Securing Drupal User Accounts | Mad Irish . net - 1 views
-
This helps to limit automated account creation attempts (by bots). This configuration can be accessed via the main Drupal navigation menu following the links for Administer -> User settings.
-
On the 'User settings' page you'll notice that some of the content of the e-mail templates are tokenized, including place holders such as "!username" and "!password." These tokens are replaced with user specific values before e-mails are sent. It is important to remove any occurrence of "!password" token to prevent user passwords being sent via e-mail. Without the password users must utilize a time sensitive link in order to activate their account or change their password.
-
You can install and utilize the Password Strength module (http://drupal.org/project/password_strength) in order to require that users select strong passwords
- ...1 more annotation...
-
Several steps you can take to stop bots from spamming your client's site. It is no fun spending an afternoon deleting hundreds of SPAM comments.