Setting up a Drupal 7 website for the very first time, one of the features that is bound to make website owners nervous is visibility of the default login block. By leaving an obvious and very public path to login to your website you are inviting unwanted logins.
There is a simple solution for Drupal newcomers to remove this block…
In the admin menu go to Structure > Blocks and look for the User Login block.
By default this block will be configured to display in the First Sidebar or Second Sidebar region of your Drupal theme but, to ensure it does not show at all, select – None- from the dropdown and click Save Blocks at the foot of the admin page.
That’s the first step to allowing unwanted accounts.
However, this is not quite enough. When you need to login yourself, you will probably go to the page http://yourdomain.com/user/login and be presented with a login screen with a tab labelled Create new account. Even if you’ve removed your user login block, determined people (and bots) will still look for the URL http://yourdomain.com/user/login and attempt to get in that way. The result, as we found out for ourselves, is that you will receive regular emails with a subject line like this:
Account details for random9899873634 at Your Website Name (pending admin approval)
So, despite removing the default login block, your login page provides a clear and obvious invitation.
To get rid of this tab, in the admin navigate to Configuration > People > Account Settings and look for the box titled Registration and Cancellation. By default, the option for Who can register accounts? is set to “Visitors, but administrator approval is required”. You want to select the radio button that says “Administrators only”, scroll to the foot of the page and click the “Save configuration” button.
And that’s it. You have now stopped displaying the default Drupal login block and have removed the option for casual visitors to your site to attempt to login.
For over a decade our small business customers have been happy with a few hundred MegaBytes of webspace and a number of POP3 email accounts.
Recently, however, our clients have been asking for more from their email accounts. With the rise of the smartphone (61% of UK phone owners have a smartphone and hence email capabilities) and the tablet (and the “phablet” if you want to include those oversized phone/tablets and use a ridiculous portmanteau) the old POP account just doesn’t cut it any more.
Searching for email service providers has been a lengthy task for us here at 22i design and, quite frankly, 99% of the services have just not met the requirements of our customers. 2GB of email is not enough for the client who wants to migrate over ten years of email so we’ve come up with a new 25GB IMAP account.
Now our clients are securely accessing their email from iPhones, iPads and multiple desktops and all with the same functionality that they were used to with their Mac Mail, Outlook and Thunderbird accounts.
We do still offer Google Apps for Business, which does offer 25GB of email and all the bells & whistles of calendar sharing etc but we found that the GMAIL method of “labelling” email was a problem for our clients with years and gigabytes worth of legacy email.
So, if you can’t afford a Microsoft Exchange server and you don’t want Gmail, but you DO want a secure, reliable and cost-effective email service with 25GB per email box, then do let us know and we’ll got you up and running.
Call 22i Design on 01252 692 765 for a chat about your small business email requirements and we will be happy to advise you.
Really? In England? Somebody would only charge £15/an hour for web development?
Well, that’s what the ad said.
Whilst browsing YouTube recently a number of display ads have been cropping up for a business that I’ve noticed has stepped up a gear in trying to promote itself over the last few months.
I initially noticed the business’s PR team throwing content at publishers including one of my big clients for whom I edit and write copy. As with a lot of PR I see on my desk these days, some of the associations between the business embedding their link in the PR piece and the content itself is a little tenuous – that’s the way some content marketing and guest posting has become these days.
Secondly the rate at which these pieces of PR are being pumped out is, in my opinion at a relatively small scale publisher, flooding the market. To publish content from the same source on a regular basis, with sometimes tentative associations with the content, and all-of-a-sudden when there was nothing before is a little bit, well… Spammy!
But when their display ads appeared touting developers for £15 an hour, VAs for £10 an hour and the same measly rate for freelance animators, it concerned me a bit. There is a “going rate” for freelance web designers & web developers in this country and, even though I personally choose to operate a little under that rate, I wouldn’t stoop so low as to offer my specialist services, which I have spent over a decade developing, for a rate that, let’s be fair, is a bit too close to the national minimum wage.
The other issue that developers have to consider is that hourly rates usually make up for the fact that freelance work involves a fair degree of risk. An hour or two’s work here or there may involve travel which means expense or downtime. Also, hourly rates reflect the fact that an hour here or there is just that – an hour and not a day or a week or a month’s guaranteed and salaried income.
So I took a look at the website of the business selling devs for £15 an hour and lo and behold, the developers are not even in the UK. The lowest c0st, home-grown developers are offering their services at a little under the “going rate” which is fine by me.
But if you are looking for a developer for £15 an hour then the chances are they won’t be in the UK. You may well get a good service but if you do want to keep your money at home and spend it locally then a Brit will be worth twice that amount.
As for being a British developer offering your services at such a low rate, well it’s up to you if you think you can pay for all your kit, laptop, displays, backup drives, your learning, your office and your travel, mortgage etc on a such a small amount – Don’t forget that as a freelancer you may not be able to get work all the time (especially if British businesses are sending work abroad) so work out how much “downtime” costs you.
I’d been stuck for a few days with a lost password for a WordPress site login. I knew my username but had forgotten the password so I hit the “Lost Password?” button and awaited my email.
It turned up all garbled, a string of characters I didn’t understand.
So initially I ignored it. And then I thought Hey, the email reads…
Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: BASE64 QmV0IHlvdSB0aG91Z2h0IHRoaXMgd2FzIGdvbm5hIGJlIG15IHBhc3N3b3JkIHJpZ2h0Pw==
BIG clue… Base 64. So I hit the search engines for a base 64 solution and found a Base 64 Converter.
I cut & pasted my blurb into the converter and BiNGO! Had my password 🙂
Good, now I can update a site I’ve not updated for nearly a year!