Search Results :

×

Configure Site Security with the minOrange Drupal Website Security module

The miniOrange Website Security module provides login security, registration security, brute force attack prevention, IP monitoring and IP blacklisting, Rate Limiting (DOS attack prevention), strong password enforcement, bot blocking, and more. In this guide, we’ll walk through the configuration of Site Security and demonstrate its functionality. The module is compatible with Drupal 8, Drupal 9, Drupal 10, and Drupal 11.

  • Download the module:

    Composer require ' drupal/security_login_secure'

  • Navigate to Extend menu on your Drupal admin console and search for MiniOrange Website Security using the search box.
  • Enable the module by checking the checkbox and click on Install button.
  • Configure the module at

    {BaseURL}/admin/config/people/security_login_secure/WebsiteSecurityConfiguration

  • Install the module:

    drush en security_login_secure

  • Clear the cache:

    drush cr

  • Configure the module at

    {BaseURL}/admin/config/people/security_login_secure/WebsiteSecurityConfiguration

  • Go to ConfigurationPeopleminiOrange Website Security Configuration in the Administration menu.

    {BaseURL}/admin/config/people/security_login_secure/WebsiteSecurityConfiguration

  • Navigate to the Site Security tab to configure the module features.
  • Enable IP Blocking: This feature allows blocking specific IP addresses from accessing the site.
    • To enable this feature, toggle the button of Enable IP Blocking.
    • After that, enter the IPs to be blocked in the Manual Block IPs field. You can add multiple IPs by separating them with semicolons (;).
    • Click on the Save Configuration button.
Drupal Website Security - Enable IP Blocking
  • Enable IP Whitelisting: IP whitelisting allows you to create lists of trusted IP addresses or IP ranges from which your users can access your domains.
    • To enable this feature, turn on the Enable IP Whitelisting button.
    • After that, enter the IPs to be whitelisted in the Whitelist IPs field. You can add multiple IPs by separating them with semicolons (;).
    • Turn on the Enable User whitelisting if IP is whitelisted button, if you want to prevent site users from being blocked if their IP is whitelisted. If it's not enabled, users will still be blocked after 5 failed attempts, even from a whitelisted IP (as per Drupal's default behaviour).
  • Click on the Save Configuration button.
Drupal Website Security - Enable IP Whitelisting
  • To see blocked IPs and users, navigate to the Blocked IP and Users tab of the module.
  • Admins have actionable controls directly within the reports, including the ability to unblock IP addresses and user accounts as needed. For further analysis or record-keeping, the entire report can be exported in CSV format.
Drupal Website Security - Blocked IPs and Users
ADFS_sso ×
Hello there!

Need Help? We are right here!

support