Ransomware: Forscher decken dummen Krypto-Fail auf und veröffentlichen Decryptor

heise online Newsticker - 13. Februar 2024 - 13:01

Cyberkriminelle sind keine "Überhacker". Koreanische Forscher dokumentieren Anfängerfehler der Rhysida-Gang und stellen ein Entschlüsselungs-Tool bereit.

heise-Angebot: JavaScript-Konferenz enterJS 2024: Workshops zu Angular, React und Accessibility

heise online Newsticker - 13. Februar 2024 - 13:00

Die enterJS findet am 7. und 8. Mai in der Alten Lokhalle in Mainz statt. Am Vortag können Interessierte zwischen drei Workshops wählen.

Umfrage: Hass im Internet bringt viele Menschen zum Schweigen

heise online Newsticker - 13. Februar 2024 - 12:25

Eine Umfrage unter gut 3000 Internetnutzern zeigt, dass Hass im Netz weit verbreitet ist. Viele ziehen sich mit ihren Meinungen zurück.

Vision Pro: Bis zur "idealen Form" könnte es vier Generationen dauern

heise online Newsticker - 13. Februar 2024 - 12:22

Die Vision Pro ist – trotz spannender Fähigkeiten – ein Gen-1-Produkt. Ein gut informierter Journalist machte nun Aussagen zu Apples Timeline für das Headset.

heise+ | Ladetarife für Elektroautos im Vergleich

heise online Newsticker - 13. Februar 2024 - 11:55

Die Preise an Ladesäulen unterscheiden sich enorm. Wer mit Gleichstrom lädt, zahlt unter Umständen 40 Cent/kWh mehr. Einige Fußnoten sollten Sie deshalb kennen.

Prime Video: Auch Watch Party ist im Werbeabo nicht verfügbar

heise online Newsticker - 13. Februar 2024 - 11:30

Dolby Vision und Atmos funktionieren nicht, nun werden weitere Einschränkungen im Werbeabo von Prime Video bekannt: Die Funktion Watch Party wurde gestrichen.

Admins gucken in die Röhre: Kein sudo für Windows Server

heise online Newsticker - 13. Februar 2024 - 11:23

Nach der verwirrenden sudo-Ankündigung zeigt sich nur langsam, was Microsoft vorhat: Windows 11 erhält den praktischen Befehl, der Server nicht.

Sicherheitslücken: Angreifer können Dell Unity kompromittieren

heise online Newsticker - 13. Februar 2024 - 11:15

Dells Storage-Appliance-Serie Unity ist über mehrere Schwachstellen attackierbar. Sicherheitspatches sind verfügbar.

Specbee: Driving E-Commerce Revenue Success with Drupal Commerce

Planet Drupal - 13. Februar 2024 - 8:56
Every e-commerce business has unique requirements. While some are simple plug-and-play solutions, others are tailored with custom development. Evolving trends like AI-driven personalization, seamless mobile experiences, and the growing importance of sustainability, are equally playing a part in an e-commerce application’s requirements.  Using a framework that offers deep customization is essential for almost every e-commerce store. Today, we’re going to talk about one such e-commerce framework - Drupal Commerce. With Drupal Commerce, you get the flexibility of Drupal and the power of innovation. Let's take a closer look at some of its features and architecture in this article. The Relevance of E-commerce Today Global Reach: With an internet connection, anyone can access e-commerce platforms worldwide. 24/7 Accessibility: Enjoy the convenience of anytime access. Diverse Product Offerings: Unlike offline shopping, where options are limited, e-commerce opens the door to a wide variety of products. Economic Growth: E-commerce fosters economic growth by offering a broad spectrum of products, breaking free from the constraints of limited stock seen in offline shopping. Contactless Transactions: Embrace the ease and safety of contactless transactions in the digital shopping realm. Choosing Drupal Commerce Now, the next question arises: Why should we choose the Drupal Commerce platform for e-commerce? Considering the myriad CMS platforms in the market such as Magento, WordPress, Shopify, and Drupal, selecting the right platform can indeed be challenging. Here are some reasons for opting for Drupal as your e-commerce platform: Open-source and extensible Flexibility for complex business needs Rules-based architecture  Community support and modules Integration with third-party services Stands out for businesses aiming to create a user-friendly and easily accessible e-commerce platform. Key Features of Drupal Commerce Take a look at some key features of Drupal Commerce that you might like: Integrations - Drupal provides extensive integration possibilities with third-party services and tools. E-commerce websites can seamlessly integrate with payment gateways, shipping providers, and other essential services. Rules-Based Architecture - Drupal Commerce, as part of Drupal, integrates with the Rules module. This allows administrators to define complex business rules and workflows, providing flexibility in managing various aspects of the e-commerce process. Headless and Decoupled Architecture - Drupal supports headless and decoupled architectures, allowing businesses to use Drupal as a back-end while using a different front-end technology. This flexibility is beneficial for creating unique and tailored user interfaces  Additional Features: Multiple stores - Easily create and manage multiple stores with Drupal Commerce. Multiple currencies - Handle transactions in multiple currencies. Flexible and Extensible Powerful Content Management Community Support Theming and Responsive Design SEO-Friendly Multilingual Capabilities Security Drupal Commerce Architecture and Components Now, let's delve into the architecture and components of Drupal Commerce. There are different types of entities in Drupal Commerce, including, Store: Can products be added without a store? Absolutely not! A key element in Drupal Commerce, the store, plays a crucial role in controlling billing and shipping countries available during the checkout process. Each store can even have its own currency, a boon for dealing with multiple currencies across locations. Product Architecture: Understanding the product structure is key before diving into adding products in Drupal Commerce. Imagine your store selling t-shirts or shirts. These products come in various sizes, colors, types, fabrics, etc. To handle this complexity, Drupal Commerce introduces Product Attributes. For example: Product Type: t-shirt Size: Product Attribute Color: Product Attribute In Drupal Commerce: There's a single product entity. This product entity comprises 7 different product variations. Size Product Attribute has 3 values: Small, Medium, and Large. Color Product Attribute has 4 values: Green, Orange, Red, and Blue. Order Entities: Order entities contain information about the product, its variation, and customer details. Order Items: These represent purchased items within the order. Order Types: Each order type has its own settings for the cart and checkout pages. We’ll discuss more practical implementations of this later. Implementing Drupal Commerce Prerequisites Make sure you have a web server that satisfies Drupal’s requirements The preferred memory limit is 256MB or more. Latest version of Composer to manage dependencies. DDEV or lando for local development.  Drupal Installation composer require "drupal/commerce"Enable Commerce drush en commerce_product commerce_checkout commerce_cartGetting Started Create a Store From the toolbar navigate to Commerce > Configuration > Store > Stores and click on the Add Store button. Once you add the store, you will be able to add and display products easily.   Configure different product entities To add a new Product inside a Store, let’s first create a Product Type by navigating to Commerce > Configuration > Product types from the toolbar menu or visit /admin/commerce/config/product-types Click on Add Product type button When you select Product variation type as “Create new” then you don’t need to add Product variation additionally. Now, let's create Product Attributes for the same Product Type by navigating to Commerce > Configuration > Product Attributes or simply visit /admin/commerce/product-attributes and click on the “Add product Attribute” button. While adding a Product Attribute, you will notice that the Product variation types (created in step 2) are present and you can map your attributes to your variations. As a result, these attributes will be visible when you add variations to any product. Here in the above example, we have created a Product Attribute as Color, in which we have listed different colors. Similarly you can create different Product attributes like Size, Type, etc. Now that you have created a Store, Product Type, Product Variations, and Product Attributes, it’s time to create a new Product. Add Products 1. To add a Product navigate to Commerce > Products and click on the “Add Product” button. 2. Enter your Product Details and click on “Save and add variations”. 3. Add your different product variations. Displaying Products Product display pages First, you will need to customize the product pages from the “Manage Display” tab option. For multi-product displays, simply create a view page to display multiple products. Add to cart form Next, include the Add to Cart form on product pages or the other pages from where the user can add the products to the cart. To include the “Add to cart” form, navigate to Commerce > Configuration > Orders > Order Item Types and then navigate to “Manage Form Display” of the particular order item (here we used Default)   Product images To add Product Images, you need to add a field inside the Product Variation Type entity so that different images can be uploaded for every different Product variations. Further, you can learn how to use the Drupal Core Image module to create a custom image style for products. To create a custom view mode for product variations, you can use the Image delta formatter module. Add Payment Gateway By default, Drupal Commerce provides a COD (Cash On Delivery) payment gateway, but you can configure different payment gateways as well. To learn more about how to add a payment gateway click here.     Orders You can manage your orders from the Orders page by navigating to Commerce > Orders.   Final Thoughts Choosing the right framework for your unique e-commerce business is absolutely crucial. A robust and customizable framework like Drupal Commerce is not just an option; it's a strategic necessity. Combining the flexibility of Drupal with a flair for innovation, Drupal Commerce stands as a powerful solution for varied e-commerce needs. If you’re looking to build or enhance your e-commerce solution, we have the Drupal development expertise and experience to bring your vision to life. Let’s make it happen!  

Chapter Three: Apigee Kickstart in Action: Powering Financial Services

Planet Drupal - 12. Februar 2024 - 22:34
A Developer Portal Shows the Flexibility of Drupal Black Knight, Inc. is a financial services company that provides integrated software, data, and analytics solutions primarily to the real estate and mortgage lending sectors, as well as to the capital and secondary markets. Originally founded as Computing and Statistical Services in 1962, the Jacksonville, Florida-based corporation is a national leader in providing automated solutions that span the homeownership life cycle. Note that Black Knight has recently been acquired by Intercontinental Exchange (ICE).

Talking Drupal: Talking Drupal #437 - Drupal Mail & Easy Email

Planet Drupal - 12. Februar 2024 - 21:00

Today we are talking about sending email with Drupal, The Easy Email Module, and Drupal Mail Best Practices with guest Wayne Eaker. We’ll also cover Content Access by Path as our module of the week.

For show notes visit: www.talkingDrupal.com/437

Topics
  • Current state of email
  • What happened to swiftmailer
  • Do you still need the mailsystem module
  • Why Symfony Mailer
  • New dependency in core
  • Difference between Symfony Mailer module and the Symfony Mailer Lite module
  • How does the Easy email module make it easier
  • What are the features of Easy Email
  • Why not use PHP mail
  • JMAP
  • Do you have a roadmap
  • How do we communicate the different module options
  • Are you looking for help
Resources Guests

Wayne Eaker - drupaltutor.com zengenuity

Hosts

Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Ivan Stegic - ten7.com ivanstegic

MOTW Correspondent

Martin Anderson-Clutz - mandclu

  • Brief description:
    • Have you ever wanted to grant users access to edit content based on the path alias of the content? There’s a module for that.
  • Module name/project name:
  • Brief history
    • How old: created in the past month by Mark Conroy of Annertech, who is also a core subsystem maintainer for the Umami profile
    • Versions available: a stable 1.0.0, created in the past week, that works with Drupal 10
  • Maintainership
    • Actively maintained
    • Doesn’t have a user guide yet, but the module’s README does include some FAQs, and the project page includes a link to a YouTube video that demonstrates how to install and use the module
    • Number of open issues: 2, one of which is a bug
  • Usage stats:
    • 2 sites
  • Module features and usage
    • When installed, the module adds a new taxonomy vocabulary to your site. You can add terms to this vocabulary to define sections by path
    • Users on the site will have a new field, where you can reference one or more of the section terms, granting the user access to edit any content with a path that matches the section
    • The module also includes a submodule called Content Access by Path Admin Content. When installed, users who go to the admin/content listing will only see content listed that they can edit, based on either the sections they’ve been assigned, or their ownership of the content.
    • Granting edit permissions to a “section” of the website is a common ask for site owners, so I’m excited that this module makes it easy to set that up. There are solutions in the contrib ecosystem based on taxonomy for access control, and back in episode #414 we talked about Access Policy as a very flexible way to grant edit permissions, but in my mind those all require more set-up, and may require an extra step during content creation to make sure the right access is available. Content Access by Path, along with something like the near-ubiquitous Pathauto, can make it pretty painless to set up and use section-specific edit permissions

Drupal.org blog: Single Sign-On is coming to Drupal.org thanks to Cloud-IAM

Planet Drupal - 12. Februar 2024 - 17:46

The Drupal Association is pleased to announce that we have partnered with Cloud-IAM to deploy secure, GDPR-compliant managed KeyCloak for single sign-on for Drupal.org. 

Using single sign-on for Drupal.org identity management has been a long term goal of the Drupal Association, as it offers a number of benefits: 

  • We can more easily manage authentication across our upgraded Drupal 10 sites, and our legacy Drupal 7 sites while we migrate all of our Drupal.org properties.

  • We can begin to introduce 'social login' allowing new users to create their Drupal.org accounts using external identities they already have - making it easier to jump straight in to contribution, as one example. 

  • Once we establish the appropriate terms of service, we can begin to allow Drupal.org users to use their identity to login to external community sites, such as Drupal Camp websites, and use that to federate data back to Drupal.org. 

We know we wanted to implement KeyCloak as our identity and access management solution under the hood, because it is Open Source, robust, and well supported. 

We reached out to Cloud-IAM because they built their company around providing managed services to support KeyCloak as an open source solution to identity management with a strong SLA, and no vendor lock-in. Wherever possible the Drupal Association looks to work with companies that share our Open Source ethos, and are excited to support the Drupal community. 

Being based in Europe, Cloud-IAM is also a privacy-centric service provider, with robust compliance processes for GDPR that also meet or exceed international standards for other privacy regulations such as CCPA, LGPD, etc. 

To our immense gratitude, Cloud-IAM was not only willing to support us, but excited to partner with us to support the Drupal Community and Drupal project. Based on our experience, we would certainly recommend them to all the Drupal agencies and site owners who are looking for their own solutions for managed IAM based on an open source platform.

In fact - CloudIAM would like to offer the site owners and agencies who are looking for their own identity and access management service 10% off, with promo code: DRUPAL10. You can sign up to try the service for free and then apply the discount to a subscription plan of your choice.

So What's Next?

The Drupal Association has partnered with Tag1Consulting to help us build a migration process for Drupal.org users. In the coming month or so we'll be scheduling the migration of our user database. On the Drupal side, we'll be using the OpenID Connect contrib module. 

The majority of your user profile on Drupal.org will stay the same, you will now just see a Cloud-IAM login/registration flow, and use the Cloud-IAM UI for editing some of the core fields for your user account, like name and email address. The rest remains on your Drupal profile. 

When the migration window is scheduled we'll share in the #drupal_infrastructure channel on Drupal Slack, and repost to our usual drupal_infra social media channels.

Kyle Einecker|True Summit: Search Web Components Alpha 2 Release

Planet Drupal - 12. Februar 2024 - 17:21
A few weeks ago, I announced the Search Web Components module, and since then, I've seen a lot of interest and gotten some great feedback on the module's state and where it could go from here. I've also been doing a lot of work to improve the site builder experience and stabilize config structures and patterns to help avoid breaking changes moving forward. Here's a look at the improvements included in the Alpha 2 release

The Drop Times: Life as a Drupal Storyteller: A Journalist's Perspective

Planet Drupal - 12. Februar 2024 - 16:19
Curious about life as a journalist for Drupal? Step into the world where every day brings new stories, connections, and insights. From interviews with community members to crafting engaging articles, it's a dynamic journey of discovery and collaboration.

Hey there, Drupal Fam!

Wanted to drop you a line and share a bit about what it's like to be a journalist here in the heart of Drupal. It's not all flashy headlines and breaking news, but it's rewarding in its special way.

So, picture this: every day, I'm diving deep into the world of Drupal, connecting with community members, and getting the scoop on all the latest happenings. Whether it's chatting with developers, designers, or contributors, there's never a dull moment.

One of the valuable aspects of my role is connecting with Drupal community members for interviews. These engagements offer valuable insights and perspectives, enriching our understanding of the community and its contributions.

And let's not overlook the articles. We have some fantastic content lined up for you. From insightful analyses to thought-provoking pieces and event coverage, we consistently bring fresh and engaging material.

But here's the thing – it's not just about churning content. It's about doing justice to Drupal and all the incredible work being done by our community members. Their contributions make a difference, and I'm honoured to play a small part in showcasing their talents.

So, next time you're scrolling through our articles or tuning in to one of our interviews, remember – thanks to the Drupal community's amazing folks who make it all possible.

An organizational update: We are now active on Drupal Slack as #thedroptimes. Do search for the handle and join Slack, where you can participate in the process of news gathering by occasionally answering our queries or sharing your perspectives. 

Now, let's talk about some important news stories we covered from last week:

Automated Testing Kit for Drupal, led by André Angelantoni, revolutionizes end-to-end testing with its versatile features, impactful vision, and seamless integration of Cypress.io and Playwright frameworks. Andre is the project lead of the Automated Testing Kit, Layout Builder Kit, and Campaign Kit. He speaks with Alka Elizabeth in an email correspondence about the project.  

Nicolas Loye, CTO of Smile, a French Drupal agency, and the treasurer of Drupal France, shares insights with Elma John in an interview on community-driven growth, financial stewardship, and fostering collaboration. From porting projects to organizing Drupal events, Nicolas reflects on the essence of community work and its impact on his role as a technology leader.

Jorge Lopez-Lago, a seasoned Solutions Architect at FFW, shares his diverse experiences and insights in another exclusive interview with Elma. Jorge offers a glimpse into his evolution from a hands-on Drupal developer to a multifaceted leader and discusses his unique approach to problem-solving and community engagement.

Get the latest update from FOSDEM as Drupal, Joomla, Typo3, and WordPress join forces to establish the Open Website Alliance, representing over 50% of websites online.

The Drop Times is thrilled to announce its official media partnerships with DrupalCamp Rennes and Drupal Developer Days Burgas 2024! Stay tuned for exclusive coverage of these premier Drupal events, featuring insights, interviews, and live updates.

Discover the latest in Drupal and web technologies with Dries Buytaert, founder of Drupal, as he visits Japan for the first time in nearly eight years. This exclusive event on March 14, 2024, in Tokyo, promises valuable insights into the future of web development.

Get ready to save $100 on DrupalCon Portland tickets! Early bird registration is now open. Join the City of Roses for networking, collaboration, and learning with the Drupal community. Register now! Drupal Association introduces scholarships for historically oppressed communities and community grants to support vital Drupal contributors at the upcoming DrupalCon Portland 2024. Eligible individuals can seize this opportunity to engage in the conference and contribute to the Drupal community.

Dive into the heart of Drupal MountainCamp as a volunteer! Join in welcoming attendees, ensuring smooth sessions, and making this event unforgettable. Your contributions will be rewarded with drupal.org credits. Drupal Mountain Camp announces Acquia as its latest Gold Sponsor, adding substantial value to the upcoming event.

DrupalCamp Ghent 2024 invites professionals and experts to submit session proposals for its upcoming event, offering a platform to share insights with the Drupal, PHP, and JavaScript communities.

Beginning July 1, 2024, Drupal.org will discontinue patch testing and DrupalCI testing, mandating a shift to GitLab CI for automated testing. Contributors must switch from patches to merge requests by the specified date, marking a significant transition in the platform's testing framework.

We acknowledge that there are more stories to share. However, due to constraints in selection, we must pause further exploration for now.

To get timely updates, follow us on LinkedIn, Twitter and Facebook. Also, join us on Drupal Slack at #thedroptimes

Thank you,

Sincerely
Kazima Abbas
Sub-editor, TheDropTimes.

Gábor Hojtsy: Onwards to Drupal 11 - ways to get involved

Planet Drupal - 12. Februar 2024 - 13:52
Onwards to Drupal 11 - ways to get involved

Last November the Drupal project announced that Drupal 10 will receive long term support until mid-late 2026. That is when Drupal 12 will be released, so this long term support does not mean that Drupal 11 will not be released as well in the meantime. And by meantime, I mean Drupal 11 will be released this year, in 2024, in June or July or December.

Gábor Hojtsy Mon, 02/12/2024 - 13:52

mcdruid.co.uk: What is overriding your Drupal config?

Planet Drupal - 12. Februar 2024 - 13:32

Something is overriding config in Drupal - you can see it by invoking drush with and without the flag to include overrides:

$ drush cget system.performance | grep -B1 preprocess css: preprocess: false -- js: preprocess: false $ drush cget --include-overridden system.performance | grep -B1 preprocess css: preprocess: true -- js: preprocess: true

Perhaps we want to turn this config off, but these overrides won't let us.

Where are these config overrides coming from?

Generally, overrides can come from two places - for example, see:

https://git.drupalcode.org/project/drupal/-/blob/10.2.3/core/lib/Drupal/Core/Config/Config.php#L280

// Apply overrides. if (isset($this->moduleOverrides) && is_array($this->moduleOverrides)) { $original_data = NestedArray::mergeDeepArray([$original_data, $this->moduleOverrides], TRUE); } if (isset($this->settingsOverrides) && is_array($this->settingsOverrides)) { $original_data = NestedArray::mergeDeepArray([$original_data, $this->settingsOverrides], TRUE); }

There could be an override in settings(.php) or perhaps it's coming from a module. How can we tell which?

The settingsOverrides and moduleOverrides properties of the config object are protected, but in modern PHP there's at least one trick we can use to have quick look at them.

$ drush ev "var_dump((fn() => \$this->moduleOverrides)->call(\Drupal::config('system.performance')))" NULL $ drush ev "var_dump((fn() => \$this->settingsOverrides)->call(\Drupal::config('system.performance')))" array(2) { ["css"]=> array(1) { ["preprocess"]=> bool(true) } ["js"]=> array(1) { ["preprocess"]=> bool(true) } }

So we can tell that these overrides are coming from settings as opposed to modules.

Hopefully that'll help us track them down.

Tags: drupal-planetdrupaldebugging

LN Webworks: How To Manage Custom Drupal Migrations Using SQLBase?

Planet Drupal - 12. Februar 2024 - 13:05

Drupal 9 stopped getting updates on November 1, 2023. Drupal 7 will stop getting updates by January 2025, but that's the last extension. Drupal 10 came out in December 2022, and the latest version, 10.1.6, was released on November 1, 2023. What does this mean? 

There’s a lot going right now in the drupal space and many websites are migrating to updated versions of Drupal. In fact, as of now, over 12,000 websites have already switched to Drupal 10, as per the Upgrade Status module download stats. This simply means that now is the best time for you to opt for a Drupal migration company and make the move. Let's have a look at the various ways to migrate in Drupal, with a special focus on custom migrations using the SqlBase source plugin.

Gábor Hojtsy: Looking for your input for DrupalCon Portland 2024 initiative highlights

Planet Drupal - 12. Februar 2024 - 11:50
Looking for your input for DrupalCon Portland 2024 initiative highlights

I have the pleasure to organize the DrupalCon initiative keynotes now twice a year. The genius idea of this I believe came from Angie Byron, and ever since we include them, they are among the top rated sessions at each DrupalCon. The goals of this keynote are manyfold. First, we want to show the people who lead important work in core, humanising the software.

Gábor Hojtsy Mon, 02/12/2024 - 11:50

The Drop Times: Nicolas Loye: Bridging Technology and Community for Sustainable Growth

Planet Drupal - 9. Februar 2024 - 22:59
Uncover the journey of Nicolas Loye, CTO at Smile and a Drupal luminary, as he shares insights on community building, leadership, and staying at the forefront of technology. Discover the blend of technical expertise and community stewardship that defines his impactful role in the Drupal ecosystem.

Apple Vision Pro im Test: Erste Reaktion im Video

heise online Newsticker - 8. Februar 2024 - 20:50

Acht Heise-Kollegen haben sich zum ersten Mal das Apple Vision Pro Headset aufgesetzt und berichten im Video von ihrem ersten Eindruck.