We're proud to announce that Drupal Association members now have a little more to look forward to: discounts from Anolim and O'Reilly! These two deals are added to offers from Acquia, ActiveState, NeoSpire, New Relic, Varnish Software & Zend. You can always stay on top of current member deals by checking https://association.drupal.org/membership/benefits.

Since I am among other things, a member of the Drupal security team, I sometimes get contacted about the security of particular modules or sites.

Today was such a day. A Drupal site developer had some suspicions about a contrib module being unsafe, since three of his clients' sites got "hacked". I asked about the symptoms and was told that a call to an advertising site got inserted into index.php.

This fact alone told me two things:

1) It is not Drupal specific; index.php is used by many PHP applications.

2) It is unlikely that Drupal was the attack vector used. Most systems do not allow the Apache user to modify PHP files.

A cursory look at the named module also didn't reveal anything particular unsafe.

I shared these observations with the concerned developer and I also suggested that somebody guessing the passwords or using a trojan might be responsible.

Packt Publishing, the company behind many well-known Drupal books, is also responsible for the Open Source Awards, an annual online event held to distinguish excellence among open source projects. Winners of this competition receive cash awards that go to support their projects.

The past few months have been a time of great change at the Drupal Association headquarters. We've been focusing on the future of the organization, the community and the project by adjusting our governance model. We also understood that there has been some confusion about how Drupal VZW (the Belgian nonprofit that holds our membership) and DrupalCon, Inc. (the U.S. nonprofit that produces DrupalCons) interacted, and we've been working to remedy that confusion and also increase efficiencies between the two organizations.