Question

Drupal uses every technique to make webisite safe. But what mistakes, while programming will make drupal weak so that I can avoid them while writing custom modules or making .tpl files.

Answer 1

I’m not sure there’s a list of all mistakes, but here’s a list of what to do right that includes some mistakes:

• Secure configuration for Drupal sites
• Writing secure code which is also valuable to understand so you can audit the modules you install.
• Cracking Drupal the only book about security in Drupal, which is available in physical or Kindle versions (disclosure: I’m the author ;))