Closed (fixed)
Project:
Secure Site
Version:
7.x-2.x-dev
Component:
Code
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
1 Jan 2011 at 01:32 UTC
Updated:
12 May 2014 at 18:26 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #1
rhache commentedI'd love to see this for D7. Super useful.
Thanks
Comment #2
darren ohThis has been a low priority for me because I haven’t been able to use it on any of my projects. However, I am interested in turning this into an alternative to using cookies for authentication.
Comment #3
simeWould you accept a straight D7 patch first?
Comment #4
simeCommit access also welcome, with the understanding I'd just be working on the D7 branch for a week or so.
Comment #5
darren ohA Drupal 7 patch would be welcome. I was just talking about what I was interested in working on. For some reason I thought you already had commit access. I’ll be happy to give it to you.
Comment #6
darren ohsime is now a maintainer.
Comment #7
simeThanks Darren!
Comment #8
simeDRUPAL-7--2 branch created.
Coding standards, spaces around concatenation
http://drupal.org/cvs?commit=477542
http://drupal.org/cvs?commit=477544
Comment #9
simeCoding standards, spaces around concatenation
http://drupal.org/cvs?commit=477554
Comment #10
simeHere's the first pass at it. It's not stable, just posting my current changes here because I might not get a chance for a couple of days. I decided not to commit what I'd done straight away as it isn't in a usable state.
Note, the patch doesn't include the rename of
securesite-user-login.tpl.phptosecuresite-user-login-form.tpl.phpdue to a namespace collision at the form level (hook_user_login conflicts).Anyway, last thing I was working on was the login form.
Comment #11
simeI've made a dev release for drush/etc convenience.
Comment #12
simeOh damn CVS. Commit without a message after I didn't abort properly :(
http://drupal.org/cvs?commit=478242
Here's what the message was *supposed* to be...
Comment #13
cwrstl commentedsime - Thanks for getting this ball rolling. Is the current dev in CVS usable yet, or does it still need work?
Comment #14
simehi @cwrstl - it installs but doesn't work properly. The job is half finished basically.
Eg. I get a popup password window in Firefox but not in Safari. And the theming code of the login form isn't quite right. A lot of things are identified in the test results.
I've been sick the last week and this threw out my schedule, so I don't know when I will be able to get back to this. But it's definitely closer to being finished.
Comment #15
Rosamunda commentedI get nothing. Not in Firefox, not even in Chrome.
I get a white screen with a grey rectangle with rounded corners.
Comment #16
ogi commentedsubscribe
Comment #17
brainiac commentedsubscribe
Comment #18
tronathan commentedsubscribarino
Comment #19
MGParisi commentedsubscribe
Comment #20
socialtalker commentedsubscribe
Comment #21
anthonyR commentedsubscribe
Comment #22
rovosubscribe
Comment #23
boombatower commentedso much fun, subscribe
Comment #24
anavarreSubscribe
Comment #25
basicmagic.net commentedsubscribe
Comment #26
Anonymous (not verified) commentedsubscribing
Comment #27
BenK commentedSUbscribing
Comment #28
rovoIt's pretty laughable that there was never a function made that allows us to just subscribe to a post, rather than having to fill it with 'subscribe' tags...
Comment #29
boombatower commented#28: note the ChipIn http://drupal.org/project/project.
Comment #30
Seph commentedsubscribe
Comment #31
vegardjo commentedsub..
Comment #32
Slovak commentedSubscribe
Comment #33
dddave commentedsub
Comment #34
dwalker51 commented+1
Comment #35
Branjawn commentedsub
Comment #36
Donaldd commentedsubscribing
Comment #37
netsensei commentedOkay. Subscribing.
This has been open for the last 6 months. Any idea if there is time in the near future to put a 7.x-dev git branch up? At least, if someone is interested in contributing patches to speed things up, it would make things a lot easier.
Comment #38
tronathan commentedsubscribing
Comment #39
8thom commentedsub
Comment #40
chriz001 commentedSubscribe
Comment #41
tars16 commentedSubscribe
Comment #42
chriscalip commentedsubscribe to chip-in reply :)
Note to self : secure site d7.
Comment #43
j0nathan commentedSubscribing.
Comment #44
cwrstl commentedsubscribing
Comment #45
Macronomicus commentedThere is a 7.x branch in there (Last update Feb 25, 2011) http://drupal.org/node/21470/release
I tested and it seemed to be quite buggy and crashed my site.
Comment #46
mgiffordDid you report any of the errors? Could you run it through Coder?
Comment #47
jonathan_hunt commentedAdding HTTP headers has changed in D7 (see http://api.drupal.org/api/drupal/includes--bootstrap.inc/function/drupal...). Attached is a patch that correctly triggers browser HTTP Auth dialog in Safari, Chrome and Firefox (other browsers not tested).
Comment #48
boombatower commentedFor those looking for something in D7 there is also http://drupal.org/project/shield as of a few days ago that seems is much simpler, but does not use user credentials.
Comment #49
CryptKeeper-1 commentedNewbie here...is this module usable with the patches installed?
just tried it without and it seemed like a successful install from the admin menu, changed various settings, etc. then logged out and got a grey rounded rectangle on a mac and PC in Safari and Chrome. switched to IE on the PC and was able to get a username/password prompt, but user1 credentials were not accepted into the popup.
had to manually delete the mod using ftp to get back into the site.
Comment #50
kclarkson commentedDoes this last patch need to be added to make a 7 development release?
This is a great module and the best solution for making sites private during the staging phase. Based on the amount of downloads I am surprised this isn't done for 7 yet.
@boombatower
Thanks for the Shield suggestion. I will use it for now but would prefer Secure Site as it provides a few more features.
Comment #51
dtarc commentedThe patch is #47 was made from a couple directories up. Rerolling...
Comment #52
dtarc commentedWith the patch in #51, the module doesn't seem to work in Chrome for Mac. It blocks the site with a user/pass popup but does not provide access once the creds are correctly entered.
Comment #53
dtarc commentedI think the issue is that user_authenticate_finalize() is being called but it's D6 only (not in D7).
http://api.drupal.org/api/drupal/modules--user--user.module/function/use...
Comment #54
deville commentedCheck out: http://drupal.org/project/shield
Comment #55
cossimo commentedSubscribe, yo...
Comment #56
sdoyle commentedAll i get is the gray box with HTML login form and for HTML Basic it never recognizes valid user credentials. This is for Drupal 7. I've attempted to apply the patch manually by vi the file, but it seems to break it. Can someone provide better instructions on editing that file? There must be a solution for Drupal 7 that provides a login form of some sort before granting access to the site (like with http basic auth). Without this, anonymous users have too much access, including views of menu links with many themes. Shield does not work for this issue. Does anyone have a working example, including a securesite.inc they can post?
Comment #57
quantos commentedFollowing. Would love to use this through beta-testing of new sites, screening out the public while my registered clients/contacts test the site. I'll check out project/shield meantime but any feedback to help with this specific closed beta-testing scenario would be appreciated. Thanks.
Comment #58
simeI don't see anyone working on the D7 branch for 18 months (since my initial port). So I'm going to give it a friendly title.
Comment #59
portulaca+1
Comment #60
decipheredI had to really try to hold back from doing a complete re-write, but I just don't have the time to do that anyway.... probably... but either way, here's an updated patch that fixes a ll the issues that I found and that where causing the module to be unusable for me.
Let's make a push to get a stable released ASAP!
Comment #61
decipheredForgot to attach the patch :/
Makefile snippet to use this patched version:
Comment #62
decipheredLast minute typo got in, re-roll of the patch coming very shortly.
Comment #63
decipheredFixed patch, also incorporates patches from, so credit to the authors there.
- http://drupal.org/node/1339938
- http://drupal.org/node/1423620
- http://drupal.org/node/1528012
Makefile snippet:
Comment #64
mgiffordJust looked at the version control info here - http://drupal.org/project/securesite/git-instructions
Which should this patch be applied to?
Comment #65
decipheredThis should be applied to 7.x-2.x, however I now have commit access and I will start committing some code shortly so that we can really make a push to get a stable release out ASAP.
Comment #66
simeHey Deciphered, was going to look at the patch, but I only got as far as fixing my localhost after an osx upgrade last night. But if you have commit access then I guess problem solved in the short term :)
Comment #67
decipheredA bunch of commits have been made, going to mark this issue as Fixed so that we can focus on individual issues that pop up instead of having one big issue.
Comment #69
marc angles commentedHi, Just installed this module and I have this problem. Redering the usage of this module unusable...
Did I missed something or the patch was not committed ?
Fatal error: Call to undefined function i18n_selection_mode() in [...]/modules/securesite/securesite.inc on line 313Comment #70
marc angles commentedI reopen the issue. sorry.oopsComment #71
marc angles commented