Wide open administration sections

Events happening in the community are now at Drupal community events on www.drupal.org.
Garrett Albright's picture

This may not be news to some of you, but if you Google "Welcome to the administration section. Here you may control how your site functions.", you can find various Drupal installations with administration sections you can anonymously go crazy on if you have the inclination. Granted, some of them are theme testing sites and such that are probably periodically wiped; others are not totally wide open and only giving you access to certain relatively harmless parts of the admin section. But others… Well, I'll leave those for you to find.

Have you double-checked admin/user/permissions recently?

Comments

That's crazy! Obviously this

yaph's picture

That's crazy! Obviously this is known to some people. If you look at the sites listed, you'll notice viagra links and other sick stuff.

--
My Drupal Articles

I was playing with this a

Garrett Albright's picture

I was playing with this a little more today, and found another query which works a little better:

Drupal inurl:admin intitle:Administer

I poked around trying to find a way to find ones in non-English languages, but I can't think of a way unless we know how to say "Administer" in all those languages.

I posted some ideas on how to make the perms page more human-friendly and maybe help avoid having people open up their sites like this here.

Drupal for Evil

Group organizers

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: