Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
9 Feb 2012 at 16:12 UTC
Updated:
16 May 2012 at 09:30 UTC
A module providing a block with password-examples generated by the diceware-philosophy.
Projectpage: http://drupal.org/sandbox/migmedia/1434214
git clone http://git.drupal.org/sandbox/migmedia/1434214.git
Target: >= drupal-7.x
Reviews of other projects:
http://drupal.org/node/1442482#comment-5643420 (slide_ad)
http://drupal.org/node/1442482#comment-5750730 (slide_ad)
http://drupal.org/node/1459142#comment-5820852 (rss_itunes)
Comments
Comment #1
phoenix commentedHi
Looks like a nice little module.
I did a review. Please work on the following things:
- Add this git command to your application: git clone http://git.drupal.org/sandbox/migmedia/1434214.git dice ware The one you provide isn't really working.
The automated PAReview has found some issues:
Use this link if you want to re-run the test yourself: http://ventral.org/pareview/httpgitdrupalorgsandboxmigmedia1434214git
It appears you are working in the "master" branch in git. You should really be working in a version specific branch. The most direct documentation on this is Moving from a master branch to a version branch. For additional resources please see the documentation about release naming conventions and creating a branch in git.
Review of the master branch:
This automated report was generated with PAReview.sh, your friendly project application review script. You can also use the online version to check your project. Get a review bonus and we will come back to your application sooner.
Source: http://ventral.org/pareview - PAReview.sh online service
Comment #2
migmedia commentedThanks for review.
Now I've niced the code to obey the Drupal coding standards (http://ventral.org/pareview/httpgitdrupalorgsandboxmigmedia1434214git-7x-1x).
git clone http://git.drupal.org/sandbox/migmedia/1434214.git
Comment #3
chrisroane commentedMANUAL REVIEW
--------------
I installed and enabled the module without a problem, and verified the block shows up.
1. .module line 124: I think the error meant to say that the "file is not found"?
2. _diceware_contents(): Doesn't it make more sense to first check if the file exists?
3. .module line 115: It seems that using a static value for the number of lines in the files is asking for problems later on. Can't you determine the number of lines in the file via programming? This makes it much easier if the file gets updated, or if the language files end up having a different number of lines.
AUTO REVIEW
------------
- No errors from Coder or the online PAReview utility.
Comment #4
nmudgal commentedComment #5
migmedia commented@chrisroane thanks for your review.
counting the lines would costs to much. The wordlists are included in the module, so the error-potential
is marginal. - won't fix
Comment #6
forestmonster commentedManual review... This is an interesting idea for a module. It seems like a great way to educate users on choosing passphrases -- and perhaps you could make this an opportunity to teach them a bit more about Diceware's easy-to-use method.
diceware.info, there's a small typographical error; instead ofdescription = Shows a block with sample passwords based on a the <a target="_blank" href="http://world.std.com/~reinhold/diceware.html">diceware-philosophy</a>., I would suggestdescription = Shows a block with sample passwords based on the <a target="_blank" href="http://world.std.com/~reinhold/diceware.html">Diceware method</a>.diceware.info, the "package" property should be removed. "In general, this property should only be used by large multi-module packages... All other modules should leave this blank."Comment #7
migmedia commented@forestmonster
Thank you for your review and your remarks.
Micha
Comment #8
migmedia commentedComment #8.0
migmedia commentedgit link corected
Comment #8.1
migmedia commentedFirst reviewed-module added.
Comment #8.2
migmedia commentedreviews with comment-link.
Comment #9
migmedia commentedApplying "major" priority as described in http://drupal.org/node/539608
Comment #10
alesr commented- I suggest that you name the block "Sample passwords" -> "Diceware sample passwords" to find it easily between all blocks if you have it a lot.
- Please say more in README.txt about how to use this module. (Install -> Go to blocks -> Enable (Diceware) Sample password).
- I also see some coding standard issues in your code:
Like non-capital letter comment, indentation.
- use l() function for the links in code:
"Find more infos about the <a target=\"_blank\" href=\"http://world.std.com/~reinhold/diceware.html\">" .Comment #11
migmedia commentedOk,
configurationlink to .info-Filel()function for the block-description. The site-admin can change this at the block-config in a text box.@alesr Thank you for your review.
micha
Comment #12
scot.hubbard commentedA simple and fairly cleanly coded module. There are still a couple of very minor coding standards issues, based around indentation, but these are mainly where line-concatenation has been used.
The module installed and uninstalled cleanly, and worked as expected while enabled.
Comment #13
klausimanual review:
But that are just minor issues, so ...
Thanks for your contribution, migmedia! Welcome to the community of project contributors on drupal.org.
I've granted you the git vetted user role which will let you promote this to a full project and also create new projects as either sandbox or "full" projects depending on which you feel is best.
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
As you continue to work on your module, keep in mind: Commit messages - providing history and credit and Release naming conventions.
Thanks to the dedicated reviewer(s) as well.
Comment #14
migmedia commentedThanks @klausi
I have changed the mentioned hints and promoted diceware to a full project.
http://drupal.org/project/diceware
Thanks to all reviewer!
Micha
Comment #15.0
(not verified) commentedReview added