Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
2 Sep 2011 at 23:44 UTC
Updated:
13 Apr 2012 at 18:41 UTC
The AllForGood module provides a simple interface, in the form of a Drupal block, to automatically retrieve and display search results from the AllForGood volunteer opportunities search engine at http://allforgood.org/ . A link to the sandbox project is here. You should be able to grab my code with "git clone --branch 6.x-1.x forestmonster@git.drupal.org:sandbox/forestmonster/1251324.git allforgood". This project is for Drupal 6, although a Drupal 7 version is in the works. Thanks!
Reviews of other projects
Diceware
Deep Survey
Anonymous File Sharing
Comments
Comment #1
forestmonster commentedAdjusted priority in accordance with the application review timelines.
Comment #2
jthorson commentedQuick scan looks pretty good.
Comment #3
jthorson commentedComment #4
forestmonster commentedThanks a lot for the review Jeremy -- taking a look at your suggested changes now.
Comment #5
forestmonster commentedJeremy I made your suggested changes. I already had a pretty safe approach to the HTML returned from AllForGood, running the title through PHP's
strip_tags, and the URL through Drupal'scheck_url, but I appreciated your comment anyway because, of course, Drupal'sfilter_xssis much cooler than plain ol'strip_tags.Comment #6
jthorson commentedI'd suggest the theming implementation could still use a bit more cleanup:
You define a theme hook, but don't have a theme_allforgood_results function ... and I don't see anything that would tie in your tpl.php file.
Otherwise, things generally look pretty good.
Comment #7
forestmonster commentedThanks Jeremy -- I was actually planning on delaying the full theme implementation. Would that block the module's approval, in your opinion? At this point I'm just playing the "developer, not a designer" card!
Comment #8
klausiComment #9
forestmonster commentedYeah! Thanks for the comments klausi. I've updated the project page and will address these other issues as well.
Comment #10
misc commented@forestmonster has been contacted to ask if the application is abandoned.
http://drupal.org/node/894256
Comment #11
forestmonster commentedHmm. Nope, not abandoned, MiSc. I guess I'm surprised... you didn't see my commits with fixes from last week?
Comment #12
misc commentedThe application has been marked as need work since October. Doing commits on a sandbox project is not the same as wanting a review for full project access. If you want us to review it, you must mark it 'needs review'.
Comment #13
forestmonster commentedMiSc, marking this "Needs review."
Comment #14
forestmonster commentedYep, I would like a review for this very simple module. I've put it through the online version of the pareview script, and I'm following the application review timelines.
I'm not quite sure what to do to improve our review process. But... thank you for your time anyway. Can we move this forward?
Comment #15
klausiThe response time for a review is now approaching 4 weeks. Get a review bonus and we will come back to your application sooner.
Comment #16
forestmonster commentedFair enough... Thank you klausi.
Comment #17
mkadin commentedGood stuff, this module looks pretty darn close to perfect to me. PAReview.sh throws no errors and the code seems to be well documented / well organized.
Two small notes:
1) I don't think its proper to have tags inside t(''). See http://api.drupal.org/api/drupal/includes%21bootstrap.inc/function/t/7#c... for how to insert a link into translatable text. You're doing this on line 56 in a Form API '#description'
2) Your module relies on the simple XML extension to PHP and it doesn't mention this on either the project page or in README.txt. If the error is thrown because the user doesn't have the function to parse the XML response. The error reads: 'No simplexml_load_string() function present.' Which wouldn't be very informative for a user who doesn't have this extension on, but doesn't know about php modules / doesn't know that specific one. I'd note that your module requires it in the README or on the project page and update the error message to say that not having that php extension may be the cause of the problem.
Other than that it looks good!
Comment #18
forestmonster commentedMichael, thank you. If these are the most important things to fix, this module must be pretty much ready for final approval.
Line 56 looks okay to me:
Since from http://api.drupal.org/api/drupal/includes%21common.inc/function/t/6 :
Regarding SimpleXML, when you use Drupal's recommended PHP version, the SimpleXML extension is enabled by default. I've updated the project page, the README file, and the .info file to reflect this, and made the error more descriptive as you recommended.
Comment #19
mkadin commentedJease, if I'm going to be nit picky I should at least get it right! ;) I didn't know there was exception for a tags within t('') but it makes sense to me.
I'm marking this RTBC but someone with real git powers will have to come knight thee.
Comment #20
forestmonster commented@mkadin, that's okay -- thank you for your comments.
Comment #21
klausimanual review:
Comment #22
forestmonster commentedThank you for the review Klausi. I made these recommended changes.
Comment #22.0
forestmonster commentedDownload the 6.x-1.x branch, not the master. The "master" branch is empty now in accordance with Klausi's recommendations.
Comment #23
forestmonster commentedAdding a "review bonus" tag after completing three reviews of other projects in the queue, and adjusting priority in accordance with the application review timelines. Thank you.
Comment #24
forestmonster commentedOnline version of PAReview script results: http://ventral.org/pareview/httpgitdrupalorgsandboxforestmonster1251324g...
Comment #25
klausiCool, looks RTBC to me. Removing review bonus tag, you can add it again if you have done another 3 reviews of other projects.
Comment #26
patrickd commentedDid a basic functionality check and code looks also good for me.
One point I found is that you maybe should use some other function name for your admin settings as (I can't remember where it was) it could be invoked with something like hook_admin(). Generally forms are suffixed with _form, so maybe you make that small change just to be sure.
Thanks for your contribution and welcome to the community of project contributors on drupal.org!
I've granted you the git vetted user role which will let you promote this to a full project and also create new projects as either sandbox or "full" projects depending on which you feel is best.
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
As you continue to work on your module, keep in mind: Commit messages - providing history and credit and Release naming conventions.
Thanks to the dedicated reviewer(s) as well.
Comment #27.0
(not verified) commentedUpdated issue summary, adding review bonus application comments.