Jump to:
| Project: | Blogroll |
| Version: | master |
| Component: | Code |
| Category: | task |
| Priority: | critical |
| Assigned: | Unassigned |
| Status: | closed (fixed) |
Issue Summary
I've ported blogroll to run on Drupal 5, and added various check_plain() and check_uri() checks to improve security.
I've also removed the possibility to poll blogrolls from an external location, as I don't think that many users needed that feature, and it would have needed additional rewriting to work, plus(for security reasons) some new code for proper input validation.
Note that this still needs work, because there is no .install file whatsoever. Still, the instructions are updated and everything should work, so this shouldn't be that bad problem.
The module also currently tests that the (non-aliased) URL begins with “blog”, which prevents showing it on individual blog nodes. To fix this a new loop would be required that would test whether it is node/xxx, and if true, load that node and check if it is of type blog. Perhaps I'll implement that in the future.
| Attachment | Size |
|---|---|
| blogroll_drupal5.patch | 22.7 KB |
Comments
#1
What do you mean by "prevents showing it on individual blog nodes"? Do you mean that this would not show on individual user blogs?
Is it possible if you post the full package as a zip file? I do not have a patch program and the changes are too many to manually edit... thanks
#2
Just took over this module and starting with Drupal 6 support only