View source for Drupal

{{short description|Web content management system}}
{{Infobox software
| name = Drupal
| logo = Drupal-wordmark.svg
| screenshot = File:Drupal 9 content authoring.jpg
| screenshot size = 
| caption = Screenshot showing Drupal 9 content authoring interface in action
| author = [[Dries Buytaert]]
| developer = Drupal community
| released = {{start date and age|2001|1|15}}<ref>{{cite web|url=https://api.drupal.org/api/drupal/core%21CHANGELOG.txt/8.0.x|title=CHANGELOG.txt|website=Drupal.org|access-date=8 June 2020}}</ref>
| discontinued = 
| latest release version = <!-- If you update [[Template:Drupal version]], it will automatically update this page and [[List of content management systems]]--> {{Drupal version}}
| latest release date = {{Drupal version|releasedate}}
| latest preview version = 
| latest preview date = 
| repo = {{URL|https://git.drupalcode.org/project/drupal|Drupal Repository}}
| programming language = [[PHP]], using [[Symfony]]
| operating system = [[Unix-like]], [[Windows]]
| platform = [[Web platform]]
| size = 140&nbsp;MB (uncompressed Drupal 9.1 core)<ref name="Drupal-9-Releases" />
| language = 
| genre = [[Content management framework]]<br>[[Content management system]]<br>[[Blog software]]<br>[[Open-source]]<br>[[Knowledge management]]<br>
| license = [[GNU General Public License|GPL-2.0-or-later]]<ref name=licensingfaq />
| alexa = 
| website = {{URL|https://www.drupal.org/|drupal.org}}
}}{{Primary sources|date=October 2022}}
'''Drupal''' ({{IPAc-en|ˈ|d|r|uː|p|əl}})<ref>A query on '''Drupal'''{{'}}s official website on March 2009: [https://drupal.org/node/394746 How does one pronounce "Drupal"?] {{Webarchive|url=https://web.archive.org/web/20200730035650/https://drupal.org/node/394746 |date=2020-07-30 }} (accessed 19 June 2013)</ref> is a [[free and open-source]] web content management system (CMS) written in PHP and distributed under the GNU General Public License.<ref name=licensingfaq>{{Cite web | url= http://drupal.org/licensing/faq | title= Licensing FAQ | work= drupal.org | access-date= 2009-04-08 | archive-date= 2015-09-05 | archive-url= https://web.archive.org/web/20150905114659/https://www.drupal.org/licensing/faq/ | dead-url= yes }}</ref><ref name=over>{{Cite web | title= The Drupal Overview | url= http://drupal.org/node/265726 | work= drupal.org | date= 2 June 2008 | access-date= 2009-04-08 | archive-date= 2016-11-16 | archive-url= https://web.archive.org/web/20161116184900/https://www.drupal.org/node/265726 | dead-url= yes }}</ref><ref name="reqs">{{Cite web | url= http://drupal.org/requirements | title= System Requirements | work= drupal.org | access-date= 2009-04-08 | archive-date= 2016-04-09 | archive-url= https://web.archive.org/web/20160409124633/https://www.drupal.org/requirements | dead-url= yes }}</ref> Drupal provides an open-source [[Front and back ends|back-end]] framework for at least 14% of the top 10,000 [[World Wide Web|websites]] worldwide<ref>{{Cite web|author=|date=2022-01-02|title=Open Source Usage Distribution in the Top 10k Sites|url=https://trends.builtwith.com/shop/open-source/traffic/Top-10k|url-status=live|archive-url=https://archive.today/20220108072246/https://trends.builtwith.com/shop/open-source/traffic/Top-10k#selection-443.1-459.5|archive-date=2022-01-08|access-date=2022-01-07|website=BuiltWith Pty Ltd}}</ref> and 1.2% of the top 10 million websites<ref>{{Cite web|author=W3Techs|date=2022-06-13|title=Usage Statistics and Market Share of Content Management Systems|url=https://w3techs.com/technologies/overview/content_management|access-date=2022-06-13|website=W3Techs}}</ref>—ranging from personal [[blog]]s to corporate, political, and government sites.<ref>{{Cite web | url= https://archive.org/details/Css3TheFutureIsNow | title= The State of Drupal 2010 speech| date= 2001-03-10 | access-date= 2011-08-31}}</ref> Systems also use Drupal for knowledge management and for business collaboration.<ref>{{Cite web| url= https://drupal.org/node/7888| title= Knowledge management with Drupal| date= 19 May 2004| access-date= 27 September 2023| archive-date= 30 July 2020| archive-url= https://web.archive.org/web/20200730034011/https://www.drupal.org/node/7888| dead-url= yes}}</ref>

{{As of|2022|03|df=US}}, the Drupal community had more than 1.39 million members,<ref>{{Cite web|date=2020-06-03|title=Drupal launches newest version of the CMS already powering top organizations around the world|url=https://www.drupal.org/about/media-kit/drupal-9|url-status=live|archive-url=https://archive.today/20210310163252/https://www.drupal.org/about/media-kit/drupal-9#selection-1135.179-1135.229|archive-date=2021-03-10|access-date=2021-03-10|website=Drupal.org|publisher=Drupal Association}}</ref><ref>{{Cite web|url=https://www.drupal.org/getting-involved|title=Getting Involved {{!}} Drupal.org|date=2019-12-21|website=www.drupal.org|url-status=live|archive-url=https://archive.today/20191222063836/https://www.drupal.org/getting-involved|archive-date=2019-12-22|access-date=2018-09-21|quote=Drupal.org Activity}}</ref><ref>{{cite web|url=https://www.drupal.org/node/2110205|title=1 Million Users on Drupal.org!|date=2013-10-11|work=www.drupal.org}}</ref> including 124,000 users actively contributing,<ref name="dohome">{{Cite web |date=2022-03-18 |title=Drupal for Developers {{!}} Drupal.org |url=https://www.drupal.org/developers |url-status=live |archive-url=https://archive.today/20220318195114/https://www.drupal.org/developers#selection-1865.0-1869.21 |archive-date=2022-03-18 |access-date=2017-04-21 |work=www.drupal.org}}
</ref> resulting in more than 50,000 free modules that extend and customize Drupal functionality,<ref name=":0" /> over 3,000 free themes that change the look and feel of Drupal,<ref name=":1" /> and at least 1,400 free distributions that allow users to quickly and easily set up a complex, use-specific Drupal in fewer steps.<ref>{{Cite web |date=2022-03-18 |title=Distribution project {{!}} Drupal.org |url=https://www.drupal.org/project/project_distribution |url-status=live |archive-url=https://archive.today/20220318195617/https://www.drupal.org/project/project_distribution#selection-761.0-761.19 |archive-date=2022-03-18 |access-date=2017-09-21 |website=www.drupal.org}}</ref>

The standard release of Drupal, known as '''Drupal core''', contains basic features common to content-management systems. These include user account registration and maintenance, menu management, [[RSS]] feeds, taxonomy, page layout customization, and system administration. The Drupal core installation can serve as a simple website, a single- or multi-user blog, an [[Internet forum]], or a community website providing for [[user-generated content]].

Drupal also describes itself as a [[Web application framework]].<ref>{{cite web|url= http://munich2012.drupal.org/program/sessions/drupal-7-enterprise-web-application-framework.html|title= Drupal 7 as an enterprise web application framework|work= drupal.org}}</ref> When compared with notable frameworks, Drupal meets most of the generally accepted feature requirements for such web frameworks.<ref>{{Cite web|url=http://radar.oreilly.com/2014/08/the-drupal-api-turns-a-cms-into-a-true-enterprise-application.html|title=The Drupal API turns a CMS into a true enterprise application - O'Reilly Radar|last=O'Connor|first=William|date=2014-08-19|website=[[O'Reilly Media]]|access-date=2017-04-11}}</ref><ref>{{Cite web|url=https://www.linuxjournal.com/content/drupal-framework-why-everyone-needs-understand|title=Drupal Is a Framework: Why Everyone Needs to Understand This|last=Diana|first=Dupuis|date=2013-05-15|website=[[Linux Journal]]}}</ref>

Although Drupal offers a sophisticated [[Application programming interface|API]] for developers, basic Web-site installation and administration of the framework require no programming skills.<ref name=features/>

Drupal runs on any [[computing platform]] that supports both a [[web server]] capable of running PHP and a [[database]] to store content and configuration.

==History==
<!-- Template:Version - for version & release history. Documentation and examples: http://en.wikipedia.org/wiki/Template:Version -->
{| class="wikitable floatright"
|-
|+ Latest major and supported releases
|-
! Version !! Release date
|-
| {{Version|c|10.1.4}} || September 20, 2023<ref name="Drupal-10-Releases">{{cite web|url=https://www.drupal.org/project/drupal/releases?version=10|title=Drupal 10 releases; drupal.org|access-date=2023-09-21}}</ref>
|-
| {{Version |co | 9.5.11}} || September 20, 2023<ref name="Drupal-9-Releases">{{cite web|url=https://www.drupal.org/project/drupal/releases?version=9|title=Drupal 9 releases; drupal.org|access-date=2023-09-21}}</ref>
|-
| {{Version |co | 7.98}} || June 07, 2023<ref name="Drupal-7-Releases">{{cite web|url=https://www.drupal.org/project/drupal/releases?version=7|title=Drupal 7 releases; drupal.org|access-date=2023-09-21}}</ref>
|-
| {{Version |o | 8.9.20}} || December 17, 2021 <ref name="Drupal-8-Releases">{{cite web|url=https://www.drupal.org/project/drupal/releases?version=8|title=Drupal 8 releases; drupal.org|access-date=2022-12-18}}</ref>
|-
| {{Version |o | 6.38}} || February 24, 2016<ref name="Drupal-6-Releases">{{cite web|url=https://www.drupal.org/project/drupal/releases?version=6|title=Drupal 6 releases; drupal.org|access-date=2022-07-01}}</ref>
|-
| {{Version |o | 5.23}} || August 11, 2010<ref name="Drupal-5-Releases">{{cite web|url=https://www.drupal.org/project/drupal/releases?version=5|title=Drupal 5 releases; drupal.org|access-date=2022-07-01}}</ref>
|-
| {{Version |o | 4.7.11}} || January 10, 2008<ref name="Drupal-4-Releases">{{cite web|url=https://www.drupal.org/project/drupal/releases?version=4|title=Drupal 4 releases; drupal.org|access-date=2022-07-01}}</ref>
|-
|colspan="3"|<small>{{Version|l|show=011000}}</small><small>{{Version|l|show=000110}}</small>
|}

Drupal was originally written by Dries Buytaert as a message board for his friends to communicate in their dorms while working on his Master's degree at the [[University of Antwerp]].<ref name=":3">{{Cite web |last=Miller |first=Ron |date=2021-01-22 |title=Drupal's journey from dorm-room project to billion-dollar exit |url=https://techcrunch.com/2021/01/22/drupals-journey-from-dorm-room-project-to-billion-dollar-exit/ |access-date=2022-09-20 |website=TechCrunch |language=en-US}}</ref><ref>{{Cite web |last=Ruthven |first=Hunter |date=2012-04-17 |title=Dorm room to boardroom - Dries Buytaert on growing Drupal |url=https://www.growthbusiness.co.uk/dorm-room-to-boardroom-2098958/ |access-date=2022-09-20 |website=Growth Business |language=en-GB}}</ref>  After graduation, Buytaert moved the site to the public internet and named it Drop.org.<ref name=":3" /> Between 2003 and 2008 Dries Buytaert worked towards a PhD degree at [[Ghent University]].<ref>{{cite thesis |type=PhD |last=Buytaert |first=Dries |date=2008-01-24 |title=Profiling techniques for performance analysis and optimization of Java applications  |url=https://lib.ugent.be/catalog/rug01:001253694}}</ref> 

The name ''Drupal'' represents an English rendering of the [[Dutch language|Dutch]] word ''[[wikt:druppel|druppel]]'', which means "drop" (as in a water droplet).<ref>{{Cite web | url=http://translation.babylon.com/Dutch/to-English/druppel/ | title=Druppel: Dutch to English Translation | work=Babylon Translation | access-date=2009-04-08 | archive-url=https://web.archive.org/web/20090413040840/http://translation.babylon.com/Dutch/to-English/druppel | archive-date=2009-04-13 | url-status=dead }}</ref> The name came from the now-defunct Drop.org, whose code slowly evolved into Drupal. Buytaert wanted to call the site "dorp" (Dutch for "village") for its community aspects, but mistyped it when checking the domain name and thought the error sounded better.<ref name="history">{{Cite web |title=History |url=http://drupal.org/node/769 |access-date=2009-04-08 |work=drupal.org |archive-date=2009-02-28 |archive-url=https://web.archive.org/web/20090228050758/http://drupal.org/node/769 |dead-url=yes }}</ref>

Drupal became an [[Open-source software|open source]] project in 2001.<ref name="history" /> Interest in Drupal got a significant boost in 2003 when it helped build "DeanSpace" for [[Howard Dean]], one of the candidates in the [[Democratic Party (United States)|U.S. Democratic Party]]'s primary campaign for the [[2004 United States presidential election|2004 U.S. presidential election]]. DeanSpace used open-source sharing of Drupal to support a decentralized network of approximately 50 disparate, unofficial pro-Dean websites that allowed users to communicate directly with one another as well as with the campaign.<ref name="Melançon2012">{{Cite book | title=The Definitive Guide to Drupal 7 |author=Benjamin Melançon|edition=2nd|publisher=Apress|year=2011 |isbn= 9781430231356|page=823 | url=https://books.google.com/books?id=Oqi_eei2kq8C&pg=PA823|display-authors=etal}}</ref> After Dean ended his campaign, members of his Web team continued to pursue their interest in developing a Web platform that could aid political activism by launching CivicSpace Labs in July 2004, "...the first company with full-time employees that was developing and distributing Drupal technology."<ref name=Critchley>{{Cite web | url=http://www.oreillynet.com/onlamp/blog/2006/05/digital_politics_an_interview.html | title=Digital Politics: An Interview With CivicSpace Founder Zack Rosen | last= Critchley | first=Spencer | work=O'Reilly Media | date=2006-05-03 | access-date=2012-05-27}}</ref> Other companies began to also specialize in Drupal development.<ref name=Kreiss>{{Cite web | url=http://culturedigitally.org/2012/03/dean-romney-and-drupal-values-and-technological-adoption | title=Dean, Romney, and Drupal: Values and Technological Adoption | last=Kreiss | first=Daniel | work=Culture Digitally | date=2012-03-05 | access-date=2012-05-27}}</ref><ref name=Shapiro>Samantha M. Shapiro, [https://www.nytimes.com/2003/12/07/magazine/the-dean-connection.html "The Dean Connection"], ''[[The New York Times]]'' December 7, 2003, accessed May 27, 2012.</ref>

By 2013, the Drupal website listed hundreds of vendors that offered Drupal-related services.<ref>{{Cite web | url=http://drupal.org/drupal-services/all | title=Marketplace | work=drupal.org | access-date=2013-04-18}}</ref>

{{As of | 2014}}, Drupal is developed by a community.<ref>{{Cite web | url=http://groups.drupal.org/node/1980 | title=Growth Graphs | last=Koenig | first=Josh | work=Groups.Drupal | access-date=2009-04-08}}</ref>{{Update needed|date=October 2022}} From July 2007 to June 2008, the Drupal.org site provided more than 1.4 million downloads of Drupal software, an increase of approximately 125% from the previous year.<ref>{{Cite web | title=Drupal Download Statistics | url=http://buytaert.net/drupal-download-statistics-2008 | last=Buytaert | first=Dries|year=2008 | access-date=2009-04-08}}</ref><ref>{{Cite web | title=Drupal Download Statistics | url=http://buytaert.net/drupal-download-statistics-2007 | last=Buytaert | first=Dries | year=2007 | access-date=2009-04-08}}</ref>

{{As of|2017|01}} more than 1,180,000 sites use Drupal.<ref>{{Cite web | url=https://drupal.org/project/usage/drupal | title=Usage statistics for Drupal core}}</ref> These include hundreds of well-known organizations,<ref>{{Cite web | url=http://buytaert.net/tag/drupal-sites?page=27 | title=Drupal Sites | work=Dries Buytaert | access-date=2010-07-20}}</ref> including corporations, media and publishing companies, governments, non-profits,<ref>{{Cite web | url=http://engineindustries.com/blog/jason/list-nonprofit-npo-ngo-websites-using-drupal | archive-url=https://web.archive.org/web/20091224162949/http://engineindustries.com/blog/jason/list-nonprofit-npo-ngo-websites-using-drupal | url-status=dead | archive-date=2009-12-24 | title=List of Nonprofit, NPO, NGO Websites Using Drupal | work=ENGINE Industries | access-date=2010-07-20 }}</ref> schools, and individuals. Drupal has won several [[Packt]] Open Source CMS Awards<ref>{{Cite web | url=http://www.packtpub.com/open-source-cms-award-previous-winners | title=OSS CMS Award Previous Winners | work=Packt Publishing | access-date=2009-04-08 | archive-url=https://web.archive.org/web/20090707094004/http://www.packtpub.com/open-source-cms-award-previous-winners | archive-date=2009-07-07 | url-status=dead }}</ref> and won the [[Webware 100]] {{clarify|date=October 2017}} three times in a row.<ref>{{Cite web | url=http://drupal.org/Drupal-2009-webware-100-winner | title=Drupal is a Webware 100 winner for the third year in a row | publisher=Drupal.org | access-date=2011-08-31 | archive-date=2016-08-20 | archive-url=https://web.archive.org/web/20160820013408/https://www.drupal.org/Drupal-2009-webware-100-winner | dead-url=yes }}</ref><ref>{{Cite web | url=http://news.cnet.com/8301-13546_109-10237630-29.html?tag=mncol | archive-url=https://archive.today/20120710215055/http://news.cnet.com/8301-13546_109-10237630-29.html?tag=mncol | url-status=dead | archive-date=July 10, 2012 | title=Cnet.com | publisher=News.cnet.com | date=2009-05-19 | access-date=2011-08-31 }}</ref>

Drupal 6 was released on February 13, 2008,<ref>{{Cite web|url=https://www.drupal.org/forum/general/news-and-announcements/2008-02-13/drupal-60-released|title=Drupal 6.0 released &#124; Drupal.org}}</ref> on March 5, 2009, Buytaert announced a [[code freeze]] for Drupal 7 for September 1, 2009.<ref>{{Cite web | url=http://buytaert.net/drupal-7-code-freeze-september-1st | title=Buytaert.net| date=4 March 2009|publisher=Buytaert.net | access-date=2011-08-31}}</ref> Drupal 7 was released on January 5, 2011, with release parties in several countries.<ref>{{Cite web | url=http://buytaert.net/drupal-7-to-be-released-on-january-5th-with-one-ginormous-party | title=Drupal 7 to be released on January 5 (with one ginormous party) | date=21 December 2010 |publisher=Buytaert.net | access-date=2011-08-31}}</ref> After that, maintenance on Drupal 5 stopped, with only Drupal 7 and Drupal 6 maintained.<ref>{{Cite web | url=http://www.scoop.co.nz/stories/SC1012/S00048/xplain-hosting-drupal-7-quickstart-training-seminar.htm | title=Xplain Hosting Drupal 7 Quickstart training seminar|publisher=[[Scoop (website)|Scoop]] | date=2010-12-16}}</ref>  Drupal 7's end-of-life was scheduled for November 2021, but given the impact of COVID-19, and the continuing wide usage, the end of life has been pushed back until November 1, 2023, to be reviewed annually.<ref>{{cite web|url=https://www.drupal.org/psa-2022-02-23|title=Drupal 7's End-of-Life extended to November 1, 2023 - PSA-2022-02-23|access-date=2022-03-29}}</ref>

On October 7, 2015, Drupal 8 first release candidate (rc1) was announced.<ref name="auto">{{cite web|url=https://www.drupal.org/drupal-8.0.0-rc1|title=Drupal 8.0.0-rc1 announcement|work=drupal.org}}</ref> Drupal 8 includes new features and improvements for both users and developers, including: a revamped user interface; WYSIWYG and in-place editing; improved mobile support; added and improved key contributed modules including Views, Date, and Entity Reference; introduced a new object-oriented backend leveraging Symfony components; revamped configuration management; and improved multilingual support. Drupal 8 rc1 is the collective work of over 3,200 core contributors.<ref name="auto"/> Drupal 8 only allows clients to use local images and utilizes only filtered HTML designs.<ref name=":2" />

In October 2022, Drupal released an open source [[Headless content management system|headless CMS]] accelerator, allowing the front end to be managed outside of the core system.<ref>{{Cite web |last=Fluckinger |first=Don |date=2022-10-26 |title=Acquia releases open source headless CMS accelerator |url=https://www.techtarget.com/searchcontentmanagement/news/252526460/Acquia-releases-open-source-headless-CMS-accelerator |access-date=2022-11-10 |website=TechTarget |language=en}}</ref><ref>{{Cite web |last=MacManus |first=Richard |date=2022-10-26 |title=How Drupal Fits Into an Increasingly Headless CMS World |url=https://thenewstack.io/how-drupal-fits-into-an-increasingly-headless-cms-world/ |access-date=2022-11-10 |website=The New Stack |language=en-US}}</ref> In December, the community released Drupal 10.0.<ref>{{Cite web |last=Kerner |first=Sean Michael |date=2022-12-19 |title=Drupal cranks open-source CMS tech to 10 as the need for modular digital experiences grows |url=https://venturebeat.com/programming-development/drupal-cranks-open-source-cms-tech-to-10-as-the-need-for-modular-digital-experiences-grows/ |access-date=2023-01-07 |website=VentureBeat |language=en-US}}</ref>

==Core==
In the Drupal community, "core" refers to the collaboratively built codebase that can be extended through contributory modules and—for versions prior to Drupal 8—is kept outside of the "sites" folder of a Drupal installation.<ref name="drupal1">{{Cite web | url=http://drupal.org/node/144376 | title=Never hack core | work=drupal.org}}</ref> (Starting with version 8, the core is kept in its own 'core' sub-directory.) Drupal core is the stock element of Drupal. Common Drupal-specific libraries, as well as the bootstrap process, are defined as Drupal core; all other functionality is defined as Drupal modules including the system module itself.

In a Drupal website's default configuration, authors can contribute content as either registered or anonymous users (at the discretion of the administrator). This content is accessible to web visitors through a variety of selectable criteria. As of Drupal 8, Drupal has adopted some Symfony libraries into Drupal core.

Core modules also include a hierarchical [[Taxonomy (general)|taxonomy]] system, which lets developers categorize content or [[Tag (metadata)|tag]] with keywords for easier access.<ref name=features>{{Cite web | url=http://drupal.org/features | title=Features | work=drupal.org | access-date=2009-04-08}}</ref>

Drupal maintains a detailed [[changelog]] of core feature updates by version.<ref name=changelog>{{Cite web | url= https://www.drupal.org/drupal-7.39 | title= Drupal 7.39 released | work= drupal.org | access-date= 2015-09-19}}</ref>

===Core modules===
Drupal core includes modules that can be enabled by the administrator to extend the functionality of the core website.<ref name=coremodules>{{Cite web | url=https://www.drupal.org/docs/core-modules-and-themes | title=Documentation: Core modules and themes | work=drupal.org | access-date=2021-01-22}}</ref><ref name=ecommercemodules>{{Cite web | url=https://www.lnwebworks.com/Insight/5-modules-to-integrate-ecommerce-with-drupal-website | title=Documentation: Core Modules and eCommerce | work=lnwebworks.com }}</ref>

The core Drupal distribution provides a number of features, including:<ref name=coremodules/>
{{columns-list|colwidth=22em|
* Access statistics and logging
* Advanced search
* Books, comments, and forums
* Caching, lazy-loading content (using BigPipe) and feature throttling for improved performance
* Custom content type and fields, and user interface to create, manage, and display lists of content.
* Descriptive URLs
* Multi-level menu system
* Multi-site support<ref name=multisite>{{Cite web | url=https://www.drupal.org/docs/multisite-drupal | title=Documentation: Multisite Drupal }}</ref>
* Multi-user content creation and editing
* RSS feed and feed aggregator
* Security and new release update notification
* User profiles
* Various access control restrictions (user roles, IP addresses, email)
* Workflow tools (triggers and actions)
}}

===Core themes===
Drupal includes core themes, which customize the "look and feel" of Drupal sites,<ref name="coretheme">{{Cite web |last=Buytaert |first=Dries |date=2006-10-30 |title=Garland, the new default core theme |url=http://drupal.org/node/91964 |access-date=2009-04-08 |work=drupal.org}}</ref> for example, Garland and Bartik.

The Color Module, introduced in Drupal core 5.0, allows administrators to change the color scheme of certain themes via a browser interface.<ref name=colormodule>{{Cite web | url=http://drupal.org/handbook/modules/color | title=Color: Allows the user to change the color scheme of certain themes | work=drupal.org | access-date=2009-04-08}}</ref>

===Localization===
As of September 2022, Drupal is available in 100 languages including English (the default).<ref>{{Cite web | url=https://localize.drupal.org/translate/downloads | title=Drupal core translation downloads | work=drupal.org | access-date=2017-01-30 | archive-date=2016-03-05 | archive-url=https://web.archive.org/web/20160305024353/https://localize.drupal.org/translate/downloads | dead-url=yes }}</ref><ref name=":2">{{Cite web |last=Nick |first=Edward |date=2022-09-07 |title=Drupal |url=https://www.datasciencecentral.com/reasons-why-you-need-to-integrate-your-drupal-hosting-with-cloudways/ |access-date=2022-09-20 |website=Data Science Central |language=en-US}}</ref> Support is included for right-to-left languages such as [[Arabic language|Arabic]], [[Persian language|Persian]], and [[Hebrew language|Hebrew]].<ref name=sixnewfeatures>{{Cite web | url=http://drupal.org/drupal-6.0 | title=Drupal 6.0 released | work=drupal.org | access-date=2009-04-08 | archive-date=2008-02-23 | archive-url=https://web.archive.org/web/20080223081909/http://drupal.org/drupal-6.0 | dead-url=yes }}</ref>

Drupal localization is built on top of [[gettext]], the GNU [[internationalization and localization]] (i18n) library.

===Auto-update notification===
Drupal can automatically notify the administrator about new versions of modules, themes, or the Drupal core.<ref name=sixnewfeatures/> It's important to update quickly after security updates are released.

Before updating it is highly recommended to take backup of core, modules, theme, files and database. If there is any error shown after update or if the new update is not compatible with a module, then it can be quickly replaced by a backup. There are several backup modules available in Drupal.

On 15 October 2014, an SQL injection vulnerability was announced and update was released.<ref name="sql-injection-vulnerability">{{cite web |url=https://www.drupal.org/SA-CORE-2014-005 |title=SA-CORE-2014-005 - Drupal core - SQL injection |newspaper=Https |access-date= December 3, 2014}}</ref> Two weeks later the Drupal security team released an advisory explaining that everyone should act under the assumption that any site not updated within 7 hours of the announcement was compromised by automated attacks.<ref name="sql-injection-exploited">{{cite web |url=https://www.drupal.org/PSA-2014-003 |title=Drupal Core - Highly Critical - Public Service announcement - PSA-2014-003 |newspaper=Https |access-date= December 3, 2014}}</ref> Thus, it can be extremely important to apply these updates quickly and usage of a tool like [[drush]] to make this process easier is highly recommended.

===Database abstraction===
Prior to version 7, Drupal had functions that performed tasks related to databases, such as SQL query cleansing, multi-site table name prefixing, and generating proper SQL queries. In particular, Drupal 6 introduced an abstraction layer that allowed programmers to create SQL queries without writing SQL.

Drupal 9 extends the data abstraction layer so that a programmer no longer needs to write SQL queries as text strings. It uses [[PHP Data Objects]] to abstract the database. [[Microsoft]] has written a database driver for their [[Microsoft SQL Server|SQL Server]]. Drupal 7 supports the file-based [[SQLite]] database engine, which is part of the standard PHP distribution.

===Windows development===
With Drupal 9's new database abstraction layer, and ability to run on the Windows web server [[Internet Information Services|IIS]], it is now easier for Windows developers to participate in the Drupal community.

A group on Drupal.org is dedicated to Windows issues.<ref name=drupal-windows>{{Cite web | url=http://groups.drupal.org/drupal-windows | title=Drupal on Windows Group | work=drupal.org | access-date=2011-02-14}}</ref>

===Accessibility===
Since the release of Drupal 7, [[Web accessibility]] has been constantly improving in the Drupal community.<ref>{{Cite web | url=http://drupal.org/about/accessibility | title=Accessibility statement | last=Killesreiter | first=Gerhard | work=drupal.org | date=2013-02-25 | access-date=2013-04-16}}</ref> Drupal is a good framework for building sites accessible to people with disabilities, because many of the best practices have been incorporated into Drupal Core.

Drupal 8 saw many improvements from the [[Authoring Tool Accessibility Guidelines]] (ATAG) 2.0 guidelines which support both an accessible authoring environment as well as support for authors to produce more accessible content.

The accessibility team is carrying on the work of identifying and resolving accessibility barriers and raising awareness within the community.

Drupal 8 has good semantic support for [[rich web applications]] through [[WAI-ARIA]]. There have been many improvements to both the visitor and administrator sides of Drupal, especially:
* Drag and drop functionality
* Improved color contrast and intensity
* Adding skip navigation to core themes
* Adding labels by default for input forms
* Fixing CSS display:none with consistent methods for hiding and exposing text on focus
* Adding support for ARIA Live Regions with Drupal.announce
* Adding a TabbingManager to support better keyboard navigation<ref>{{Cite web | url=https://www.drupal.org/docs/8/accessibility/drupal-8-accessibility-features | title=Drupal 8 Accessibility Features }}</ref>

The community also added an accessibility gate for core issues in Drupal 8.<ref>{{Cite web | url=http://drupal.org/core-gates#accessibility | title=Drupal core gates | last=Scholten | first=Roy | work=drupal.org | date=2012-12-10 | access-date=2013-04-16}}</ref>

==Extending the core==
Drupal core is [[Modular programming|modular]], defining a system of [[Hooking|hooks]] and [[Callback (computer programming)|callbacks]], which are accessed internally via an [[API]].<ref>{{Cite web | url=http://api.drupal.org/ | title=API Reference | work=drupal.org | access-date=2009-04-08}}</ref> This design allows third-party contributed [[#Modules|modules]] and [[#Themes|themes]] to extend or override Drupal's default behaviors without changing Drupal core's code.

Drupal isolates core files from contributed modules and themes. This increases flexibility and security and allows administrators to cleanly upgrade to new releases without overwriting their site's customizations.<ref>{{Cite web | url=http://drupal.org/node/22283 | title=File and directory management | work=drupal.org}}</ref> The Drupal community has the saying, "Never hack core," a strong recommendation that site developers do not change core files.<ref name="drupal1"/>

===Modules===
Contributed modules offer such additional or alternate features as image galleries, custom content types and content listings, [[WYSIWYG]] editors, private messaging, third-party integration tools,<ref>{{Cite web|url=https://www.specbee.com/blogs/symphony2-components-drupal-8-integration-every-drupaler-must-know-about|title=Integrating Drupal with External Systems|date=2018-08-24|publisher=specbee.com|access-date=2018-08-24}}</ref> integrating with BPM portals,<ref>{{cite web|url=https://www.srijan.net/solutions/drupal-camunda-bpm-integration | title=Drupal Camunda BPM Integration | website=Srijan Technologies }}</ref> and more. {{As of|2019|12}} the Drupal website lists more than 44,000 free modules.<ref name=":0">{{Cite web |date=2022-03-18 |title=Module project {{!}} Drupal.org |url=https://www.drupal.org/project/project_module |url-status=live |archive-url=https://web.archive.org/web/20230623133015/http://web.archive.org/screenshot/https://www.drupal.org/project/project_module |archive-date=2023-06-23 |access-date=2023-06-23 |website=www.drupal.org}}</ref>

Some of the most commonly used contributed modules include:<ref>{{Cite web | url=https://drupal.org/project/usage | title=Project usage overview | work=Drupal.org | access-date=2011-08-18}}</ref>
* Content Construction Kit (CCK): allows site administrators to dynamically create content types by extending the database schema. "Content type" describes the kind of information. Content types include, but are not limited to, events, invitations, reviews, articles, and products. The CCK Fields API is in Drupal core in Drupal 7.<ref>{{cite web |url=http://www.psdtodrupaldeveloper.com/blog/why-upgrade-from-drupal-5-to-drupal-7 |title=DRUPAL 5 TO DRUPAL 7 |access-date=2015-03-24 |archive-url=https://web.archive.org/web/20170704050410/http://www.psdtodrupaldeveloper.com/blog/why-upgrade-from-drupal-5-to-drupal-7 |archive-date=2017-07-04 |url-status=dead }}</ref><ref>{{Cite web | title=Field API| url=http://drupal.org/node/361849|year=2009 | access-date=2009-05-08}}</ref>
* Views: facilitates the retrieval and presentation, through a database abstraction system, of content to site visitors. Basic views functionality has been added to core of Drupal 8.<ref>{{Cite web | title=Views in Drupal Core initiative: Status report and roadmap | url=https://www.drupal.org/community-initiatives/drupal-core/vdc-roadmap | access-date=2014-11-04}}</ref>
* Panels: drag and drop layout manager that allows site administrators to visually design their site.
* Rules: conditionally executed actions based on recurring events.
* Features: enables the capture and management of features (entities, views, fields, configuration, etc.) into custom modules.
* Context: allows the definition of sections of site where Drupal features can be conditionally activated
* Media: makes photo uploading and media management easier
* Services: provides an API for Drupal.

===Themes===
{{As of|2019|12}}, there are more than 2,800 free community-contributed [[theme (computing)|theme]]s.<ref name=":1">{{Cite web |date=2022-03-18 |title=Theme project {{!}} Drupal.org |url=https://www.drupal.org/project/project_theme |url-status=live |archive-url=https://archive.today/20220318195454/https://www.drupal.org/project/project_theme#selection-761.0-761.13 |archive-date=2022-03-18 |access-date=2017-09-21 |website=www.drupal.org}}</ref> Themes adapt or replace a Drupal site's default look and feel.

Drupal themes use standardized formats that may be generated by common third-party theme design engines. Many are written in the [[PHPTemplate]] engine<ref>{{Cite web | url=http://drupal.org/phptemplate | title=PHPTemplate theme engine | work=drupal.org | access-date=2009-04-08 | url-status=dead | archive-url=https://web.archive.org/web/20090308030334/http://drupal.org/phptemplate | archive-date=2009-03-08 }}</ref> or, to a lesser extent, the [[XTemplate]] engine.<ref>{{Cite web | url=http://drupal.org/node/6493 | title=XTemplate theme engine | work=drupal.org | access-date=2009-04-08 | url-status=dead | archive-url=https://web.archive.org/web/20090316205154/http://drupal.org/node/6493 | archive-date=2009-03-16 }}</ref> Some templates use hard-coded PHP. Drupal 8 and future versions of Drupal integrate the [[Twig (template engine)|Twig]] templating engine.<ref name=":5">{{Cite web |last=Arghire |first=Ionut |date=2022-09-29 |title=Drupal Updates Patch Vulnerability in Twig Template Engine {{!}} SecurityWeek.Com |url=https://www.securityweek.com/drupal-updates-patch-vulnerability-twig-template-engine |access-date=2022-10-11 |website=www.securityweek.com}}</ref>

The inclusion of the PHPTemplate and XTemplate engines in Drupal addressed user concerns about flexibility and complexity.<ref>{{Cite web | url=http://drupal.org/node/15689#comment-25704 | title=How does Drupal compare to Mambo? discussion thread | work=drupal.org | date=2005-01-17 | access-date=2009-04-08 | archive-date=2007-07-13 | archive-url=https://web.archive.org/web/20070713232013/http://drupal.org/node/15689#comment-25704 | dead-url=yes }}</ref> The Drupal theming system utilizes a [[Template engine (web)|template engine]] to further separate [[HTML]]/[[CSS]] from PHP. A popular Drupal contributed module called 'Devel' provides GUI information to developers and themers about the page build.

Community-contributed themes on the Drupal website are released under a free GPL license.<ref>{{Cite web| url=http://drupal.org/project/Themes| title=Drupal themes| publisher=Drupal.org| access-date=2011-08-31| archive-date=2007-08-23| archive-url=https://web.archive.org/web/20070823232913/http://drupal.org/project/Themes| url-status=dead}}</ref><ref>{{Cite web | url=http://drupal.org/node/14208 | title=Adding your theme to Drupal.org|publisher=Drupal.org}}</ref>

===Distributions===
In the past, those wanting a fully customized installation of Drupal had to download a pre-tailored version separately from the official Drupal core. Today, however, a distribution defines a packaged version of Drupal that upon installation, provides a website or application built for a specific purpose.

The distributions offer the benefit of a new Drupal site without having to manually seek out and install third-party contributed modules or adjust configuration settings.<ref>{{Cite web| title=Top Drupal Distributions| url=http://www.aglobalway.com/content/top-drupal-distributions| publisher=AGLOBALWAY Consulting Services Inc.| url-status=dead| archive-url=https://web.archive.org/web/20140413154924/http://www.aglobalway.com/content/top-drupal-distributions| archive-date=2014-04-13}}</ref> They are collections of modules, themes, and associated configuration settings that prepare Drupal for custom operation. For example, a distribution could configure Drupal as a "brochure" site rather than a news site or [[online store]].

==Architecture==
Drupal is based on the [[Presentation Abstraction Control]] architecture, or PAC.

The menu system acts as the Controller. It accepts input via a single source ([[Hypertext Transfer Protocol#HTTP GET|HTTP GET]] and [[POST (HTTP)|POST]]), routes requests to the appropriate helper functions, pulls data out of the Abstraction (nodes and, from Drupal 5 onwards, forms), and then pushes it through a filter to get a Presentation of it (the theme system).

It even has multiple, parallel PAC agents in the form of blocks that push data out to a common canvas (page.tpl.php).<ref>{{Cite web | url=http://www.garfieldtech.com/blog/mvc-vs-pac | title=MVC vs. PAC}}</ref>

==Community==
Drupal.org has a large community of users and developers who provide active [[community]] support by coming up with new updates to help improve the functionality of Drupal.<ref>[https://maansoftwares.com/blog/drupal/drupal-cms-grew-overnight Drupal - CMS Grew Overnight] By MAAN Softwares, Retrieved, June 8th, 2017</ref> {{As of|2017|01}} more than 105,400 users are actively contributing.<ref name="dohome"/> The semiannual DrupalCon conference alternates between North America, Europe and Asia.<ref>{{cite web|url=http://groups.drupal.org/node/17870|title=drupal.org discussion on DrupalCon event management|publisher=Groups.drupal.org|access-date=2011-08-31}}</ref> Attendance at DrupalCon grew from 500 at [[Szeged]] in August 2008, to over 3,700 people at Austin, Texas in June, 2014.

Smaller events, known as "Drupal Camps" or DrupalCamp, occur throughout the year all over the world.<ref>{{cite web|title=Drupal Camps and Cons|url=http://buildamodule.com/drupal-camps-calendar|access-date=25 January 2013}}</ref> The annual Florida DrupalCamp brings users together for [[Coding for a Cause]] that benefits a local nonprofit organization, as does the annual GLADCamp ([[Greater Los Angeles Drupal]] Camp) event, [[Coders with a Cause]].

The Drupal community also organizes professional and semi-professional gatherings called [[meeting|meetups]] at a large number of venues around the world.

There are over 30 national communities<ref>{{cite web|url=http://drupal.org/language-specific-communities|title=Language specific communities|publisher=Drupal.org|date=2011-08-26|access-date=2011-08-31}}</ref> around drupal.org offering language-specific support.

=== Users ===
Notable Drupal users include:

* [[NBC]]<ref>{{Cite web |last=Fluckinger |first=Don |date=2021-03-10 |title=Acquia digital experience platform adds CX-friendly tools |url=https://www.techtarget.com/searchcustomerexperience/news/252498311/Acquia-digital-experience-platform-adds-CX-friendly-tools |access-date=2022-12-06 |website=TechTarget |language=en}}</ref>
* [[Taboola]]
* [[Patch Media|Patch]]
* [[We the People (petitioning system)|We the People]]<ref>{{cite news|last1=Spencer|first1=Jamie|title=CMS Battle for Beginners: WordPress vs Joomla vs Drupal (Infographic)|url=https://makeawebsitehub.com/compare/content-management-system-cms-comparison/|access-date=17 May 2017|work=MakeAWebsiteHub.com|date=7 April 2017}}</ref> 
* [[Oxford]]
* [[NASA]]<ref>{{Cite web |last=Caron |first=Bruce |title=NASA Science on Drupal Central |url=http://www.earthdata.nasa.gov/esds/competitive-programs/access/drupal-central |access-date=2022-10-05 |website=earthdata.nasa.gov |date=20 May 2015 |language=en}}</ref> 
* [[Nokia]]
* [[European Commission]]
* [[UNICEF]]<ref name=":6">{{Cite web |last=Blyaert |first=Luc |date=2022-10-18 |title=Tobania trekt CM binnen met Dries Buytaert |url=https://www.computable.be/artikel/nieuws/management/7423245/5440850/tobania-trekt-cm-binnen-met-dries-buytaert.html |access-date=2022-10-18 |website=www.computable.be |language=NL}}</ref> 
* Wish
* [[Qualcomm]]<ref name=":4">{{Cite web |last=Kaur Dadiala |first=Karanjeet |date=2022-08-08 |title=16 Organization Websites Built Using Drupal in 2022 |url=https://www.zyxware.com/article/16-organization-websites-built-using-drupal-in-2022 |access-date=2022-10-09 |website=Zyxware Technologies |language=en}}</ref>
* AMD ([[Advanced Micro Devices]])<ref name=":4" /> 
* [[Rainforest Alliance]]<ref>{{Cite web |date=2021-05-27 |title=Who Uses Drupal? 10 Famous Drupal Websites {{!}} Smartbees |url=https://smartbees.co/blog/who-uses-drupal-10-famous-drupal-websites |access-date=2022-10-05 |website=smartbees.co |language=en}}</ref> 
* [[Visa Inc.|VISA]]
* [[Olympic Games]]<ref name=":6" />
* [[Smithsonian Institution]]<ref name=":7">{{Cite web |last=Montti |first=Roger |date=2022-04-22 |title=Drupal Warns of Two Critical Vulnerabilities |url=https://www.searchenginejournal.com/drupal-warns-of-two-critical-vulnerabilities/446913/ |access-date=2022-10-23 |website=Search Engine Journal |language=en}}</ref>
* [[Universal Music Group]]<ref name=":7" /> 
* [[Pfizer]]<ref name=":7" /> 
* [[Johnson & Johnson]]<ref name=":7" /> 
* [[Princeton University]]<ref name=":7" />
* [[Columbia University]]<ref name=":7" />

==Security==
Drupal's policy is to announce the nature of each security vulnerability once the fix is released.<ref>{{Cite web | url=https://drupal.org/security-team | title=Security announcement and release process| author=Drupal}}</ref><ref>{{Cite web | url=https://drupal.org/security-team/report-issue | title=How to report a security issue| author=Drupal}}</ref>

Administrators of Drupal sites can be automatically notified of these new releases via the Update Status module (Drupal 6) or via the Update Manager (Drupal 7).<ref>{{Cite web | url=http://drupal.org/documentation/modules/update | title=Update manager (and Update status) | work=drupal.org | access-date=2011-07-01}}</ref>

Drupal maintains a security announcement mailing list, a history of all security advisories, a security team home page, and an RSS feed with the most recent security advisories.<ref name="security">{{Cite web|url=http://drupal.org/security|title=Security advisories|work=drupal.org|access-date=2009-04-28}}</ref><ref>{{Cite web | url=http://drupal.org/security-team | title=Drupal security team|publisher=Drupal.org | access-date=2011-08-31}}</ref><ref>{{Cite web | url=http://drupal.org/security/rss.xml | title=Drupal Security RSS feed|publisher=Drupal.org | access-date=2011-08-31}}</ref>

In mid-October 2014, Drupal issued a "highly critical" security advisory regarding an [[SQL injection]] bug in Drupal 7, also known as Drupageddon.<ref>{{Cite web |last=Leyden |first=John |date=2014-11-03 |title=Drupal megaflaw raises questions over CMS bods' crisis mgmt |url=https://www.theregister.com/2014/11/03/drupal_drupalgeddon_analysis/ |website=www.theregister.com}}</ref><ref>{{cite web|url=https://www.drupal.org/SA-CORE-2014-005|title=SA-CORE-2014-005 - Drupal core - SQL injection|work=Security advisories|publisher=Drupal security team}}</ref><ref>{{cite web|url=https://www.drop-guard.net/blog/drupalgeddon-panama-papers|work=Blog|publisher=Drop Guard|title=Drupalgeddon strikes back: outdated Drupal allegedly linked to "Panama Papers"|access-date=2016-07-13|archive-date=2016-06-11|archive-url=https://web.archive.org/web/20160611201911/http://www.drop-guard.net/blog/drupalgeddon-panama-papers|url-status=dead}}</ref> Downloading and installing an upgrade to Drupal 7.32 fixes the vulnerability, but does not remove any [[backdoor (computing)|backdoor]] installed by hackers if the site has already been [[exploit (computer security)|compromised]].<ref>{{cite web|url=https://www.drupal.org/PSA-2014-003|title=Drupal Core&mdash;Highly Critical&mdash;Public Service Announcement&mdash;PSA-2014-003|date=October 29, 2014|work=Security advisories|publisher=Drupal security team|quote=<p>You should proceed under the assumption that every Drupal 7 website was compromised unless updated or patched before Oct 15th, 11pm UTC, that is 7 hours after the announcement.</p><p>'''Simply updating to Drupal 7.32 will not remove backdoors'''....updating to version 7.32 or applying the patch fixes the vulnerability but does not fix an already compromised website. If you find that your site is already patched but you didn't do it, that can be a symptom that the site was compromised - some attacks have applied the patch as a way to guarantee they are the only attacker in control of the site.</p>|via=Drupal.org}}</ref> Attacks began soon after the vulnerability was announced. According to the Drupal security team, where a site was not patched within hours of the announcement, it should be considered compromised and taken offline by being replaced with a static HTML page while the administrator of its server must be told that other sites on the same server may also have been compromised. To solve the problem, the site must be restored using backups from before October 15, be patched and manually updated, and anything merged from the site must be audited.<ref>{{Cite web|url=https://gcn.com/blogs/cybereye/2014/11/open-source-attacks.aspx|title=Attacks on open source call for better software design -|last=Robinson|first=Brian|date=2014-11-07|website=GCN|access-date=2016-07-29|archive-date=2016-08-18|archive-url=https://web.archive.org/web/20160818211205/https://gcn.com/blogs/cybereye/2014/11/open-source-attacks.aspx|url-status=dead}}</ref>

In late March 2018, a patch for vulnerability CVE-2018-7600, also dubbed ''Drupalgeddon2'', was released. The underlying bug allows remote attackers without special roles or permissions to take complete control of Drupal 6, 7, and 8 sites.<ref>{{Cite web|url=https://dropsolid.com/en/blog/how-we-installed-drupal-security-patch-1300-sites-stress-free|title=How we installed a Drupal security patch on 1300 sites, stress-free!|website=Dropsolid|access-date=2019-03-11}}</ref><ref>{{cite web|title=FAQ about SA-CORE-2018-002|url=https://groups.drupal.org/security/faq-2018-002|publisher=Drupal Security Team|access-date=23 April 2018}}</ref> Drupal 6 reached end-of-life on February 24, 2016, and does not get official security updates (extended support is available from two paid Long Term Services Vendors).<ref>{{Cite web|date=2015-11-09|title=Drupal 6 end-of-life announcement|url=https://www.drupal.org/forum/general/news-and-announcements/2015-11-09/drupal-6-end-of-life-announcement|access-date=2021-05-01|website=Drupal.org}}</ref> Starting early April, large scale automated attacks against vulnerable sites were observed, and on April 20, a high level of penetration of unpatched sites was reported.<ref>{{cite news|last1=Goddin|first1=Dan|title="Drupalgeddon2" touches off arms race to mass-exploit powerful Web servers|url=https://arstechnica.com/information-technology/2018/04/drupalgeddon2-touches-off-arms-race-to-mass-exploit-powerful-web-servers/|access-date=23 April 2018|publisher=[[Ars Technica]]|date=20 April 2018}}</ref>

On 23 December 2019, Drupal patched an arbitrary file upload flaw. The file-upload flaw affects Drupal 8.8.x before 8.8.1 and 8.7.x before 8.7.11, and the vulnerability is listed as moderately critical by Drupal.<ref>{{Cite web|url=https://duo.com/decipher/drupal-patches-arbitrary-file-upload-flaw|title=Drupal Patches Arbitrary File Upload Flaw|website=Decipher|date=23 December 2019 |access-date=2019-12-23}}</ref><ref>{{Cite web|url=https://www.drupal.org/sa-core-2019-009|title=Drupal core - Moderately critical - Denial of Service - SA-CORE-2019-009|date=2019-12-18|website=Drupal.org|access-date=2019-12-23}}</ref>

In September 2022, Drupal announced two security advisories for a severe vulnerability in Twig for users of Drupal 9.3 and 9.4.<ref>{{Cite web |last=Montti |first=Roger |date=2022-10-01 |title=Drupal Warns of Critical High Severity Vulnerability |url=https://www.searchenginejournal.com/drupal-critical-vulnerability/466647/ |access-date=2022-10-11 |website=Search Engine Journal |language=en}}</ref> That week, Drupal also announced a patch for the S3 File System to fix an access bypass issue.<ref name=":5" />

In January 2023, Drupal announced software updates to resolve four vulnerabilities in Drupal core and three plugins.<ref>{{Cite web |last=Arghire |first=Ionut |date=2023-01-20 |title=Drupal Patches Vulnerabilities Leading to Information Disclosure |url=https://www.securityweek.com/drupal-patches-vulnerabilities-leading-information-disclosure |access-date=2023-01-20 |website=www.securityweek.com}}</ref>

==See also==
{{Portal|Free and open-source software}}
* [[Backdrop CMS]] Drupal 2013 fork
* [[Comparison of server-side web frameworks|Comparison of web frameworks]]
* [[List of content management systems]]

==References==
{{Reflist|2}}

==Further reading==
* Abbott/Jones (2016), Learning Drupal 8, England, Packt Publishing. {{ISBN|978-1-78216-875-1}}
* {{Cite book | last=Pol | first=Kristen | title=Drupal 7 Multilingual Sites|location=Birmingham, England|publisher=Packt Publishing|year=2012|isbn=978-1-84951-818-5}}
* {{Cite book | last=Mercer | first=David | title=Drupal 7|location=Birmingham, England|publisher=Packt Publishing|year=2010|isbn=978-1-84951-286-2}}
* {{Cite book | last=Travis | first=Brian | title=Pro Drupal 7 for Windows Developers|location=Berkeley|publisher=APress|year=2011|isbn=978-1-4302-3153-0}}
* {{Cite book | last=Butcher | first=Matt|author2=Larry Garfield |author3=John Wilkins |author4=Matt Farina |author5=Ken Rickard |author6=Greg Dunlap | title=Drupal 7 Module Development|location=Birmingham, England|publisher=Packt Publishing|year=2010|isbn=978-1-84951-116-2}}
* {{Cite book | last=Bhavin | first=Patel | title=Drupal 6 Panel Cookbook|location=Canada|publisher=Packt Publishing|date=Aug 2010|isbn=978-1-84951-118-6}}
* {{Cite book|last=Beighley|first=Lynn|title=Drupal for Dummies|location=New York|publisher=For Dummies|year=2009|isbn=978-0-470-55611-5}}
* {{Cite book | last=Herremans | first=D. | title=Drupal 6: Ultimate Community Site Guide|location=Switzerland|year=2009|isbn=978-2-8399-0490-2}}
* {{Cite book | last=Peacock | first=Michael | title=Selling Online with Drupal e-Commerce|location=Birmingham, England|publisher=Packt Publishing|year=2008|isbn=978-1-84719-406-0}}
* {{Cite book|last=VanDyk|first=John K.|title=Pro Drupal Development, Second Edition|location=New York|publisher=Springer Verlag/Apress|year=2008|isbn=978-1-4302-0989-8|url-access=registration|url=https://archive.org/details/prodrupaldevelop00vand}}
* {{Cite book | last=Kafer | first=Konstantin|author2=Emma Hogbin | title=Front End Drupal: Designing, Theming, Scripting|location=Jersey, USA|publisher=Prentice Hall|date=Apr 2009|isbn=978-0-13-713669-8}}

==External links==
{{Commons category}}
* {{Official website}}

{{Application frameworks}}
{{Software in the Public Interest}}

{{Authority control}}

{{DEFAULTSORT:Drupal}}
[[Category:Drupal| ]]
[[Category:2000 software]]
[[Category:Blog software]]
[[Category:Cross-platform software]]
[[Category:Free content management systems]]
[[Category:Free software programmed in PHP]]
[[Category:PHP frameworks]]
[[Category:Software using the GPL license]]
[[Category:Web frameworks]]
[[Category:Website management]]
[[Category:Web development software]]