# Identifying and avoiding harmful Drupal modules

> Check Drupal modules before you install them and avoid the types, such as image and logging modules, that often hurt performance or security.

Source: https://helpcenter.ruachost.com/apps/drupal/identifying-and-avoiding-harmful-drupal-modules/

While most Drupal modules are safe and useful, some can negatively affect your site’s **performance, stability, or security**. On **ruachost.com**, it’s important to carefully evaluate modules before installing them.

## General Recommendations

- **Check reputation** → Research online reviews and community feedback. Avoid modules with consistently negative reviews or no reviews at all.
- **Search for issues** → Use keywords like *“module issues”*, *“module performance”*, or *“module security”* when investigating.
- **Look for alternatives** → If a module seems suspicious, there is often another with similar functionality but better support.

## Common Types of Harmful Modules

### 1. Image Manipulation Modules

- These allow cropping/resizing images directly on the server.
- Problem: Large image processing can overload server processors.
- Recommendation: Resize images locally before uploading.
- ✅ Exception: Modules that optimize images **once at upload** are generally safe.

### 2. Related Post/Product Modules

- These suggest related content or products.
- Problem: Some modules generate new lists **every page load**, slowing performance.
- Recommendation: Use modules that **pre‑process and cache** related content.

### 3. Audit Logging Modules

- These log every activity into the database.
- Problem: Excessive logging creates huge tables, slowing down the site.
- Recommendation: Log only essential data and purge old logs regularly.

## Important Notes

- Harmful modules are not necessarily malicious, they are often just poorly designed.
- Always test modules on a **staging site** before deploying to production.
- Keep Drupal core and modules updated to minimize vulnerabilities.