Spam Master is blocking me from my Drupal site. My Macbook is blocked at home and at Starbucks so different IP. I got in once from my phone (Android, Chrome) but now it's blocked, too. The block happens after entering username and password. Error msg below. I reinstalled Chrome as hinted, no change. Is there an easy fix for this? Anyone else, or just me?

I suspect this may be caused by changing locations while signed in. Spam Master may consider IP change during a session malicious behavior. I do have a habit of just closing the Macbook.

03 Forbidden Your IP is blacklisted due to previous abuse or threat behavior. IP: 147.81.152.216 Browser: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Hint: Upgrade your browser to the latest version Protected by Spam Master 

We have to admit, it's losing market share... Drupal jobs often underpay, and most people are beginning to believe that static sites and other frameworks are better incorrectly.

I gave up on WordPress long ago because it kept getting hacked.

But the main question I have for Drupal is, where's it going for the future?

I'm really not interested in core bloat, the core is already huge. Also not very interested in Ai integration nor add-on libraries.

I expected e-commerce to get less complex, and modules & themes to expand, but it seems that versions are changing so often that community notes can't keep up.

I've been developing upon it since v4, hoping you guys can tell me there's a good leadership plan & future outlook for Drupal?

Also, I have contributed in the past, I don't have the ability to do so now.

If you ran into the

Your requirements could not be resolved to an installable set of packages.

error message while running composer update today, see this issue:
https://www.drupal.org/project/drupal/issues/3599842

In brief, quoting the the issue:

While these were fixed a few weeks ago (see https://github.com/advisories/GHSA-hq7v-mx3g-29hw), we can see the composer datasource was only registered with the vulnerabilities on June 11th.

and

You can temporarily fetch the 2.11.0 version of guzzlehttp/psr and alias it to 2.8.1 with this:
composer require "guzzlehttp/psr7:2.11.0 as 2.8.1"
Revert this once a new Drupal core is released by deleting the guzzlehttp/psr7": "2.11.0 as 2.8.1", line in composer.json, and then updating Drupal core.

Hi everyone,

I have an upcoming technical interview for a Drupal-focused full-stack role, and I would appreciate some guidance from experienced Drupal developers.

From my conversation with the interviewer, I expect the interview to involve reviewing existing code, tracing complete workflows, identifying production issues, and explaining improvements. The organization is also planning work around upgrading from Drupal 10 to Drupal 11.

The areas I believe may be covered include:

• Custom modules, routes, controllers, services, entities, and forms
• Twig, Drupal behaviors, AJAX, and JavaScript
• Caching, queues, cron, and external API integrations
• SQL, database consistency, and performance
• Testing and deployment
• Drupal 10-to-11 upgrade readiness
• Composer dependencies, deprecated APIs, and contributed-module compatibility

My background is stronger in general software engineering than in PHP and Drupal. I have been using AI-assisted exercises and small Drupal code-review challenges to prepare, but I want to make sure I am learning the right concepts and not developing an unrealistic understanding of production Drupal work.

For someone interviewing at roughly the three-year experience level:

1. What Drupal concepts would you consider essential?
2. What code-review or debugging exercises should I practice?
3. What questions are commonly asked about Drupal 10-to-11 upgrades?
4. How deeply should I understand Symfony, Composer, Drush, testing, SQL, and deployment?
5. What mistakes do candidates commonly make in Drupal technical interviews?

Any practical examples, learning resources, or advice about what to prioritize would be greatly appreciated. Thank you!

Hey, i am looking for drupal freelance opportunity. I have 10+ years experience in monolithic, hybrid and headless drupal architecture. Any help would be appreciated

I'm open for freelance jobs, located in Denmark, got experience on expert level since Drupal 4.7 beta ~2006.

https://www.drupal.org/u/ramlev

Hello everyone, i am looking for freelance drupal opportunities. I have 10+ experience in drupal development.

I'm trying to prevent a page from being restored from the browser's Back/Forward Cache (bfcache) in a Drupal site.

I have the following response headers set:

Permissions-Policy: unload=() Expires: 0 Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0, private 

My understanding was that these headers would prevent caching, but the page is still being restored from bfcache when navigating back and forward.

Am I missing something? Do these headers have any effect on bfcache, or is there another recommended way to prevent a page from being stored and restored from bfcache?

Private files are accessible through URL regardless of taxonomy access.

I have a site with a multi tenant situation including different roles for each tenant. I'm managing access to content through taxonomy terms and views, which works well so far. However, I have different file types that should be accessible to different roles within one tenant. Content or files of one tenant should never be visible to anyone (user or role) of another tenant.

I have only found the global access permission "view media". When that is not checked for my role, I can't access the file even though I see it in the view (which makes sense). However, when that is checked for the role, the role has access to any file (including other tenants) through the url (even if they don't have access to the view that would link to the file).

Is there a module that can differentiate view media permissions by media type? My research only showed small, instable or experimental modules.
Or do you have any other suggestions on how I could solve this issue?

Hello everybody,

I'm helping customers with specific types of sites (similar to customer portals) which often contain some part of basic functionality and a lot of custom ideas.

My approach is usually 0 code (if I can avoid it).

So I'm really deep inside configuration / modules / etc.

Parts can be easily exported as configurations / recipes.

Some other parts are often quite custom.

Custom views with custom permissions, tags, ECA etc.

I see some customers / people I know just vibe coding everything in Lovable and similar solutions and I'm still clicking around in the admin area.

For the configuration / site building part of Drupal where you configure specific modules etc.:
Do you use any AI?
How to improve building speed there?

(not talking about Canvas landing pages - more features like inquiries, customer dashboards etc.)

Upgraded a d8 site to d9.5 and the files directory is being emptied every night it seems. Can anybody point to the best way to track this down.

I’m doubtful there’s a up setting that has this behavior that I’ve accidentally clicked…