Paranoia

The Paranoia module identifies most places where the user can execute the PHP code using the Drupal interface and then blocks them. This reduces the potential threat resulting from the attacker gaining high-level authorization in Drupal.

What does the module do?

• Blocks the grant of the use of PHP for block visibility permission.
• Blocks the ability to create text formats that use the PHP filter.
• Blocks the ability to edit the user account with uid 1.
• Blocks granting the permissions that may reduce the website security.
• Blocks disabling this module. To disable it, you need to edit the database.

In order to take full advantage of this module, you need to identify all the entities, fields, and blocks that use the Drupal PHP filter and change them so that they work without it, and then remove the standard PHP filter available in admin/config/content/formats.