Coder is another popular module and allows Drupal administrators to check their code against various coding standards and best practices.

Drupal patched a series of highly critical remote code execution bugs in three separate modules today that could let an attacker take over any site running the modules.

As long as Drupal site builders are sticking to general best practices—using well-trodden contributed modules, not "hacking core" (making modifications to Drupal core/contributed files), and ...