Home / Resources / Blog / Technology


Automate review for security risks with source code analysis

Security issues are created in custom code when developers cut corners during development or don't make proper use of the APIs, among other reasons. There are several ways to discover such issues, including peer-review, code scanners, vulnerability scanning, and even by being exploited -- tho certainly undesirable! While each has its place and individual merits, let’s talk about security-focused source code scanning for Drupal and preview Acquia’s static code analysis, in development for Acquia Insight. Being open... Meer

Percona Live 2013 MySQL Conference

I recently attended the Percona Live MySQL conference and wanted to share some of the exciting activity in the MySQL community. For our databases we use Percona Server 5.5 and standard MySQL replication with a multi-region offering using Tungsten Replicator. At the conference there was a lot of attention for MySQL 5.6. The first aspect to hit the spotlight was the fact that Oracle had produced another quality release among worries that under their stewardship MySQL would slowly be killed off. There are a couple of aspects that still warrant attention like the number of bugs in the official... Meer

Dream It. Drupal It. (Develop It!) DrupalCon.

Hey developers ~ new, experienced or otherwise, undecided! DrupalCon Portland is just around the corner — have you thought about the week and what you want to accomplish? Keynotes, sessions, a new job, and "people to see" are certainly popular options. As one colleague put it, "Spending time with all the cool, smart people that I talk to online." Maybe just making sure you have some of these ten things to bring with you to Con is all you can muster right now. If you're attending, here's the... Meer

Building an Association Site on Drupal Commons 3.0

When the team at Blue Coda first began thinking about launching a new community website for the 60,000-member National Apartment Association (NAA), we kept our options open. The NAA, America's leading advocate for quality rental housing, required a bold new web presence with an integrated yet extensive and dynamic community. We were intent on creating a great, new digital experience for the NAA. Given the overall complexity of the new site and our relatively tight timeline for delivery,... Meer

Acquia Cloud Free Tier - Exclusive access at DrupalCon Portland

This DrupalCon is going to be super exciting. This DrupalCon, the Acquia Cloud team is offering exclusive community access to the Acquia cloud free tier. What’s that??? Free you ask, well yes it is. Acquia Cloud Free Tier has all the capabilities of cloud hosting but even better, because you don’t have to pay for it. Each free tier subscription comes with two separate Dev and Stage environments. It also includes all the goodies that Acquia Network comes with like Insight, Acquia Search, Mollom etc. With free tier, you get access to an additional interface Cloud API which lets you do most... Meer

Agile Software Development – Cracking the Code

Part of the "All the things you need to know to be a great Drupal developer" blog series Cassette, VCR, disposable cameras, pager, dial-in Internet, CD’s, CD-player, maps, encyclopedia, waterfall model for software development etc. Well this list represents things that make us nostalgic and remind us of the ugly truth of how things quickly become obsolete in the agile world of technology. Agile methodology is one of those things that grew out of obsolescence. It was an evolution for software teams to finally move from the conventional waterfall model to something that was more dynamic. In an... Meer

How-to configure faceted search interface with Acquia Search

Implementing grade-A site search functionality is not easy to achieve. Proprietary search solution tend to carry very expensive licensing fees and provide limited flexibility when integrated with open source solutions such as Drupal. Conversely, open source search engines such as Apache Solr are devoid of licensing fees and have tight integration with CMSes like Drupal, however they can also be challenging to deploy and maintain. Acquia Search provides the power and flexibility of open source while eliminating the maintenance tax. Acquia Search is a fully managed SaaS offering that integrates... Meer

How-to with Cloud API and Cloud Hooks

Drupal has so much to offer to developers. It allows you to experiment, innovate and work with innumerable modules. Drupal does not try to limit you. Wouldn’t it be great if your hosting platform also offered multiple interfaces and functionality? Well, Acquia Cloud allows you to extend its capabilities using cloud API and cloud hooks. Some of you are perhaps familiar with the workflow UI page on the cloud platform. The UI lets you instantly deploy code, files and databases using a simple “Drag and Drop” function. But as a developer, I would like to know that I have more options to work... Meer

Drupal Development: A Solved Game

Part one of the All the things you need to know to be a great Drupal developer blog series Way back in the olden days (around the year 2000) how we developed for the web was a solved game. An example of a solved game is Checkers (English draughts, if you will). Given that both players play perfectly, the outcome of the game can be predicted at any point. Web development was the same: Use the lightest text editor you can find and find a good FTP program like Filezilla and that was that. The code you had to write wasn’t solved by any means, but the surrounding infrastructure, stack, and... Meer

Drupal Create released on Github

I felt good yesterday. After a long effort, the Drupal Create mobile app was released on Github. Drupal Create is an iOS app which enables folks to quickly and easily post content to Drupal sites. The code is now available under the MIT license for anyone to reuse, customize, and improve. You can modify the code and distribute it and still choose whether or not to give back those modifications. I hope you do give back, but you are not... Meer

My Dream for the Web: The Open Source Way

What should the Web be? When I ask this question, I suddenly feel ancient because it takes me back to the days when I was an engineering student. We were always told that with technology, the sky was the limit, but it was never easy for me as a developer to explore everything that technology had to offer. The Internet has been a world of endless opportunities, yet I have always hoped for developers to have a more seamless, free web experience. So, my dream for the perfect technology world is one that completely embraces open source and appreciates “Creative Independence”, where a young,... Meer

Protecting Drupal's fleshy underbelly with .htaccess

In this article, I’m going to show you a few methods to separate your public site from the vulnerable parts of your administration area. What you need is an effective way to keep your site locked and secure, and protected from attacks, while still leaving your site editable for trusted users. Methods for securing the admin section of your site One of the things that is often overlooked when setting up and securing a Drupal site is the administrative sections. Sure, Drupal protects these paths with access controls but you can do a lot more to protect your site, especially if your site doesn’t... Meer

The state of the multilingual web and Drupal within

Last week I had the great opportunity to go to the W3C Multilingual Web Workshop in Rome. It was a great gathering of standards crafters (from W3C, OASIS, etc.), service providers, academia, EU institutions and implementors. A wide range of topics were covered. For example, who would have thought representing human names properly is even bigger a problem than date formats. With social services and highly tailored textual feedback these days, this is an important area. I also got insight into the latest thinking on machine... Meer

A pragmatic guide to the Branch Per Feature git branching strategy

[Update 09/09/2013] I mentioned below that we'd make our scripts available for setting up BPF. Well, in collaboration with the awesome team at Affinity Bridge, we've gone one better than that: there's now a ruby gem available for this at http://rubygems.org/gems/git_bpf. Use this gem to initialize a repo for BPF, including setting up the shared rerere cache (which is actually in the same repo as your main repo, using an orphaned branch) and the hooks that will push to and pull from the... Meer

Introducing Drupal Commons 3.0!

Today we launched Drupal Commons 3.0, a flagship release of Acquia's social business software solution now available for Drupal 7. This release builds on Acquia's OpenWEM initiative offering a set of customer experience solutions built on the open, unified Drupal platform for content, community, and commerce. We believe this is a significant milestone in the evolution of both Drupal Commons and the greater Social Business Software market. We've already received excellent feedback from both partners and customers throughout... Meer

Managed Cloud pro tip: The Environments

Managed Cloud is a great tool for hassle-free management of your Drupal sites and works great out of the box. What I realized in the last weeks is that it has a lot of features that we don’t typically advertise to users but are hugely valuable for them. Development environments are one of those. The standard of Drupal development stipulates that you need three environments for your users: Development - for making the actual changes and integrating them Staging (sometimes called Testing) - to test all changes before going live Production (sometimes called Live) - where the actual site runs for... Meer

Using Selenium as Testing Platform

One of the key aspects of successful project delivery is creating an effective quality assurance (QA) process. Functional testing of the application is usually performed by a separate team than the developers who typically do not know how to program. A challenge that I have found on projects is providing a good open source QA tool to the the QA team that does not require programming knowledge. Selenium has been the tool of choice and works wonderfully, but we have found a couple of issues when integrating it into our continuous integration (CI) processes. The first challenge that we have... Meer

Drupal-to-Drupal data migration - Part 2: The architecture

In a previous post, I described the basics of using the Drupal-to-Drupal data migration module (migrate_d2d) to import data into a Drupal 7 site from a separate Drupal 5, Drupal 6, or Drupal 7 site. Now that the first full release of migrate_d2d is available, I'd like to dig deeper, explaining the architecture of migrate_d2d and showing some more advanced examples of extending it.... Meer

Content Staging for Drupal, BADcamp presentation

Ever since Drupal started to hit the big time, anyone talking about workflows and process at a Drupal con or camp has probably been asked this question: 'How can I migrate content from one Drupal site to another, so I can review changes before they go live?' I call this the Drupal content staging problem, and I've never had a good answer for it. Until now. In this BADcamp 2012 presentation, I described how to use the Services Client module and UUIDs to manage bi-directional... Meer

Open Source in the Public Sector

There are times when it is hard to believe that anything innovative is happening in Washington. At the recent World Government Summit on Open Source, though, it became clear that over the past several years there has been a quiet transformation in the way government agencies are using technology. Throughout the course of the October 11 event, which is a gathering for open source advocates in the public sector, I noticed a trend in the conversation. There was a simple idea we kept returning to again and again: Open source software is influencing government today, and in a big way. Government... Meer

...and Migrate, future

The major theme of the next release of Migrate on Drupal 7, version 2.6, will be developing an infrastructure to make it easy for migration modules such as wordpress_migrate and migrate_d2d to build user-friendly interfaces for importing content, based on step-by-step wizards. This work includes not... Meer

Migrate, present...

Migrate 2.5 has been released, consolidating several enhancements and bug fixes since Migrate 2.4 was released in June. Class registration The most important changes to be aware of are around the registration of migration and handler classes. In the past, you simply defined the classes you needed, and Migrate would (by scanning the class registry and instantiating... Meer

Joining Acquia Cloud Engineering

I spent a thrilling 7 years at my previous company before it was time to move on. In that time I was instrumental in building a leading SaaS community platform and Single-Sign-On solution and got to work with many world renown clients. When I chose to leave I knew I wanted to take my time in selecting my next job. Thus, I researched multiple companies searching for a role that would satisfy my passions for engineering team and product management, building massive, scalable globally-distributed LAMP systems and exciting client engagements. Although opportunities at wonderful companies... Meer

Drupal-to-Drupal data migration Part 1: The basics

I’m pleased to announce that the migrate_d2d module, long in sandbox mode, is now a full-fledged drupal.org project, and the first release candidate is now available. This module extends the Migrate framework with a framework of Migration classes for importing into a Drupal 7 installation from existing Drupal 5, Drupal 6, or Drupal 7 sites. Motivation There were 2 primary motivations for the development of this module: Taking the opportunity... Meer

Engineering week 2012 and Hackathon

What do you get when you combine Acquians, BOFs, Drupal, a hackathon, paintball, and bowling? Acquia Engineering week, of course! Two weeks ago, nearly 70 members of the Acquia Engineering, Design, and OCTO teams gathered together for our 3rd annual Engineering week. It"s like an intimate five-day DrupalCon, where many of Acquia"s incredibly talented Drupalists, systems engineers, front-end engineers, automation engineers, writers, designers, and UX specialists gather to learn and have fun together. While the... Meer