Security

Our website, once fully in use, will contain lots of personal information of our users, including: their public profiles, their e-mail address, and content they have contributed which may not be publicly viewable. We also have all of the content on our site, which we want to keep safe. Essentially, security is important because we want to protect our website and the data of our users.

Tip

Data Protection legislation

It may be worth investigating Data Protection legislation in the country you reside in, and in the country your website is hosted in. As well as mandating how data must be kept secure, some countries, such as the UK, also have a register of Data Controllers who are responsible for data protection in a particular organization.

Because Drupal is an open source project, with fully readable code, we have both additional protections and risks regarding security compared to other non open source projects. Since the code is readable, anyone can look through the code and potentially...