Closed (won't fix)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
23 Jun 2011 at 12:01 UTC
Updated:
31 Aug 2012 at 10:28 UTC
MobStac Drupal module is achieves the following
Project Page http://drupal.org/sandbox/shivanshtyagi/1147626
Comments
Comment #1
ParisLiakos commentedComment #2
gregglesPlease take a moment to make your project page follow tips for a great project page.
Please take a moment to make your README.txt follow the guidelines for in-project documentation.
mobstac.info seems like a mistake that should be removed.
Is admin/mobstac/mobstac_drupal for admin users or anyone? Currently the access callback lets anyone see it which doesn't seem to make sense with the prefix of "admin" in the URL.
Two thoughts on this code:
1. It probably shouldn't be wrapped in t() - t is for translating user interface text, not whole pages and not html.
2. You could use url to build the src attribute to protect against cross site scripting.
The administration menu callback should probably use "administer site conifguration" - which implies the user can change something - rather than "access administration pages" which is about viewing but not changing configurations.
On the form #description you should use the t() function and use double quotes instead of single quotes so you don't have to escape the '. Escaping single quotes makes it harder to translate strings.
Overall the module has very few comments. It would be great to get more comments.
http://drupalcode.org/sandbox/shivanshtyagi/1147626.git/blob/refs/heads/... looks like 3rd party code that may not be appropriately licensed. See http://drupal.org/node/66113 for why Drupal doesn't allow that code into git. You'll probably have to remove it and direct your users in how to download it (or use drupal_json instead?).
Comment #3
misc commentedThe applicant has been contacted to ask if the application is abandoned.
http://drupal.org/node/894256
Comment #4
shivanshtyagi commentedThe project has not been abandoned and still needs review. We have made changes to the module and uploading the new code.
Comment #5
gregglesHi shivanshtyagi - the latest code on drupal.org is from June 23, but my review was in October. Can you upload the latest code and describe how you addressed the issues in my review?
When you do that please change the status back to needs work.
Comment #6
misc commentedStill not any update in the git repo. Could you please upload the updated code and then switch to need review?
Comment #7
misc commentedComment #8
klausiClosing due to lack of activity. Feel free to reopen if you are still working on this application.