counter_1
Providing appropriate and secure hosting. Many Drupal 7 sites were originally created for PHP version 5 which has passed its end-of-life date and is no longer supported. If you continue to run your website on an earlier version of PHP you are exposed to increased risks of hacking, data loss with associated reputational damage, and GDPR compliance violation. We can advise on and install secure PHP 5 versions to host your site, and also check to see whether your current hosting is secure. Most hosting will not be secure if it has a PHP version less than 7.3 or 7.4 (as of Autumn 2021).
counter_2
We can also assess whether your site will run on more recent versions of PHP 7. Most Drupal 7 sites have custom code in them related to special functionalities such as customer and staff login areas, or tools and calculators. We can advise on whether it is possible to modify your site to run on PHP 7 and carry out this work. We are experienced in upgrading custom code on your Drupal 7 to work with supported versions of PHP 7, extending the lifespan of your website and increasing the return on your original investment.
counter_3
With Drupal 7 approaching end of life in November 2022, many contributed Drupal 7 modules have been discontinued or have known security issues which are not going to be fixed. This affects Drupal 7 sites which make use of these modules; we often see this affecting sites which used more modules than were strictly needed. We can advise on what to do to replace discontinued modules or work around their flaws.
counter_4
We can help mitigate the risks of running unsupported modules or custom code in your Drupal 7 website, with a security assessment of the custom code and the privilege levels within the website, followed by appropriate action to deal with the main risks identified.
counter_5
We can help mitigate overall risk to your Drupal 7 website with the use of a web application firewall, which will block most known attacks. This can make all the difference particularly if there are unsupported modules or parts of your site that cannot be upgraded. There are a number of different options available, and we can advise on the best solution for you.
counter_6
We can advise on setting file and folder permissions to levels which significantly reduce the chances of your site being compromised (including the option of using SELinux).
counter_7
We can provide a tripwire script to log changes to key files, and alert you to any changes which look suspicious. This is no substitute for the other steps outlines above, but it means there is an immediate log available of changes and a notification email in the event that your website is compromised.
counter_8
When the time comes, we can help you to upgrade to Drupal version 9 or 10, and we can assess the work involved in that process and the best way forwards. Some Drupal 7 sites are best remade in WordPress, but for most of them the best way forward is a move to Drupal version 9 - well established and with an excellent upgrade path for content and custom content types, which will typically save a huge amount of time compared to porting the site to a different CMS.