Menu
Home Explore People Places Arts History Plants & Animals Science Life & Culture Technology
On this page
Drupal
Web content management system

Drupal is a free and open-source content management system written in PHP and licensed under the GNU General Public License. It powers at least 14% of the top 10,000 websites, ranging from personal blogs to government sites. Drupal’s core includes essential CMS features like user account management, RSS feeds, and page layout customization, supporting simple sites to complex community platforms. With over 1.39 million community members, Drupal offers 50,000+ free modules and 3,000+ themes for customization. Described as a web application framework, it runs on any computing platform with a compatible web server and database. Drupal is officially a Digital Public Good.

Related Image Collections Add Image
Profiles
1 Image
We don't have any YouTube videos related to Drupal yet.
We don't have any PDF documents related to Drupal yet.
We don't have any Books related to Drupal yet.

History

Latest major and supported releases21
VersionRelease date
Latest version: 11.1.78 May 202522
Supported: 10.4.16 January 202523
Unsupported: 7.1034 December 202424
Unsupported: 9.5.1120 September 202325
Unsupported: 8.9.2017 December 2021 26
Unsupported: 6.3824 February 201627
Unsupported: 5.2311 August 201028
Unsupported: 4.7.1110 January 200829
Unsupported: 3.015 September 200130
Unsupported: 2.015 March 200131
Unsupported: 1.015 January 200132
Legend:UnsupportedSupportedLatest versionPreview versionFuture versionLegend:UnsupportedSupportedLatest versionPreview versionFuture version

Drupal was originally written by Dries Buytaert as a message board for his friends to communicate in their dorms while working on his Master's degree at the University of Antwerp.3334 After graduation, Buytaert moved the site to the public internet and named it Drop.org.35 Between 2003 and 2008 Dries Buytaert worked towards a PhD degree at Ghent University.36

The name Drupal represents an English rendering of the Dutch word druppel, which means "drop" (as in a water droplet).37 The name came from the now-defunct Drop.org, whose code slowly evolved into Drupal. Buytaert wanted to call the site "dorp" (Dutch for "village") for its community aspects, but mistyped it when checking the domain name and thought the error sounded better.38

Drupal became an open source project in 2001.39 Interest in Drupal got a significant boost in 2003 when it helped build "DeanSpace" for Howard Dean, one of the candidates in the U.S. Democratic Party's primary campaign for the 2004 U.S. presidential election. DeanSpace used open-source sharing of Drupal to support a decentralized network of approximately 50 disparate, unofficial pro-Dean websites that allowed users to communicate directly with one another as well as with the campaign.40 After Dean ended his campaign, members of his Web team continued to pursue their interest in developing a Web platform that could aid political activism by launching CivicSpace Labs in July 2004, "...the first company with full-time employees that was developing and distributing Drupal technology."41 Other companies also began to specialize in Drupal development.4243

By 2013, the Drupal website listed hundreds of vendors that offered Drupal-related services.44

As of 2014, Drupal is developed by a community.45[needs update] From July 2007 to June 2008, the Drupal.org site provided more than 1.4 million downloads of Drupal software, an increase of approximately 125% from the previous year.4647

As of January 2017 more than 1,180,000 sites use Drupal.48 These include hundreds of well-known organizations,49 including corporations, media and publishing companies, governments, non-profits,50 schools,51 and individuals. Drupal has won several Packt Open Source CMS Awards52 and won the Webware 100 three times in a row.5354

Drupal 6 was released on 13 February 2008,55 on 5 March 2009, Buytaert announced a code freeze for Drupal 7 for 1 September 2009.56 Drupal 7 was released on 5 January 2011, with release parties in several countries.57 After that, maintenance on Drupal 5 stopped, with only Drupal 7 and Drupal 6 maintained.58

Drupal 7's end-of-life was scheduled for November 2021, but given the impact of COVID-19, and the continuing wide usage, the end of life was pushed back until 1 November 2023.59 This was extended once more as of June 2023 and was finally set for 5 January 2025.60

In October 2022, Drupal released an open source headless CMS accelerator, allowing the front end to be managed outside of the core system.6162

In April 2023, Drupal was recognized by the United Nations Digital Public Good Alliance as a digital public good.63

Drupal Core

In the Drupal community, "core" refers to the collaboratively built codebase that can be extended through contributory modules and—for versions prior to Drupal 8—is kept outside of the "sites" folder of a Drupal installation.64 (Starting with version 8, the core is kept in its own 'core' sub-directory.) Drupal core is the stock element of Drupal. Common Drupal-specific libraries, as well as the bootstrap process, are defined as Drupal core; all other functionality is defined as Drupal modules including the system module itself.

In a Drupal website's default configuration, authors can contribute content as either registered or anonymous users (at the discretion of the administrator). This content is accessible to web visitors through a variety of selectable criteria. As of Drupal 8, Drupal has adopted some Symfony libraries into Drupal core.

Core modules also include a hierarchical taxonomy system, which lets developers categorize content or tag with keywords for easier access.65

Core modules

Drupal core includes modules that can be enabled by the administrator to extend the functionality of the core website.6667

The core Drupal distribution provides a number of features, including:68

  • Access statistics and logging
  • Advanced search
  • Books, comments, and forums
  • Caching, lazy-loading content (using BigPipe) and feature throttling for improved performance
  • Custom content type and fields, and user interface to create, manage, and display lists of content.
  • Descriptive URLs
  • Multi-level menu system
  • Multi-site support69
  • Multi-user content creation and editing
  • RSS feed and feed aggregator
  • Security and new release update notification
  • User profiles
  • Various access control restrictions (user roles, IP addresses, email)
  • Workflow tools (triggers and actions)

Core themes

Drupal includes core themes, which customize the "look and feel" of Drupal sites,70 for example, Garland and Bartik.

The Color Module, introduced in Drupal core 5.0, allows administrators to change the color scheme of certain themes via a browser interface.71

Drupal CMS

At DrupalCon Portland in 2024, Dries Buytaert called for the Drupal Community to create a new, modernized Drupal experience. The project was initially called Starshot72 and it was an effort to reframe how people think of Drupal. The project aims to deliver a more user-friendly and out-of-the-box version of Drupal, with a focus on ease of use, faster onboarding, and a polished default experience. In 2025, this project was launched as Drupal CMS. This represents a shift toward making Drupal more accessible to non-developers while retaining its powerful, flexible core architecture.73

Drupal CMS also includes many new [Artificial Intelligence] features.74 Drupal is now more easily able to create an open source, no code/low code alternative.75

Localization

As of September 2022, Drupal is available in 100 languages including English (the default).7677 Support is included for right-to-left languages such as Arabic, Persian, and Hebrew.78

Drupal localization is built on top of gettext, the GNU internationalization and localization (i18n) library.

Auto-update notification

Drupal can automatically notify the administrator about new versions of modules, themes, or the Drupal core.79 It's important to update quickly after security updates are released.

Before updating it is highly recommended to take backup of core, modules, theme, files and database. If there is any error shown after update or if the new update is not compatible with a module, then it can be quickly replaced by a backup. There are several backup modules available in Drupal.

On 15 October 2014, an SQL injection vulnerability was announced and update was released.80 Two weeks later the Drupal security team released an advisory explaining that everyone should act under the assumption that any site not updated within 7 hours of the announcement was compromised by automated attacks.81 Thus, it can be extremely important to apply these updates quickly and usage of a tool like drush to make this process easier is highly recommended.

Database abstraction

Prior to version 7, Drupal had functions that performed tasks related to databases, such as SQL query cleansing, multi-site table name prefixing, and generating proper SQL queries. In particular, Drupal 6 introduced an abstraction layer that allowed programmers to create SQL queries without writing SQL.

Drupal 9 extends the data abstraction layer so that a programmer no longer needs to write SQL queries as text strings. It uses PHP Data Objects to abstract the database. Microsoft has written a database driver for their SQL Server. Drupal 7 supports the file-based SQLite database engine, which is part of the standard PHP distribution.

Windows development

With Drupal 9's new database abstraction layer, and ability to run on the Windows web server IIS, it is now easier for Windows developers to participate in the Drupal community.

A group on Drupal.org is dedicated to Windows issues.82

Accessibility

Since the release of Drupal 7, Web accessibility has been constantly improving in the Drupal community.83 Drupal is a good framework for building sites accessible to people with disabilities, because many of the best practices have been incorporated into Drupal Core.

Drupal 8 saw many improvements from the Authoring Tool Accessibility Guidelines (ATAG) 2.0 guidelines which support both an accessible authoring environment as well as support for authors to produce more accessible content.

The accessibility team is carrying on the work of identifying and resolving accessibility barriers and raising awareness within the community.

Drupal 8 has good semantic support for rich web applications through WAI-ARIA. There have been many improvements to both the visitor and administrator sides of Drupal, especially:

  • Drag and drop functionality
  • Improved color contrast and intensity
  • Adding skip navigation to core themes
  • Adding labels by default for input forms
  • Fixing CSS display:none with consistent methods for hiding and exposing text on focus
  • Adding support for ARIA Live Regions with Drupal.announce
  • Adding a TabbingManager to support better keyboard navigation84

The community also added an accessibility gate for core issues in Drupal 8.85

Extending the core

Drupal core is modular, defining a system of hooks and callbacks, which are accessed internally via an API.86 This design allows third-party contributed modules and themes to extend or override Drupal's default behaviors without changing Drupal core's code.

Drupal isolates core files from contributed modules and themes. This increases flexibility and security and allows administrators to cleanly upgrade to new releases without overwriting their site's customizations.87 The Drupal community has the saying, "Never hack core," a strong recommendation that site developers do not change core files.88

Modules

Contributed modules offer such additional or alternate features as image galleries, custom content types and content listings, WYSIWYG editors, private messaging, third-party integration tools,89 integrating with BPM portals,90 and more. As of December 2019 the Drupal website lists more than 44,000 free modules.91

Some of the most commonly used contributed modules include:92

  • Content Construction Kit (CCK): Allows site administrators to dynamically create content types by extending the database schema. "Content type" describes the kind of information. Content types include, but are not limited to, events, invitations, reviews, articles, and products. The CCK Fields API is in Drupal core in Drupal 7.9394
  • Views: Facilitates the retrieval and presentation, through a database abstraction system, of content to site visitors. Basic views functionality has been added to core of Drupal 8.95
  • Panels: Drag and drop layout manager that allows site administrators to visually design their site.
  • Rules: Conditionally executed actions based on recurring events.
  • Features: Enables the capture and management of features (entities, views, fields, configuration, etc.) into custom modules.
  • Context: Allows the definition of sections of site where Drupal features can be conditionally activated
  • Media: Makes photo uploading and media management easier
  • Services: Provides an API for Drupal.

Themes

As of December 2019, there are more than 2,800 free community-contributed themes.96 Themes adapt or replace a Drupal site's default look and feel.

Drupal themes use standardized formats that may be generated by common third-party theme design engines. Many are written in the PHPTemplate engine97 or, to a lesser extent, the XTemplate engine.98 Some templates use hard-coded PHP. Drupal 8 and future versions of Drupal integrate the Twig templating engine.99

The inclusion of the PHPTemplate and XTemplate engines in Drupal addressed user concerns about flexibility and complexity.100 The Drupal theming system utilizes a template engine to further separate HTML/CSS from PHP. A popular Drupal contributed module called 'Devel' provides GUI information to developers and themers about the page build.

Community-contributed themes on the Drupal website are released under a free GPL license.101102

Distributions

In the past, those wanting a fully customized installation of Drupal had to download a pre-tailored version separately from the official Drupal core. Today, however, a distribution defines a packaged version of Drupal that upon installation, provides a website or application built for a specific purpose.

The distributions offer the benefit of a new Drupal site without having to manually seek out and install third-party contributed modules or adjust configuration settings.103 They are collections of modules, themes, and associated configuration settings that prepare Drupal for custom operation. For example, a distribution could configure Drupal as a "brochure" site rather than a news site or online store.

Architecture

Drupal is based on the Presentation Abstraction Control architecture, or PAC.

The menu system acts as the Controller. It accepts input via a single source (HTTP GET and POST), routes requests to the appropriate helper functions, pulls data out of the Abstraction (nodes and, from Drupal 5 onwards, forms), and then pushes it through a filter to get a Presentation of it (the theme system).

It even has multiple, parallel PAC agents in the form of blocks that push data out to a common canvas (page.tpl.php).104

Community

Drupal.org has a large community of users and developers who provide active community support by coming up with new updates to help improve the functionality of Drupal.105 As of January 2017 more than 105,400 users are actively contributing.106 The semiannual DrupalCon conference alternates between North America, Europe and Asia.107 Attendance at DrupalCon grew from 500 at Szeged in August 2008, to over 3,700 people at Austin, Texas, in June 2014.

Smaller events, known as "Drupal Camps" or DrupalCamp, occur throughout the year all over the world.108 The annual Florida DrupalCamp brings users together for Coding for a Cause that benefits a local nonprofit organization, as does the annual GLADCamp (Greater Los Angeles Drupal Camp) event, Coders with a Cause.

The Drupal community also organizes professional and semi-professional gatherings called meetups at numerous venues around the world.

There are over 30 national communities109 around drupal.org offering language-specific support.

Media

There are several Drupal specific forms of Media. The most popular is podcasts. DrupalEasy, TalkingDrupal and the Lullabot Podcast all have hundreds of episodes and thousands of regular listeners.

Recently, The Drop Times110 has become a Drupal focused media outlet, highlighting stories of relevance to the Drupal community.

Users

Notable Drupal users include:

Security

Drupal's policy is to announce the nature of each security vulnerability once the fix is released.125126

Administrators of Drupal sites can be automatically notified of these new releases via the Update Status module (Drupal 6) or via the Update Manager (Drupal 7).127

Drupal maintains a security announcement mailing list, a history of all security advisories, a security team home page, and an RSS feed with the most recent security advisories.128129130

In mid-October 2014, Drupal issued a "highly critical" security advisory regarding an SQL injection bug in Drupal 7, also known as Drupalgeddon.131132133 Downloading and installing an upgrade to Drupal 7.32 fixes the vulnerability, but does not remove any backdoor installed by hackers if the site has already been compromised.134 Attacks began soon after the vulnerability was announced. According to the Drupal security team, where a site was not patched within hours of the announcement, it should be considered compromised and taken offline by being replaced with a static HTML page while the administrator of its server must be told that other sites on the same server may also have been compromised. To solve the problem, the site must be restored using backups from before 15 October, be patched and manually updated, and anything merged from the site must be audited.135

In late March 2018, a patch for vulnerability CVE-2018-7600, also dubbed Drupalgeddon2, was released. The underlying bug allows remote attackers without special roles or permissions to take complete control of Drupal 6, 7, and 8 sites.136137 Drupal 6 reached end-of-life on 24 February 2016, and does not get official security updates (extended support is available from two paid Long Term Services Vendors).138 Starting early April, large scale automated attacks against vulnerable sites were observed, and on 20 April, a high level of penetration of unpatched sites was reported.139

On 23 December 2019, Drupal patched an arbitrary file upload flaw. The file-upload flaw affects Drupal 8.8.x before 8.8.1 and 8.7.x before 8.7.11, and the vulnerability is listed as moderately critical by Drupal.140141

In September 2022, Drupal announced two security advisories for a severe vulnerability in Twig for users of Drupal 9.3 and 9.4.142 That week, Drupal also announced a patch for the S3 File System to fix an access bypass issue.143

In January 2023, Drupal announced software updates to resolve four vulnerabilities in Drupal core and three plugins.144

See also

  • Free and open-source software portal

Further reading

  • Abbott/Jones (2016), Learning Drupal 8, England, Packt Publishing. ISBN 978-1-78216-875-1
  • Pol, Kristen (2012). Drupal 7 Multilingual Sites. Birmingham, England: Packt Publishing. ISBN 978-1-84951-818-5.
  • Mercer, David (2010). Drupal 7. Birmingham, England: Packt Publishing. ISBN 978-1-84951-286-2.
  • Travis, Brian (2011). Pro Drupal 7 for Windows Developers. Berkeley: APress. ISBN 978-1-4302-3153-0.
  • Butcher, Matt; Larry Garfield; John Wilkins; Matt Farina; Ken Rickard; Greg Dunlap (2010). Drupal 7 Module Development. Birmingham, England: Packt Publishing. ISBN 978-1-84951-116-2.
  • Bhavin, Patel (August 2010). Drupal 6 Panel Cookbook. Canada: Packt Publishing. ISBN 978-1-84951-118-6.
  • Beighley, Lynn (2009). Drupal for Dummies. New York: For Dummies. ISBN 978-0-470-55611-5.
  • Herremans, D. (2009). Drupal 6: Ultimate Community Site Guide. Switzerland. ISBN 978-2-8399-0490-2.{{cite book}}: CS1 maint: location missing publisher (link)
  • Peacock, Michael (2008). Selling Online with Drupal e-Commerce. Birmingham, England: Packt Publishing. ISBN 978-1-84719-406-0.
  • VanDyk, John K. (2008). Pro Drupal Development, Second Edition. New York: Springer Verlag/Apress. ISBN 978-1-4302-0989-8.
  • Kafer, Konstantin; Emma Hogbin (April 2009). Front End Drupal: Designing, Theming, Scripting. Jersey, USA: Prentice Hall. ISBN 978-0-13-713669-8.
Wikimedia Commons has media related to Drupal.

References

  1. A query on Drupal's official website in March 2009: How does one pronounce "Drupal"? (accessed 19 June 2013) https://drupal.org/node/394746 ↩

  2. "Licensing FAQ". drupal.org. Retrieved 8 April 2009. https://drupal.org/licensing/faq ↩

  3. "The Drupal Overview". drupal.org. 2 June 2008. Retrieved 8 April 2009. https://drupal.org/node/265726 ↩

  4. "System Requirements". drupal.org. Retrieved 8 April 2009. https://drupal.org/requirements ↩

  5. "Open Source Usage Distribution in the Top 10k Sites". BuiltWith Pty Ltd. 2 January 2022. Archived from the original on 8 January 2022. Retrieved 7 January 2022. https://trends.builtwith.com/shop/open-source/traffic/Top-10k ↩

  6. W3Techs (13 June 2022). "Usage Statistics and Market Share of Content Management Systems". W3Techs. Retrieved 13 June 2022.{{cite web}}: CS1 maint: numeric names: authors list (link) https://w3techs.com/technologies/overview/content_management ↩

  7. "The State of Drupal 2010 speech". 10 March 2001. Retrieved 31 August 2011. https://archive.org/details/Css3TheFutureIsNow ↩

  8. "Knowledge management with Drupal". 19 May 2004. https://drupal.org/node/7888 ↩

  9. "Drupal launches newest version of the CMS already powering top organizations around the world". Drupal.org. Drupal Association. 3 June 2020. Archived from the original on 10 March 2021. Retrieved 10 March 2021. https://www.drupal.org/about/media-kit/drupal-9 ↩

  10. "Getting Involved | Drupal.org". www.drupal.org. 21 December 2019. Archived from the original on 22 December 2019. Retrieved 21 September 2018. Drupal.org Activity https://www.drupal.org/getting-involved ↩

  11. "1 Million Users on Drupal.org!". www.drupal.org. 11 October 2013. https://www.drupal.org/node/2110205 ↩

  12. "Drupal for Developers | Drupal.org". www.drupal.org. 18 March 2022. Archived from the original on 18 March 2022. Retrieved 21 April 2017. https://www.drupal.org/developers ↩

  13. "Module project | Drupal.org". www.drupal.org. 18 March 2022. Archived from the original on 23 June 2023. Retrieved 23 June 2023. https://www.drupal.org/project/project_module ↩

  14. "Theme project | Drupal.org". www.drupal.org. 18 March 2022. Archived from the original on 18 March 2022. Retrieved 21 September 2017. https://www.drupal.org/project/project_theme ↩

  15. "Distribution project | Drupal.org". www.drupal.org. 18 March 2022. Archived from the original on 18 March 2022. Retrieved 21 September 2017. https://www.drupal.org/project/project_distribution ↩

  16. "Drupal 7 as an enterprise web application framework". drupal.org. https://munich2012.drupal.org/program/sessions/drupal-7-enterprise-web-application-framework.html ↩

  17. O'Connor, William (19 August 2014). "The Drupal API turns a CMS into a true enterprise application - O'Reilly Radar". O'Reilly Media. Retrieved 11 April 2017. http://radar.oreilly.com/2014/08/the-drupal-api-turns-a-cms-into-a-true-enterprise-application.html ↩

  18. Diana, Dupuis (15 May 2013). "Drupal Is a Framework: Why Everyone Needs to Understand This". Linux Journal. https://www.linuxjournal.com/content/drupal-framework-why-everyone-needs-understand ↩

  19. "Features". drupal.org. Retrieved 8 April 2009. https://drupal.org/features ↩

  20. "Drupal". digitalpublicgoods.net. Retrieved 16 June 2025. https://digitalpublicgoods.net/r/drupal ↩

  21. "20 Years of Drupal History". Retrieved 4 September 2024. https://drupalhistory.org ↩

  22. https://www.drupal.org/project/drupal/releases/11.1.7. {{cite web}}: Missing or empty |title= (help) https://www.drupal.org/project/drupal/releases/11.1.7 ↩

  23. . 6 January 2025 https://www.drupal.org/project/drupal/releases/10.4.1. {{cite web}}: Missing or empty |title= (help) https://www.drupal.org/project/drupal/releases/10.4.1 ↩

  24. "Drupal 7 releases; drupal.org". Retrieved 7 January 2025. https://www.drupal.org/project/drupal/releases?version=7 ↩

  25. "Drupal 9 releases; drupal.org". Retrieved 21 September 2023. https://www.drupal.org/project/drupal/releases?version=9 ↩

  26. "Drupal 8 releases; drupal.org". Retrieved 18 December 2022. https://www.drupal.org/project/drupal/releases?version=8 ↩

  27. "Drupal 6 releases; drupal.org". Retrieved 1 July 2022. https://www.drupal.org/project/drupal/releases?version=6 ↩

  28. "Drupal 5 releases; drupal.org". Retrieved 1 July 2022. https://www.drupal.org/project/drupal/releases?version=5 ↩

  29. "Drupal 4 releases; drupal.org". Retrieved 1 July 2022. https://www.drupal.org/project/drupal/releases?version=4 ↩

  30. "Files 3.0.0 project / drupal; drupal.org". Retrieved 4 September 2024. https://git.drupalcode.org/project/drupal/-/tree/3.0.0 ↩

  31. "Files 2.0 project / drupal; drupal.org". Retrieved 4 September 2024. https://git.drupalcode.org/project/drupal/-/tree/2.0 ↩

  32. "Files 1.0 project / drupal; drupal.org". Retrieved 4 September 2024. https://git.drupalcode.org/project/drupal/-/tree/1.0 ↩

  33. Miller, Ron (22 January 2021). "Drupal's journey from dorm-room project to billion-dollar exit". TechCrunch. Retrieved 20 September 2022. https://techcrunch.com/2021/01/22/drupals-journey-from-dorm-room-project-to-billion-dollar-exit/ ↩

  34. Ruthven, Hunter (17 April 2012). "Dorm room to boardroom - Dries Buytaert on growing Drupal". Growth Business. Retrieved 20 September 2022. https://www.growthbusiness.co.uk/dorm-room-to-boardroom-2098958/ ↩

  35. Miller, Ron (22 January 2021). "Drupal's journey from dorm-room project to billion-dollar exit". TechCrunch. Retrieved 20 September 2022. https://techcrunch.com/2021/01/22/drupals-journey-from-dorm-room-project-to-billion-dollar-exit/ ↩

  36. Buytaert, Dries (24 January 2008). Profiling techniques for performance analysis and optimization of Java applications (PhD). https://lib.ugent.be/catalog/rug01:001253694 ↩

  37. "Druppel: Dutch to English Translation". Babylon Translation. Archived from the original on 13 April 2009. Retrieved 8 April 2009. https://web.archive.org/web/20090413040840/http://translation.babylon.com/Dutch/to-English/druppel ↩

  38. "History". drupal.org. Retrieved 8 April 2009. https://drupal.org/node/769 ↩

  39. "History". drupal.org. Retrieved 8 April 2009. https://drupal.org/node/769 ↩

  40. Benjamin Melançon; et al. (2011). The Definitive Guide to Drupal 7 (2nd ed.). Apress. p. 823. ISBN 9781430231356. 9781430231356 ↩

  41. Critchley, Spencer (3 May 2006). "Digital Politics: An Interview With CivicSpace Founder Zack Rosen". O'Reilly Media. Archived from the original on 17 May 2006. Retrieved 27 May 2012. https://web.archive.org/web/20060517024656/http://www.oreillynet.com/onlamp/blog/2006/05/digital_politics_an_interview.html ↩

  42. Kreiss, Daniel (5 March 2012). "Dean, Romney, and Drupal: Values and Technological Adoption". Culture Digitally. Retrieved 27 May 2012. http://culturedigitally.org/2012/03/dean-romney-and-drupal-values-and-technological-adoption ↩

  43. Samantha M. Shapiro, "The Dean Connection", The New York Times 7 December 2003, accessed 27 May 2012. https://www.nytimes.com/2003/12/07/magazine/the-dean-connection.html ↩

  44. "Marketplace". drupal.org. Retrieved 18 April 2013. https://drupal.org/drupal-services/all ↩

  45. Koenig, Josh. "Growth Graphs". Groups.Drupal. Retrieved 8 April 2009. https://groups.drupal.org/node/1980 ↩

  46. Buytaert, Dries (2008). "Drupal Download Statistics". Retrieved 8 April 2009. http://buytaert.net/drupal-download-statistics-2008 ↩

  47. Buytaert, Dries (2007). "Drupal Download Statistics". Retrieved 8 April 2009. http://buytaert.net/drupal-download-statistics-2007 ↩

  48. "Usage statistics for Drupal core". https://drupal.org/project/usage/drupal ↩

  49. "Drupal Sites". Dries Buytaert. Retrieved 20 July 2010. http://buytaert.net/tag/drupal-sites?page=27 ↩

  50. "List of Nonprofit, NPO, NGO Websites Using Drupal". ENGINE Industries. Archived from the original on 24 December 2009. Retrieved 20 July 2010. https://web.archive.org/web/20091224162949/http://engineindustries.com/blog/jason/list-nonprofit-npo-ngo-websites-using-drupal ↩

  51. Critic, C. M. S. (27 February 2024). "Empowering Higher Ed: 4 Strategies to Transform your Drupal CMS into an Open Source DXP at Scale". CMS Critic. Retrieved 10 April 2025. https://cmscritic.com/empowering-higher-ed-4-strategies-to-transform-your-drupal-cms-into-an-open-source-dxp-at-scale ↩

  52. "OSS CMS Award Previous Winners". Packt Publishing. Archived from the original on 7 July 2009. Retrieved 8 April 2009. https://web.archive.org/web/20090707094004/http://www.packtpub.com/open-source-cms-award-previous-winners ↩

  53. "Drupal is a Webware 100 winner for the third year in a row". Drupal.org. 19 May 2009. Retrieved 31 August 2011. https://drupal.org/Drupal-2009-webware-100-winner ↩

  54. "Cnet.com". News.cnet.com. 19 May 2009. Archived from the original on 10 July 2012. Retrieved 31 August 2011. https://archive.today/20120710215055/http://news.cnet.com/8301-13546_109-10237630-29.html?tag=mncol ↩

  55. "Drupal 6.0 released | Drupal.org". 13 February 2008. https://www.drupal.org/forum/general/news-and-announcements/2008-02-13/drupal-60-released ↩

  56. "Buytaert.net". Buytaert.net. 4 March 2009. Retrieved 31 August 2011. http://buytaert.net/drupal-7-code-freeze-september-1st ↩

  57. "Drupal 7 to be released on January 5 (with one ginormous party)". Buytaert.net. 21 December 2010. Retrieved 31 August 2011. http://buytaert.net/drupal-7-to-be-released-on-january-5th-with-one-ginormous-party ↩

  58. "Xplain Hosting Drupal 7 Quickstart training seminar". Scoop. 16 December 2010. http://www.scoop.co.nz/stories/SC1012/S00048/xplain-hosting-drupal-7-quickstart-training-seminar.htm ↩

  59. "Drupal 7's End-of-Life extended to November 1, 2023 - PSA-2022-02-23". 23 February 2022. Retrieved 29 March 2022. https://www.drupal.org/psa-2022-02-23 ↩

  60. "End of life announcement and changes to Drupal 7 support - PSA-2023-06-07". Drupal.org. 7 June 2023. Retrieved 10 January 2024. https://www.drupal.org/psa-2023-06-07 ↩

  61. Fluckinger, Don (26 October 2022). "Acquia releases open source headless CMS accelerator". TechTarget. Retrieved 10 November 2022. https://www.techtarget.com/searchcontentmanagement/news/252526460/Acquia-releases-open-source-headless-CMS-accelerator ↩

  62. MacManus, Richard (26 October 2022). "How Drupal Fits Into an Increasingly Headless CMS World". The New Stack. Retrieved 10 November 2022. https://thenewstack.io/how-drupal-fits-into-an-increasingly-headless-cms-world/ ↩

  63. "Drupal officially achieves recognition as a Digital Public Good". Drupal.org. 25 April 2023. Archived from the original on 22 January 2025. Retrieved 16 June 2025. http://web.archive.org/web/20250122115304/https://www.drupal.org/association/blog/drupal-officially-achieves-recognition-as-a-digital-public-good ↩

  64. "Never hack core". drupal.org. 16 May 2007. https://drupal.org/node/144376 ↩

  65. "Features". drupal.org. Retrieved 8 April 2009. https://drupal.org/features ↩

  66. "Documentation: Core modules and themes". drupal.org. 4 November 2016. Retrieved 22 January 2021. https://www.drupal.org/docs/core-modules-and-themes ↩

  67. "Documentation: Core Modules and eCommerce". lnwebworks.com. https://www.lnwebworks.com/Insight/5-modules-to-integrate-ecommerce-with-drupal-website ↩

  68. "Documentation: Core modules and themes". drupal.org. 4 November 2016. Retrieved 22 January 2021. https://www.drupal.org/docs/core-modules-and-themes ↩

  69. "Documentation: Multisite Drupal". 17 August 2016. https://www.drupal.org/docs/multisite-drupal ↩

  70. Buytaert, Dries (30 October 2006). "Garland, the new default core theme". drupal.org. Retrieved 8 April 2009. https://drupal.org/node/91964 ↩

  71. "Color: Allows the user to change the color scheme of certain themes". drupal.org. 8 October 2007. Retrieved 8 April 2009. https://drupal.org/handbook/modules/color ↩

  72. Quinlan, Keely (10 May 2024). "Drupal announces 'Starshot' release for less-technical users". StateScoop. Retrieved 10 April 2025. https://statescoop.com/drupal-starshot-state-government-2024/ ↩

  73. Dees, Mels (17 January 2025). "Drupal launches no-code CMS". Techzine Global. Retrieved 10 April 2025. https://www.techzine.eu/news/applications/127906/drupal-launches-no-code-cms/ ↩

  74. "Drupal: Power, Flexibility, Freedom, and Now Smarter with AI". www.thedroptimes.com. 31 January 2025. Retrieved 10 April 2025. https://www.thedroptimes.com/interview/45813/drupal-power-flexibility-freedom-and-now-smarter-with-ai ↩

  75. "Recipes, Starshot, and the future of Drupal | TheDropTimes". www.thedroptimes.com. 27 June 2024. Retrieved 10 April 2025. https://www.thedroptimes.com/events/40731/recipes-starshot-and-future-drupal ↩

  76. "Drupal core translation downloads". drupal.org. Retrieved 30 January 2017. https://localize.drupal.org/translate/downloads ↩

  77. Nick, Edward (7 September 2022). "Drupal". Data Science Central. Retrieved 20 September 2022. https://www.datasciencecentral.com/reasons-why-you-need-to-integrate-your-drupal-hosting-with-cloudways/ ↩

  78. "Drupal 6.0 released". drupal.org. 13 February 2008. Retrieved 8 April 2009. https://drupal.org/drupal-6.0 ↩

  79. "Drupal 6.0 released". drupal.org. 13 February 2008. Retrieved 8 April 2009. https://drupal.org/drupal-6.0 ↩

  80. "SA-CORE-2014-005 - Drupal core - SQL injection". Https. 15 October 2014. Retrieved 3 December 2014. https://www.drupal.org/SA-CORE-2014-005 ↩

  81. "Drupal Core - Highly Critical - Public Service announcement - PSA-2014-003". Https. 29 October 2014. Retrieved 3 December 2014. https://www.drupal.org/PSA-2014-003 ↩

  82. "Drupal on Windows Group". drupal.org. Retrieved 14 February 2011. https://groups.drupal.org/drupal-windows ↩

  83. Killesreiter, Gerhard (25 February 2013). "Accessibility statement". drupal.org. Retrieved 16 April 2013. https://drupal.org/about/accessibility ↩

  84. "Drupal 8 Accessibility Features". 27 May 2013. https://www.drupal.org/docs/8/accessibility/drupal-8-accessibility-features ↩

  85. Scholten, Roy (10 December 2012). "Drupal core gates". drupal.org. Retrieved 16 April 2013. https://drupal.org/core-gates#accessibility ↩

  86. "API Reference". drupal.org. Retrieved 8 April 2009. https://api.drupal.org/ ↩

  87. "File and directory management". drupal.org. 7 May 2005. https://drupal.org/node/22283 ↩

  88. "Never hack core". drupal.org. 16 May 2007. https://drupal.org/node/144376 ↩

  89. "Integrating Drupal with External Systems". specbee.com. 24 August 2018. Retrieved 24 August 2018. https://www.specbee.com/blogs/symphony2-components-drupal-8-integration-every-drupaler-must-know-about ↩

  90. "Drupal Camunda BPM Integration". Srijan Technologies. https://www.srijan.net/solutions/drupal-camunda-bpm-integration ↩

  91. "Module project | Drupal.org". www.drupal.org. 18 March 2022. Archived from the original on 23 June 2023. Retrieved 23 June 2023. https://www.drupal.org/project/project_module ↩

  92. "Project usage overview". Drupal.org. Retrieved 18 August 2011. https://drupal.org/project/usage ↩

  93. "DRUPAL 5 TO DRUPAL 7". Archived from the original on 4 July 2017. Retrieved 24 March 2015. https://web.archive.org/web/20170704050410/http://www.psdtodrupaldeveloper.com/blog/why-upgrade-from-drupal-5-to-drupal-7 ↩

  94. "Field API". 2009. Retrieved 8 May 2009. https://drupal.org/node/361849 ↩

  95. "Views in Drupal Core initiative: Status report and roadmap". 3 September 2012. Retrieved 4 November 2014. https://www.drupal.org/community-initiatives/drupal-core/vdc-roadmap ↩

  96. "Theme project | Drupal.org". www.drupal.org. 18 March 2022. Archived from the original on 18 March 2022. Retrieved 21 September 2017. https://www.drupal.org/project/project_theme ↩

  97. "PHPTemplate theme engine". drupal.org. Archived from the original on 8 March 2009. Retrieved 8 April 2009. https://web.archive.org/web/20090308030334/http://drupal.org/phptemplate ↩

  98. "XTemplate theme engine". drupal.org. Archived from the original on 16 March 2009. Retrieved 8 April 2009. https://web.archive.org/web/20090316205154/http://drupal.org/node/6493 ↩

  99. Arghire, Ionut (29 September 2022). "Drupal Updates Patch Vulnerability in Twig Template Engine | SecurityWeek.Com". www.securityweek.com. Retrieved 11 October 2022. https://www.securityweek.com/drupal-updates-patch-vulnerability-twig-template-engine ↩

  100. "How does Drupal compare to Mambo? discussion thread". drupal.org. 17 January 2005. Retrieved 8 April 2009. https://drupal.org/node/15689#comment-25704 ↩

  101. "Drupal themes". Drupal.org. Archived from the original on 23 August 2007. Retrieved 31 August 2011. https://web.archive.org/web/20070823232913/http://drupal.org/project/Themes ↩

  102. "Adding your theme to Drupal.org". Drupal.org. https://drupal.org/node/14208 ↩

  103. "Top Drupal Distributions". AGLOBALWAY Consulting Services Inc. Archived from the original on 13 April 2014. https://web.archive.org/web/20140413154924/http://www.aglobalway.com/content/top-drupal-distributions ↩

  104. "MVC vs. PAC". http://www.garfieldtech.com/blog/mvc-vs-pac ↩

  105. Drupal - CMS Grew Overnight By MAAN Softwares, Retrieved, 8 June 2017 https://maansoftwares.com/blog/drupal/drupal-cms-grew-overnight ↩

  106. "Drupal for Developers | Drupal.org". www.drupal.org. 18 March 2022. Archived from the original on 18 March 2022. Retrieved 21 April 2017. https://www.drupal.org/developers ↩

  107. "drupal.org discussion on DrupalCon event management". Groups.drupal.org. Retrieved 31 August 2011. https://groups.drupal.org/node/17870 ↩

  108. "Drupal Camps and Cons". Retrieved 25 January 2013. http://buildamodule.com/drupal-camps-calendar ↩

  109. "Language specific communities". Drupal.org. 26 August 2011. Retrieved 31 August 2011. https://drupal.org/language-specific-communities ↩

  110. "Talking Drupal #384 - The Drop Times | Talking Drupal". talkingdrupal.com. Retrieved 5 July 2024. https://talkingdrupal.com/384 ↩

  111. Fluckinger, Don (10 March 2021). "Acquia digital experience platform adds CX-friendly tools". TechTarget. Retrieved 6 December 2022. https://www.techtarget.com/searchcustomerexperience/news/252498311/Acquia-digital-experience-platform-adds-CX-friendly-tools ↩

  112. Spencer, Jamie (7 April 2017). "CMS Battle for Beginners: WordPress vs Joomla vs Drupal (Infographic)". MakeAWebsiteHub.com. Retrieved 17 May 2017. https://makeawebsitehub.com/compare/content-management-system-cms-comparison/ ↩

  113. Caron, Bruce (20 May 2015). "NASA Science on Drupal Central". earthdata.nasa.gov. Retrieved 5 October 2022. https://www.earthdata.nasa.gov/esds/competitive-programs/access/drupal-central ↩

  114. Blyaert, Luc (18 October 2022). "Tobania trekt CM binnen met Dries Buytaert". www.computable.be (in Dutch). Retrieved 18 October 2022. https://www.computable.be/artikel/nieuws/management/7423245/5440850/tobania-trekt-cm-binnen-met-dries-buytaert.html ↩

  115. Kaur Dadiala, Karanjeet (8 August 2022). "16 Organization Websites Built Using Drupal in 2022". Zyxware Technologies. Retrieved 9 October 2022. https://www.zyxware.com/article/16-organization-websites-built-using-drupal-in-2022 ↩

  116. Kaur Dadiala, Karanjeet (8 August 2022). "16 Organization Websites Built Using Drupal in 2022". Zyxware Technologies. Retrieved 9 October 2022. https://www.zyxware.com/article/16-organization-websites-built-using-drupal-in-2022 ↩

  117. "Who Uses Drupal? 10 Famous Drupal Websites | Smartbees". smartbees.co. 27 May 2021. Retrieved 5 October 2022. https://smartbees.co/blog/who-uses-drupal-10-famous-drupal-websites ↩

  118. Blyaert, Luc (18 October 2022). "Tobania trekt CM binnen met Dries Buytaert". www.computable.be (in Dutch). Retrieved 18 October 2022. https://www.computable.be/artikel/nieuws/management/7423245/5440850/tobania-trekt-cm-binnen-met-dries-buytaert.html ↩

  119. Montti, Roger (22 April 2022). "Drupal Warns of Two Critical Vulnerabilities". Search Engine Journal. Retrieved 23 October 2022. https://www.searchenginejournal.com/drupal-warns-of-two-critical-vulnerabilities/446913/ ↩

  120. Montti, Roger (22 April 2022). "Drupal Warns of Two Critical Vulnerabilities". Search Engine Journal. Retrieved 23 October 2022. https://www.searchenginejournal.com/drupal-warns-of-two-critical-vulnerabilities/446913/ ↩

  121. Montti, Roger (22 April 2022). "Drupal Warns of Two Critical Vulnerabilities". Search Engine Journal. Retrieved 23 October 2022. https://www.searchenginejournal.com/drupal-warns-of-two-critical-vulnerabilities/446913/ ↩

  122. Montti, Roger (22 April 2022). "Drupal Warns of Two Critical Vulnerabilities". Search Engine Journal. Retrieved 23 October 2022. https://www.searchenginejournal.com/drupal-warns-of-two-critical-vulnerabilities/446913/ ↩

  123. Montti, Roger (22 April 2022). "Drupal Warns of Two Critical Vulnerabilities". Search Engine Journal. Retrieved 23 October 2022. https://www.searchenginejournal.com/drupal-warns-of-two-critical-vulnerabilities/446913/ ↩

  124. Montti, Roger (22 April 2022). "Drupal Warns of Two Critical Vulnerabilities". Search Engine Journal. Retrieved 23 October 2022. https://www.searchenginejournal.com/drupal-warns-of-two-critical-vulnerabilities/446913/ ↩

  125. Drupal (October 2005). "Security announcement and release process". https://drupal.org/security-team ↩

  126. Drupal. "How to report a security issue". https://drupal.org/security-team/report-issue ↩

  127. "Update manager (and Update status)". drupal.org. Retrieved 1 July 2011. https://drupal.org/documentation/modules/update ↩

  128. "Security advisories". drupal.org. Retrieved 28 April 2009. https://drupal.org/security ↩

  129. "Drupal security team". Drupal.org. October 2005. Retrieved 31 August 2011. https://drupal.org/security-team ↩

  130. "Drupal Security RSS feed". Drupal.org. Retrieved 31 August 2011. https://drupal.org/security/rss.xml ↩

  131. Leyden, John (3 November 2014). "Drupal megaflaw raises questions over CMS bods' crisis mgmt". www.theregister.com. https://www.theregister.com/2014/11/03/drupal_drupalgeddon_analysis/ ↩

  132. "SA-CORE-2014-005 - Drupal core - SQL injection". Security advisories. Drupal security team. 15 October 2014. https://www.drupal.org/SA-CORE-2014-005 ↩

  133. "Drupalgeddon strikes back: outdated Drupal allegedly linked to "Panama Papers"". Blog. Drop Guard. Archived from the original on 11 June 2016. Retrieved 13 July 2016. https://web.archive.org/web/20160611201911/http://www.drop-guard.net/blog/drupalgeddon-panama-papers ↩

  134. "Drupal Core—Highly Critical—Public Service Announcement—PSA-2014-003". Security advisories. Drupal security team. 29 October 2014 – via Drupal.org. You should proceed under the assumption that every Drupal 7 website was compromised unless updated or patched before Oct 15th, 11pm UTC, that is 7 hours after the announcement.Simply updating to Drupal 7.32 will not remove backdoors....updating to version 7.32 or applying the patch fixes the vulnerability but does not fix an already compromised website. If you find that your site is already patched but you didn't do it, that can be a symptom that the site was compromised - some attacks have applied the patch as a way to guarantee they are the only attacker in control of the site. https://www.drupal.org/PSA-2014-003 ↩

  135. Robinson, Brian (7 November 2014). "Attacks on open source call for better software design -". GCN. Archived from the original on 18 August 2016. Retrieved 29 July 2016. https://web.archive.org/web/20160818211205/https://gcn.com/blogs/cybereye/2014/11/open-source-attacks.aspx ↩

  136. "How we installed a Drupal security patch on 1300 sites, stress-free!". Dropsolid. 4 April 2018. Retrieved 11 March 2019. https://dropsolid.com/en/blog/how-we-installed-drupal-security-patch-1300-sites-stress-free ↩

  137. "FAQ about SA-CORE-2018-002". Drupal Security Team. Retrieved 23 April 2018. https://groups.drupal.org/security/faq-2018-002 ↩

  138. "Drupal 6 end-of-life announcement". Drupal.org. 9 November 2015. Retrieved 1 May 2021. https://www.drupal.org/forum/general/news-and-announcements/2015-11-09/drupal-6-end-of-life-announcement ↩

  139. Goddin, Dan (20 April 2018). ""Drupalgeddon2" touches off arms race to mass-exploit powerful Web servers". Ars Technica. Retrieved 23 April 2018. https://arstechnica.com/information-technology/2018/04/drupalgeddon2-touches-off-arms-race-to-mass-exploit-powerful-web-servers/ ↩

  140. "Drupal Patches Arbitrary File Upload Flaw". Decipher. 23 December 2019. Retrieved 23 December 2019. https://duo.com/decipher/drupal-patches-arbitrary-file-upload-flaw ↩

  141. "Drupal core - Moderately critical - Denial of Service - SA-CORE-2019-009". Drupal.org. 18 December 2019. Retrieved 23 December 2019. https://www.drupal.org/sa-core-2019-009 ↩

  142. Montti, Roger (1 October 2022). "Drupal Warns of Critical High Severity Vulnerability". Search Engine Journal. Retrieved 11 October 2022. https://www.searchenginejournal.com/drupal-critical-vulnerability/466647/ ↩

  143. Arghire, Ionut (29 September 2022). "Drupal Updates Patch Vulnerability in Twig Template Engine | SecurityWeek.Com". www.securityweek.com. Retrieved 11 October 2022. https://www.securityweek.com/drupal-updates-patch-vulnerability-twig-template-engine ↩

  144. Arghire, Ionut (20 January 2023). "Drupal Patches Vulnerabilities Leading to Information Disclosure". www.securityweek.com. Retrieved 20 January 2023. https://www.securityweek.com/drupal-patches-vulnerabilities-leading-information-disclosure ↩