Drupal

Drupal 6.11 and 5.17, maintenance releases fixing problems reported using the bug tracking system, as well as a critical security vulnerability, are now available for download. Drupal 6.11 also fixes performance issues with the menu cache and update status cache among other smaller issues.

Upgrading your existing Drupal 5 and 6 sites is strongly recommended. There are no new features in these releases. For more information about the Drupal 6.x release series, consult the Drupal 6.0 release announcement, more information on the 5.x releases can be found in Drupal 5.0 release announcement.

Changelog

The full list of changes between the 6.10 and 6.11 releases can be found by reading the 6.11 release notes. A complete list of all bug fixes in the stable DRUPAL-6 branch can be found at http://drupal.org/project/cvs/3060/?branch=DRUPAL-6.

The full list of changes between the 5.16 and 5.17 releases can be found by reading the 5.17 release notes. A complete list of all bug fixes in the stable DRUPAL-5 branch can be found at http://drupal.org/project/cvs/3060/?branch=DRUPAL-5.

Security vulnerabilities

Drupal 5.17 and 6.11 were released in response to the discovery of security vulnerabilities. Details can be found in the official security advisory:

• SA-CORE-2009-005

To fix the security problem, you can either (1) upgrade Drupal or (2) patch Drupal.

We strongly recommend you do the full upgrade (which is also detailed in the security announcement) as the patches do not contain the additional bug fixes that went into the releases. Applying the patches will leave your site in an unversioned state and confuse the update status module, which will keep reminding you to upgrade to 6.11 or 5.17. Please read the announcement for details on the patch.

If you still prefer to patch Drupal, apply the http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-6.10.patch file to your Drupal 6.10 codebase or http://drupal.org/files/sa-core-2009-005/SA-CORE-2009-005-5.16.patch to your Drupal 5.16 codebase.

Important update notes

It is important to run update.php. These releases did not change the .htaccess, robots.txt and (default.)settings.php files, so you can keep your existing files intact, if you have modifications in them.

Released Front End Drupal: Designing, Theming, Scripting, authored by Emma Jane Hogbin and Konstantin Käfer. This is a book to teach readers how to customize how Drupal looks, with a special focus on Drupal 6 and its new theme engine. Emma Jane and Konstantin cover everything you need to know to create great visual designs and interactivity with Drupal's behaviors, themes, and templates. They show how to style Drupal sites, make the most of its powerful templating system, build sophisticated community sites, streamline site management and build more portable and flexible themes. Also included are several case studies that walk thru the customization of everything from page templates to Web site forms.

Here's a chapter breakdown (as excerpted from the Preface):

Chapter 1

This chapter covers the basics of Web page design. It will help you to prepare information so that it will slide easily into a Drupal Web site. You will learn how to describe content and its organization; structure page layouts so that all of your interface components fit sanely onto your Web pages; and implement a work flow that works for your Drupal team.

Chapter 2

With the basics of Web design under your belt, it is time to prepare your workstation for Drupal theming. In this chapter, you will learn about Drupal terminology and theming strategies as well as must-have modules and browser tools. Chapter 2 also includes language references for each of the machine languages used in creating a Drupal theme.

Chapter 3

Readers will now move on to learning the basic anatomy of a Drupal theme. In Chapter 3, you will learn how to find and install a premade Drupal theme. You will also learn the anatomy of a Drupal theme and discover how to use Starter Themes to reduce your development time. Tips are included on how to convert themes from WordPress, Joomla!, and Drupal 5.x.

Chapter 4

The overall structure of pages in Drupal is defined by the page template. In this chapter, you will learn how to customize every part of this template—from using sitewide page variables and menus, to changing page templates based on the section you are currently in. Information on print-friendly templates and mobile devices is also included in this chapter.

Chapter 5

It's time to get to the guts of your Web site—so in Chapter 5, you will learn how to customize your Web site content, including individual nodes and teaser summaries. This chapter also describes the most appropriate image module to use for your Web site. Examples of output are provided to help you make the best decision for your content.

Chapter 6

The most commonly overlooked area in Drupal theme design is content editing forms. In this chapter, you will learn simple tips and tricks to make your forms more usable and will get a gentle introduction to altering forms with the Form API. Techniques described in this chapter will help you to enhance the usability of your content editing forms.

Chapter 7

If you are running a community site, this chapter is a must—it includes information on how to theme user profiles, community comments, and user-generated content. Additional information is provided on creating private, member-only sections to your Web site.

Chapter 8

In this chapter, which covers administrative interfaces, you will learn how to make the administration of Drupal a little bit easier. Techniques include creating custom administrative interfaces, adding task-based navigation, creating administrative menus, and customizing your Web site’s error messages.

Chapter 9

In this chapter, you will acquire the JavaScript skills required for writing truly stunning, portable, and flexible components for your theme. Basic concepts or advanced object orientation—there’s certainly something you'll learn in this chapter.

Chapter 10

An introduction to jQuery, the JavaScript library that ships with Drupal, will bring you up to speed with today's most prevalent JavaScript library. You'll also learn how jQuery is used in Drupal, how you can create stunning animations, and how you can implement AJAX callbacks to the server.

Chapter 11

In this chapter, you will learn how to apply your newfound JavaScript and jQuery knowledge to a Drupal Web site. By creating a horizontal scroller component, you'll learn step by step how to architect a highly flexible and reusable JavaScript widget. Additional information in this chapter includes server-side JavaScript integration and an excursion into the vast supply of ready-made jQuery plugins.

Appendices

Information on how to install Drupal and contributed modules is included in Appendix A. Appendix B contains the code samples that are referenced in the JavaScript chapters. These code samples can also be downloaded from the book’s Web site.

The book assumes readers are familiar with how Drupal works and that they’ve administered a Drupal web site; it uses code snippets written in HTML, CSS, PHP and JavaScript.

Some Early Praise

Dries Buytaert wrote the foreword for the book in which he says, ….

“Drupal has always been a developer’s platform, even with the many designers in our ranks. It’s about time those designers had a great book. In fact, this book is valuable not just to the designers we have, but to the designers we want….” Dries goes on to cite a survey he conducted in 2008 which listed “Finding skilled Drupal designers” as the top entry on the list of the “Top five most difficult things,” according to both expert and novice users.

Addison Berry, Documentation Team Lead for Drupal, and co-author of Using Drupal (O’Reilly, Dec. 2008), wrote a thorough review in which she said,

“…..for people who are new to Drupal this is a freaking gem. Don't think that this is only for newbs though, not at all. This is a serious book, made for grownups, and it expects you to be able to extrapolate from examples and make use of the references you've been given. To my mind that is the only way to really learn this stuff.”

Victor Kane, author of Leveraging Drupal: Getting Your Site Done Right (Wrox, Feb. 2009), has also reviewed the book on Amazon:

I can't say enough good things about this book. It reflects the knowledge and long-time experience of two hard-working and generous professionals. If you are only going to buy two or three Drupal books, make sure this one is always handy while you are working.

Drupal 6.10 and 5.16, maintenance releases fixing problems reported using the bug tracking system, as well as a critical security vulnerability, are now available for download.

Changelog

The full list of changes between the 6.9 and 6.10 releases can be found by reading the 6.10 release notes. A complete list of all bug fixes in the stable DRUPAL-6 branch can be found at http://drupal.org/project/cvs/3060/?branch=DRUPAL-6.

The full list of changes between the 5.15 and 5.16 releases can be found by reading the 5.16 release notes. A complete list of all bug fixes in the stable DRUPAL-5 branch can be found at http://drupal.org/project/cvs/3060/?branch=DRUPAL-5.

Security vulnerabilities

Drupal 5.16 and 6.10 were released in response to the discovery of a security vulnerability. Details can be found in the official security advisories:

• SA-CORE-2009-003
• SA-CORE-2009-004

To fix the security problem, you can either (1) upgrade Drupal or (2) patch Drupal.

We recommend you do the full upgrade (which is also detailed in the security announcement) as the patches do not contain the additional bugfixes that went into the releases. Applying the patches will leave your site in an unversioned state and confuse the update status module, which will keep reminding you to upgrade to 6.10 or 5.16. Please read the announcement for details on the patch.

If you still prefer to patch Drupal, apply the http://drupal.org/files/sa-core-2009-003/SA-CORE-2009-003-6.9.patch file to your Drupal 6.9 codebase or http://drupal.org/files/sa-core-2009-004/SA-CORE-2009-004-5.15.patch to your Drupal 5.15 codebase.

Important update notes

It is important to run update.php. These releases did not change the .htaccess, robots.txt and (default.)settings.php files, so you can keep your existing files intact, if you have modifications in them.

Regarding Drupal 6.10: In this release, we've fixed a bug, so that custom CCK fields are now actually displayed in RSS feeds. You might want to revisit your content type settings pages and configure which field should be included in feeds.

Developer and translator notes

The following strings have changed in Drupal 6.10:

• "Read @username's latest blog entries." is now "Read !username's latest blog entries."
• "@name's blog" is now "!name's blog"
• "@username's blog" is now "!username's blog"

Drupal 6.9 and Drupal 5.15, maintenance releases fixing problems reported using the bug tracking system, as well as critical security vulnerabilities, are now available for download.

Upgrading your existing Drupal 5 and 6 sites is strongly recommended. There are no new features in these releases. For more information about the Drupal 6.x release series, consult the Drupal 6.0 release announcement, more information on the 5.x releases can be found in Drupal 5.0 release announcement.