Closed (won't fix)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
20 Dec 2011 at 08:36 UTC
Updated:
21 May 2018 at 08:14 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #1
muneer1st commentedIt seems you need to work more on "Severity minor, Drupal Commenting Standards, Internationalization, Drupal Security Checks, Drupal SQL Standards, Drupal Coding Standards". Please run your code through the Coder and other online tools before submitting. Please consider the following report.
The below test was taken using online, automated PAReview tool.
sites/all/modules/pareview_temp/test_candidate/acobot.module:
+100: [critical] Using eval() or drupal_eval() in your module's code could have a security risk if the PHP input provided to the function contains malicious code.
Status Messages:
Coder found 1 projects, 1 files, 1 critical warnings, 0 warnings were flagged to be ignored
FILE: ...areview/sites/all/modules/pareview_temp/test_candidate/acobot.admin.inc
FILE: ...-pareview/sites/all/modules/pareview_temp/test_candidate/acobot.install
FILE: ...7-pareview/sites/all/modules/pareview_temp/test_candidate/acobot.module
See the attached file for full report.
Comment #2
acobot commentedAll errors are fixed.
For the eval() or drupal_eval() warning, implements followed
http://drupal.org/node/715010
Comment #3
patrickd commentedEven if your code is still in sandbox you should have a detailed description about the functionality on the project page (see documentation at http://drupal.org/node/632262).
Your commits are not very informative. Please be more detailed on your changes (see http://drupal.org/node/52287).
Also your readme is not very informative. How to use? How to install ? requirements? What about configuration?
If you don't want to give help - don't implement it ;-)
further reviews will follow.
regards
Comment #4
acobot commentedUpdated based on the advice.
Comment #5
patrickd commentedWe do really need more hands in the application queue and highly recommend to get a review bonus so we can come back to your application sooner.
Comment #6
novalnet commentedHi,
Manual Review :
1. Please avoid using HTML inside t() in acobot.module line 74.
2. Also use l() to create link markup, avoid creating by your own.
3. Please enclose l() with t(), so that it becomes translatable in acobot.admin.inc line 24 and in all other places.
4. acobot_requirements() is an installation hook and must be declared in an install file
5. It seems your code contains some validation errors.So please PAREVIEW your code.
Thanks,
Comment #7
acobot commentedFixed the coding style. Thanks for the review.
Comment #7.0
acobot commentedReview info added.
Comment #7.1
acobot commentedReview info added.
Comment #8
acobot commentedAdded tag: PAReviews: review bonus as outlined on http://drupal.org/node/1410826
Comment #9
patrickd commentedI'm afraid I've to remove that tag because two of your reviews are mostly lining out what an automated review will tell you.
Please do manual reviews as described (#1410826: [META] Review bonus)
Comment #10
misc commentedHere is a short manual review:
Comment #11
klausiClosing due to lack of activity. Feel free to reopen if you are still working on this application.
Comment #11.0
klausiReview info added.
Comment #12
avpaderno