DDEV is a powerful tool that simplifies the process of setting up local development environments for PHP applications, including Drupal. In this guide, I'll walk you through the steps to install DDEV and configure a Drupal development…

Sichere Programmierung dev.to 24.03.2026, 23:40 Uhr 2 Min. Lesezeit Cloud & IT-Enterprise

↗ Quelle (dev.to)

Reagiere als Erste:r — dein Feedback zählt!

STANDARD — Regulärer Patch-Zyklus ~2 Min. (322 W.)

Deep Tech

Setting Up a Drupal Development Environment with DDEV DDEV is a powerful tool that simplifies the process of setting up local development environments for PHP applications, including Drupal.

Angriffsfläche

Kubernetes / Container

Exploit-Status

Geringe Ausnutzungswahrscheinlichkeit / Keine aktiven Kampagnen

Sofortmaßnahme

Asset-Inventar prüfen & Upstream-Advisory überwachen

DDEV is a powerful tool that simplifies the process of setting up local development environments for PHP applications, including Drupal. In this guide, I'll walk you through the steps to install DDEV and configure a Drupal development environment.

Requirements:

DDEV

Docker

Once you have this, create your Drupal project directory:

mkdir drupal-site

Into your directory run:

composer create-project drupal/recommended-project:^9 .

At the moment I created this project, running composer create-project drupal/recommended-project . automatically would download Drupal 10, which requires PHP version ">= 8.3.0". This would trigger a fatal error:

Fatal error: Composer detected issues in your platform: Your Composer dependencies require a PHP version ">= 8.3.0". You are running 8.1.27. in /var/www/html/vendor/composer/platform_check.php on line 24

because the DDEV container has an older PHP version. That’s why I explicitly asked for Drupal 9 in the command.

Next, configure DDEV:

ddev config

You will be prompted with some options. Select your project name, docroot location, and then the project type. You’ll see options like:

Project Type [backdrop, craftcms, django4, drupal10, drupal6, drupal7, drupal8, drupal9, laravel, magento, magento2, php, python, shopware6, silverstripe, typo3, wordpress]

In this case, I selected drupal9. After that, run:

ddev start

You will see a success message with the URLs to access your Drupal project: Project can be reached at https://drupal-site.ddev.site https://127.0.0.1:52810

Open your chosen browser and finish the Drupal installation.

Simple as that!

DDEV can be used for a wide variety of PHP-based CMSs, such as WordPress. You can follow a similar process; check out this article: Setting up a WordPress development environment with DDEV

.

What is your favorite tool for local PHP development? From my experience with a wide variety of setups over the years, DDEV has proven to be an amazing solution for teams. It simplifies versioning, collaboration, and later establishing deployment pipelines, making development smoother and more predictable.

Leave your comment below. I’d love to hear your thoughts!

1. Sofort-Triage & Abwehrmaßnahmen

IR-PLAYBOOK-VULN-REMEDIATIONMEDIUM

Schritte anzeigen

SOC Incident Playbook: Vulnerability Remediation & Verification

Asset Inventory

Asset-Datenbank nach betroffenen Komponenten, Versionen und exposed Ports abfragen.

nmap -sV --script vuln -p- <target-network>

Exploit MonitoringSofort

SIEM-Regeln und IDS-Signaturen (Snort/Suricata) auf Angriffsversuche schärfen.

tail -f /var/log/suricata/fast.log | grep <cve>

Patch DeploymentSofort

Patch oder offiziellen Workaround gemäß Hersteller-Empfehlung einspielen.

Check Vendor Security Advisory Bulletin

1-Click Detection Engineering: Multi-Dialect SIEM Rules5 Formate

Regeln anzeigen

Syntax validiert (0 Fehler)

title: Detect Exploitation - Setting Up a Drupal Development Environment with DDEV
id: f7ce513c-1192-48cd-8554-e3ebf71cf6f4
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

Syntax validiert (0 Fehler)

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "Setting Up a Drupal Developmen" ascii wide
    condition:
        any of them
}

Syntax validiert (0 Fehler)

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Setting Up a Drupal Development Environm")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

Syntax validiert (0 Fehler)

message: "*Setting Up a Drupal Development Environm*"

Syntax validiert (0 Fehler)

CommonSecurityLog
| where Message has "Setting Up a Drupal Development Environm"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

🎯

MITRE ATT&CK Matrix Navigator 14 Taktiken

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

💡 Tipp: Klicken Sie auf eine TTP, um Gegenmaßnahmen und SIEM-Erkennungsregeln anzuzeigen.Enterprise Matrix v14.1

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 3 Min

crt.sh Has a Free API — Find Every SSL Certificate for Any Domain (With Python)

Sichere Programmierung

NÄCHSTER BEITRAG 1 Min

E-Mail-Konten bleiben für Hacker das leichteste Ziel () | aktiencheck.de

Hacking & PentestingWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Setting Up a Drupal Development Environm.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC

Schnell-Prompts für Analysten

⚠️ DEFANGED SANDBOX VIEW (tsecurity.de): Alle Netzwerkindikatoren und URLs wurden neutralisiert (2 Indikatoren entschärft). Nur zur defensiven Analyse!

Format: python

#!/usr/bin/env python3
# Exploit Title: PoC for Target
import socket, sys
target = '192[.]168[.]1[.]10'
url = 'hxxp://target[.]local/vuln'
s = socket.socket()
s.connect((target, 80))
s.send(b'GET / HTTP/1.1\r\nHost: target.local\r\n\r\n')

Auch interessante Nachrichten Setting Up a Drupal Development Environment with DDEV

Thematisch verwandte Begriffe: Setting, Drupal, Development, Environment · 6 Treffer

Sichere Programmierung DEV Community

I created a catalog with embeds for your projects 💎

vor 6 Tagen 📆 20.09.2026 um 00:00 Uhr

Weiterlesen ↗

IT Security Video Chaos Computer Club - last 1

Build Europe's Fediverse Video Infrastructure - Aufbau 1 europäischen Fediverse-Videoinfrastruktur (DS2026)

vor 6 Tagen 📆 19.09.2026 um 00:00 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

I Built Shree AI OS — A Deterministic AI Runtime for Java 21

vor 5 Tagen 📆 20.09.2026 um 08:20 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

Modern GLSL Shader Development in Zed & VS Code: Zero Setup, Real-Time Diagnostics

vor 5 Tagen 📆 19.09.2026 um 23:41 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

Introducing mvnex v0.1.0: A Native CLI for Faster Maven Workflows

vor 6 Tagen 📆 20.09.2026 um 01:54 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

A self-hostable AI workstation with a coding agent and answer-checking (Flywheel 1.0.1)

vor 6 Tagen 📆 20.09.2026 um 01:50 Uhr

Weiterlesen ↗

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

🚀 Auf tsecurity.de entdecken

Kommentare über Setting Up a Drupal Development Environment with DDEV

💬 Social News Network

Community Debatte 0 Beiträge

Tags:Noch keine Tags.

Noch keine Diskussion eröffnet

Sei der Erste, der seine Einschätzung oder PoC zu diesem Thema teilt.

🚀 Auf tsecurity.de entdecken

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

Setting Up a Drupal Development Environment with DDEV

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten Setting Up a Drupal Development Environment with DDEV

I created a catalog with embeds for your projects 💎

Build Europe's Fediverse Video Infrastructure - Aufbau 1 europäischen Fediverse-Videoinfrastruktur (DS2026)

I Built Shree AI OS — A Deterministic AI Runtime for Java 21

Modern GLSL Shader Development in Zed & VS Code: Zero Setup, Real-Time Diagnostics

Introducing mvnex v0.1.0: A Native CLI for Faster Maven Workflows

A self-hostable AI workstation with a coding agent and answer-checking (Flywheel 1.0.1)

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

Setting Up a Drupal Development Environment with DDEV

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

Mehr aus dieser Kategorie

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten Setting Up a Drupal Development Environment with DDEV

I created a catalog with embeds for your projects 💎

Build Europe's Fediverse Video Infrastructure - Aufbau 1 europäischen Fediverse-Videoinfrastruktur (DS2026)

I Built Shree AI OS — A Deterministic AI Runtime for Java 21

Modern GLSL Shader Development in Zed & VS Code: Zero Setup, Real-Time Diagnostics

Introducing mvnex v0.1.0: A Native CLI for Faster Maven Workflows

A self-hostable AI workstation with a coding agent and answer-checking (Flywheel 1.0.1)

tsecurity.de App