This module provides a set of tools for securing your site.

Currently done:

  • Disables the attribute "AUTOCOMPLETE" the login form for username and password, and any field "password" for any form of your site.
  • XSS-cleaner body and title of any node.
  • Validates text fields of the nodes, avoiding persistent XSS in database.
  • It provides functions that can be used by other developers to validate form fields and valid AJAX requests
  • Avoid direct access to paths of type node/ID if the node has a URL alias (pathauto).

Link to project page.
This project is for Drupal 6.x now.
A direct link to git repository

CommentFileSizeAuthor
#1 coder.pdf126.99 KBpgogy

Comments

pgogy’s picture

StatusFileSize
new126.99 KB

Hello,

See attached file for coding standards. I'd normally say use ventral.org, but you're repo doesn't seem to work with your git repository (the drupal one).

It appears you are working in the "master" branch in git. You should really be working in a version specific branch. The most direct documentation on this is Moving from a master branch to a version branch. For additional resources please see the documentation about release naming conventions and creating a branch in git.

Hope this helps.

Pat

patrickd’s picture

Please make sure all comments are in english, so other developers can easily participate and reviewers can understand all parts of your code. Also make sure all human readable strings in the module are properly wrapped with t() and are english!

Remove version = "6.x-1.0" from .info it will be added later by the version packaging system later automatically.

As installation and usage instructions are quite important for us to review, please take a moment to make your project page follow the tips for a great project page. Also create a README.txt that follows the guidelines for in-project documentation.

We do really need more hands in the application queue and highly recommend to get a review bonus so we can come back to your application sooner.

mgzrobles’s picture

thank you both for your comments!
I hope to make the changes as soon as you say me, sorry for the mistakes, it's my first project and was not sure of the process...
regards!

mgzrobles’s picture

move to 6.x-1.x branch, refactored with coder and translated

jleiva’s picture

Issue tags: +PAreview: review bonus

Hi, my manual review so far:

patrickd’s picture

@ jleiva
Seems like you missunderstood the sense of the "review bonus" tag, please read https://drupal.org/node/1410826

jleiva’s picture

yes sir, my mistake, thanks for the heads up!

drupwash’s picture

Status: Needs review » Fixed
Issue tags: -PAreview: review bonus

This is good and works perfect.

klausi’s picture

Status: Fixed » Needs review

This issue is not fixed, see http://drupal.org/node/532400

drupwash’s picture

Status: Needs review » Active

Sorry, before posting comments I should read work-flow process. Thanks for giving link.

klausi’s picture

Status: Active » Needs review
cvangysel’s picture

Manual review of your project:

- There's still a master branch in your repository; should should delete it by using the command: git push origin :master
- In securitytools_form_alter you could use some newlines to improve readability; you're also using new lines inconsistently. Check out the coding standards on control structures, your break's aren't indented correctly.
- In ajax.inc, you have the function check_ajax_request ; you shouldn't start your functions with an empty line; that space in your if-clause should also not be there.
- In callback.inc, same comment about control structures; including the spaces in your if-clauses.
- Consider namespacing define('XSS_INTENT', t('Invalid format text')); .
- In validate.inc you have the function validate_node_view and a comment at the end of the body indicating the end of the function; I don't think that's common practice in Drupal; same for validate_node_save , you might also want to clean up your comments there.
- Most functions in the .inc files in your includes directory aren't namespaced correctly, they should start with the internal name of your module.
- Function validate_node_save uses form_set_error but it doesn't seem to get executed in the context of a form.
- In autocomplete_off.js you're not indenting correctly.

cvangysel’s picture

Status: Needs review » Needs work
klausi’s picture

Status: Needs work » Closed (won't fix)

Closing due to lack of activity. Feel free to reopen if you are still working on this application.