Backport Server Configuration Code to Drupal 7

Staff Reporter

Software Code — Mohammad Rahmani / Unsplash

Backport of the Drupal 8 security fix in .htaccess/web.config files would mitigate the issue when using vulnerable codes or libraries was introduced in the Drupal 7.81 version. This change modifies the .htaccess and web.config files.

The changes will not affect sites with PHP >= 5.5.38, 5.6.24 and 7.0.9 as the issues were fixed. Other affected sites may need to change some developmental settings if they are not using an updated version of PHP that includes HTTP proxy fixes. Sites running on Microsoft-IIS will not have any issues and in case there are changes required, they will see warnings on the Status report.

Site builders, editors, administrators, and distribution developers of Drupal 7 sites can be impacted and need to take note of these changes.

Source:

Backport of D8 server configuration code to Drupal 7

Drupal 7

Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please reach out to us at #thedroptimes channel on Drupal Slack and we will try to address the issue as best we can.