Guidelines for Drupal Maintainers

If you request a Drupal instance, you will be considered its maintainer. As a maintainer, you will have several responsibilities, listed below. Please fulfill these responsibilities to the best of your ability, to ensure that this server remains secure and that we can continue bringing this service to others.

  • You will be subscribed to drupal-users, a low-volume mailing list for Drupal maintainers. Please read the security and update emails that come through on this list. You may also use this list to ask for help or support.
  • Change your instance's User settings to ensure that spam bots cannot create accounts on your instance. Generally, this means selecting either "Visitors can create accounts but administrator approval is required" or "Only site administrators can create new user accounts."
  • When asked, please complete the Drupal upgrade procedure by running the update.php script in your instance. This will ensure that your instance is up to date and secure. Failure to do this may result in your instance malfunctioning.
  • If you install new modules for your instance, please make sure to upgrade them promptly if a security update is issued. Usually, Drupal will let you know if one of your modules is insecure or out of date on the Status report page.