a distributed work environment.

Co presenters:

wm_greenopolis

Calendar

Keep your code safe - Tips from the security team

Enterprise Drupal Site And Team Management Panel