Drupal Books

Cracking Drupal: A Drop in the Bucket

This is a complete review of security in Drupal. Starting with an overview of security issues in general, how to protect against them as a site admin, and then diving into several chapters covering the proper use of the Drupal APIs to eliminate these problems. The final step in this education is to walk through exploits of several known problems and discusses how to use them to take over a site. The last chapter is a guide to online resources on about Drupal and about security in general.