- install drupal modules/themes as root:daemon rather than www:www
(only the files/ directory needs to be writeable by 'www').
- don't install 'settings.php' world-readable since it contains the
DB password. Use 640, owner 'www' instead.
- bump all modules.
tested in production, including upgrade szenarios.
ok sthen@ and landry@, maintainer timeout.
On 404 Not Found error pages, Drupal will skip rendering of several
pieces of your website for performance reasons. This module simply
revives those features on 404 pages to show lost users how to get
to real pages.