As I mentioned in a previous post, I'm currently playing catch-up in discussing all the good books sent my way this past year. Many of the books have been sent by the authors and publishers themselves for review and some of the books I've bought on my own dime. There should be no further evidence that I'm a procrastinator in posting book reviews than this particular review of Todd Tomlinson and John K. Vandyyk's Pro Drupal 7 Development. This book was published almost a year ago, and I'm only now finding the time to blog about this book.

While it has been close to a year since this book was published (about just as long since Drupal 7 was released), I marvel how relevant Pro Drupal 7 Development remains as a valuable resource to me. This book and its previous versions have saved my hide so many times that I have lost count. This book may have been sitting on my desk for a year but I assure you it hasn't been collecting dust.

If you're going to get any Drupal book in print this is the book you should get if you're going to do any development with Drupal or simply need to troubleshoot your way out of a Drupal related problem. I realize there are a lot of resources available online from the Drupal community that contains much of the same material found in this book. However, this book organizes the material in such a thoughtful manner that I find the looking up material via the book more efficient than seeing it out though online search.

CMS Expo in Chicago last week gave me a great opportunity to learn about a variety of content management systems. I spent most of my time at the conference getting out of my comfort zone by visiting with those companies and open source projects that I knew the least about their products and services. Unfortunately, this strategy also prevented me from visiting with my personal favorite CMS, Drupal. By the end of the conference, I felt I needed to treat myself by attending one of the final sessions in the Drupal track, Social Drupal.

What key activities should you integrate? In what scenarios might you be smarter to leave the heavy lifting to an outsourced solution?  What elements are critically important right now when building your social relevance in the market?  Find this out and more at this practical advice session on how you can be using Drupal to capture the Social Media audience which awaits.

My hope for the session was that it would give me good pointers for how to connect my Drupal sites better to the social web. Lullabot's Blake Hall led this information packed session. Blake began the session by pushing his vision that this session should not just be called "Social Drupal" but also "Community Plumbing (without the crack)". The proposed rewriting of the title for this session is a reminder to the audience that Drupal has always been social.

Blake started the session reminding that one needs to take a look at the bigger picture by taking a look as your site's Social Media Strategy. This strategy would include the following elements:

• Authentic Story
• Honest Dialogue
• Engage your audience
• Activate the social media

While the big picture is always nice consider it's the details that help determine whether your site is going to succeed. From this point forward Blake focused on specifics and I feverishly did my best to keep up. Some of the notable remarks from Blake that caught my attention:

• First step is to take a look at your business goals and the resources you have available when building/supporting your site. Blake of course sees Drupal as being able to address both ends of this equation.
• Some of the social modules for Drupal he recommends include Feeds, Flag, Twitter, Dashboard, Fivestar, Messaging, Radioactivity (gotta check this one out!), and Organic Groups.
• Speaking of organic groups, take a look at groups.drupal.org: especially Social Networking Sites group to tap into Drupal community's expertise on social publishing.

One of the coolest things about CMS Expo 2011 was the opportunity to see five open source CMS "founders" together in one room. On the conference stage were Dries Buytaert (Drupal), Andrew Eddie (Joomla), Sigurd Magnusson (SilverStripe), Shaun Walker (DotNetNuke), and Per Ploug-Hansen (Umbraco).

Most people in the content management world will acknowledge that seeing these five guys together in the same room is a rare event. What you may not know is that for many of these open source leaders this event was the first time they have ever met one another.

We tend to focus so much of our time on our own projects that we lose sight of what is taking place outside of our own bubble. The benefits of open source projects getting to know one another better has me thinking a lot lately about the "The Strength of Weak Ties" and the importance of getting to know your competition.

CMS Expo 2011: Founders' Panel from SilverStripe on Vimeo.

The sound quality in the above video could be improved but I think we're just lucky enough to have the video. I'm not aware of any "official video" being taken by the conference organizers so we're fortunate the SilverStripe folks who shot this video were thinking ahead.

A couple weeks ago my family spent some vacation time at Disney World in Orlando, Florida. If you have ever been to a Disney theme park then you know full well that it takes a lot of work in those parks just to have fun. Some of the most popular rides in these parks have waiting periods of up to two hours due to the long lines of people wanting to get on board. Luckily, my wife brought a Disney tourist guidebook that gave our family the helpful hints, recommendations, and information we needed to beat those long lines.  In the end, we ended up with a very enjoyable trip (so enjoyable that we got to ride Space Mountain twice!). That travel guide was a valuable asset to my family's vacation. 

Mastering Drupal is very similar to visiting a theme park as it takes some effort on your part to ensure you get rewarded for your effort. If Drupal is the amusement park then consider Drupal's modules as the park's attractions you're wanting to ride. With this line of thinking, I easily recommend that you let Earl and Lynette Miles' book, Drupal's Building Blocks, be your valuable tourist guide into the wonderful world of Drupal. I only review a few books each year and this is a book I gladly invested my time reading.

Drupal's Building Blocks is a tutorial, reference, and cookbook for some of Drupal's most valuable modules including CCK (Content Construction Kit), Views, and Panels. The primary purpose of this book is to give you the quickest route to mastering the modules as quickly as you can in order to help you create more powerful, flexible, usable, and manageable Web sites. The audience for this book isn't only for Web developers or designers, but also site administrators, content architects, and consultants. There is some code in this book, but what is there isn't the scary code you often find in a developer's library.

Although I've worked with Drupal for more than half a decade, I am still among the newbies who struggle with how best to use Drupal's contributed modules. I've built several sites using CCK and Views but I've always ran into hurdles that keep me from fullly discovering what these modules can do for me and my sites. This book will provide you the information you need to realize the full potential of these modules. Anybody who has seen Drupal, CCK, Views, and Panels mature over the years can't help but read this book and enjoy not only the author's technical expertise but also the author's cultural and historical understanding for how the module came to be in Drupal. 

In the first chapter of the book, "Introducing CCK and Nodes", there is a section titled "Quest for the Grail: How CCK Was Born". This section alone reads like an adventure story that starts by talking about the challenges site administrators originally had with Drupal needing to acquire development skills just to control the form content would take in Drupal. The story continues with Drupal 4.4 and how a contributed module named Flexinode gave non-developers the ability to create new content types yet limitations remained. I was reminded that with Drupal 4.7 CCK became Flexinode's replacement and with each successive release of Drupal the module continues to improve. For someone like me who started with Drupal 4.6 and watched Drupal 5, 6, and now 7 evolve this book spoke to my inner geek. I simply found this book to be good bridge to the more technical aspects of CCK, Views and Panels.

A few weeks ago, CMS Report was asked to become a media sponsor for this month's DrupalCon in Copenhagen. Between the late invitation and my decrease in Internet activity this month, I have some doubts there is much time to "complete the deal". Promoting last Spring's San Francisco DrupalCon was a lot of fun and is an example of how less involved folks like me can help give back to the Drupal community. So, regardless, of whether this site is a media sponsor or not for this conference, I still want to do my part in helping promote DrupalCon Copenhagen.

DrupalCon is the twice-yearly gathering of Drupal developers and users to learn about, discuss, and contribute to Drupal, networking with other Drupal community members in the process. At almost every DrupalCon, you will have the opportunity to meet Drupal community leaders, top developers, your favorite module maintainers, dojo trainers, members of the Drupal Association, potential business partners, and future employees. If you attend a DrupalCon, I promise you that there is plenty to do and see at the conference.

Keynote speakers for DrupalCon Copenhagen include Dries Buytaert (Drupal Project Lead), Rasmus Lerdorf (PHP Project Founder), and Jeremy Keith (Author of "HTML5 For Web Designers"). What's interesting is you'll find an appreciation for the keynote speakers that are not fully embedded in the Drupal community. As much as I enjoyed Dries' "The State of Drupal" speech at DrupalConSF, the awesome talks given by Tim O'Reilly, David H. Cole, and and Andrew Hoppin still whispers in my head today. Attending a DrupalCon just doesn't improve your game with Drupal but DrupalCon can also help improve yourself as a well-rounded IT professional.

If you're in Europe this August and have a chance to stop by Copenhagen, it would be one foolish move on your part to not attend DrupalCon Copenhagen. It's definitely not too late to buy your tickets for DrupalCon CPH. You better hurry though, because all indication are that those ticket prices are going to go up on August 16th.

Last week was a very frustrating time for me. For whatever reason, an unusually number of botnets decided to zero in on my Drupal site and created what I call an unintentional  Denial of Service attack (DOS). The attack was actually from spambots looking looking for script vulnerabilities found mainly in older versions of e107 and WordPress. Since the target of these spambots were non-Drupal pages, my Drupal site responded by delivering an unusually large number of "page not found" and "access denied" error pages. Eventually, these requests from a multitude of IPs were too many for my server to handle and for all intents and purposes the botnet attack caused a distributed denial of service that prevented me and my users from accessing the site.

These type of attacks on Drupal sites are nothing new and have been observed and discussed at great length at Drupal.org. However, my search at Drupal.org as well as Google didn't really find a solution that completely addressed my problem. Trying to prevent a DDoS attack isn't easy to begin with and at first the answers alluded me.

I originally looked at Drupal for the solution to my problems. While I've used Mollom for months, Mollom is designed to fight off comment spam while the bots attacking my sight were looking for script vulnerabilities that didn't exist. So with Mollom being the wrong tool to fight off this kind of attack, I decided to take a look at the Drupal contributed model Bad Behavior. Bad Behavior is a set of PHP scripts which prevents spambots from accessing your site by analyzing their actual HTTP requests and comparing them to profiles from known spambots then blocks such access and logs their attempts. I actually installed an "unofficial" version of the Bad Behavior module which packages the Bad Behavior 2.1 scripts and utilizes services from Project Honey Pot.

As I had already suspected, looking for Drupal to solve this botnet attack wasn't the answer. Pretty much all Bad Behavior did for me was to take the time Drupal was spending delivering "page not found" error pages and use it to deliver "access denied" error pages. My Drupal site is likely safer with the Bad Behavior module installed, but it was the wrong tool to help me reduce the botnets from overtaxing Drupal running on my server. Ideally, you would like to prevent the attacks ever reaching your server by taking a look at such things as the firewall, router, and switches. However, since I didn't have access to the hardware, I decided it was time to look at my Apache configuration.

As much as I talk about Drupal here at CMS Report, I often don't talk about Drupal point releases that provide solely security and bug fixes and no new features. Every once in awhile though there is a new version of Drupal 6 that has been especially polished by Drupal's developers. Drupal 6.17 is one of those releases which contain significant changes I think are worthy a mention.

I'm probably most excited about the improvements made in Drupal 6 for better PHP 5.3 compatibility. A couple weeks ago I tried upgrading my server to PHP 5.3 and there were just too many annoying errors showing up in the Drupal 6 system logs.  I'm hoping with Drupal 6.17, I have better luck this time around (currently running this Drupal 6 sites with PHP 5.3).

With over 55 patches committed to improve Drupal 6, the following are the highlights of changes included in Drupal 6.17:

• Improvements of session cookie handling
• Better processing of big XML-RPC payload
• Improved PostgreSQL compatibility
• Better PHP 5.3 and PHP 4 compatibility (my fingers are crossed)
• Improved Japanese support in search module
• Better browser compatibility of CSS and JS aggregation
• Improved logging for login failures
• An incompatibility of Drupal 6.16's new lock subsystem with some contributed modules was also resolved

The latest version of Drupal may be downloaded from the project page at Drupal.org. Whether you're new to Drupal or currently maintaining a Drupal site, this latest release of Drupal is a clear indication that there is plenty of life and plenty of development taking place with the Drupal 6 release. Now what other Drupal 6 sites do I have that still need this upgrade to Drupal 6.17.

While I was at DrupalCon last week, Chris Pliakas sent a tweet out that he used screenshots from CMS Report in his Apache Lucene presentation. I'm always flattered when this site gets noticed for something we're apparently doing right. In this particular case, we're using the contributed Drupal module Search Lucene API for our search engine as well as for faceted search and content recommendations (recommended links).

If you had talked to me a few years ago, I would have told you that the Search module that comes with the Drupal CMS is all a site like mine needs. After I became a beta tester for the Acquia Network along with their implementation of Apache Solr called Acquia Search, my opinion quickly changed. I'm now convinced that an enterprise quality search engine is truly something that can make or break your website. If you're a smaller Drupal site that feels like Solr or Acquia Search is overkill or not in your cost range, Search Lucene API may be the answer you've been looking for all this time.

The actual name of Chris' DrupalCon presentation is: Build a Powerful Site Search with the User-Friendly, Easy-to-Install Search Lucene API Module Suite. The video of his presentation can be viewed at Archive.org and has been embedded above. Screenshots from CMSReport.com can be seen in the time frame from 19 minutes to 21 minutes.

I spent Sunday flying to San Francisco for this year's DrupalCon. Attending this Drupal conference is a first for me. For the past few years. I've wanted to attend the conference but either personal or professional distractions came up that prevented me from attending the conference. This year is my year for DrupalCon and I'm anxious to get to know the Drupal community better than I have in the past.

While I do plan to do live blog updates during the Keynote addresses, I'm attending this conference less as a reporter and more as an attendee in a crowd of 3000 people. I spend way too much of my time through the year either leading IT discussions or managing the IT discussions that I rarely get a chance to just observe and listen. There are a lot of smart Drupal people and content management folks at this conference that I would be a fool to not take the opportunity and learn from the experts.

So this week you can expect a lot of Drupal talk. If you don't want to hear about Drupal this week, I suggest you submit an article focused on your favorite CMS. I have a feeling I'm only going to be writing about Drupal this week...

For 40 years, scientists have searched for a way to bring nuclear fusion to the masses. If successful in bringing fusion online, we all could have an inexhaustible form of power to meet our world's energy needs. The promise of fusion is a dream that many have hoped to see become a reality in their lifetime.

Perhaps not for as noble of cause, Drupal users have sought better themes for their Drupal sites. Four years ago, it seemed to me that creating a good theme for Drupal was almost done as an afterthought. There simply were not too many places for a user to go for a quality Drupal theme. I recall spending a lot of wasted time maintaining my own (boring) themes for Drupal sites. The Drupal days of version 4.4, 4.5, 4.6 and even 4.7 for themes were dark days indeed. Luckily, Drupal 5 introduced us to a new theme called Garland. Garland may not have been a perfect theme but in my opinion the theme marked the beginning of an era for a new style of Drupal themes.

In the past few years, the number of Drupal themes provided under open source or via private companies have exploded. Along with that explosion, various starter and base themes have been introduced too. On the top of my head I can think of Zen, Genesis, Basic, and AdaptiveTheme. These starter/base themes offer theme developers opportunities for everyone to build or use professional sub-themes. In fact, this site used Zen in the theme's early years and today we're currently using a Genesis based theme called Extreme Updates (slightly modified). With each passing year, the theme offerings for Drupal has steadily improved in quality and quantity. This year is no exception and brings us a new official base theme to carry us over into the next generation of themes made for Drupal.

The year 2010 brings us Drupal's newest base theme, Fusion.  Currently, there probably isn't a Drupal theme that offers site owners more control over layout and style than a Fusion based theme. Fusion has the support and backing of well-known Drupal theme shop, TopNotchThemes. TopNotchThemes appear to be serious enough about Fusion revolutionizing the way themes are done in Drupal. This week they publicly announced their new line of themes and a website called Fusion Drupal Themes. Most of the themes offered at the site are for a price, but there are a couple free themes also being offered that should give you a chance to see what Fusion is all about.

In the world of open source CMS there is no comparison more attention getting than an article comparing Drupal and Joomla!. Probably, the grand daddy Drupal versus Joomla! comparisons of them all was posted over three years ago by the Joomla SEO company, Alledia. I extended the discussion Alledia started with my own comparison between Drupal and Joomla. My article evidently struck a chord in late 2006 and currently is approaching near 200,000 reads.

Good comparisons between Drupal and Joomla! are popular because quality comparisons between the two applications are rare. It's very difficult to have passion for one CMS, be well informed on both CMS, and in the end be non-bias in your comparison. In the three years since I wrote my article, I've only come across three additional comparisons between Drupal and Joomla! that I thought worthy to bookmark.

I haven't updated my own article comparing Drupal and Joomla because I have developed a bias opinion over the years that I can't overcome...I prefer Drupal over Joomla! Both are good applications in their own right, but in the end I almost always recommend Drupal over Joomla!. That's why I'm glad to see Alledia update their own comparison between these popular CMS with Joomla and Drupal - Which One is Right for You? Version 2.