Closed (won't fix)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
15 Oct 2012 at 22:58 UTC
Updated:
28 Feb 2014 at 20:37 UTC
Jump to comment: Most recent
Comments
Comment #1
eule commentedComment #2
Ignigena commentedYou're missing a README.txt in the module.
There are quite a few warnings and errors found here:
http://ventral.org/pareview/httpgitdrupalorgsandboxekn331802214git
You should run the coder module and just refresh yourself on the Drupal Coding Standards found here:
http://drupal.org/node/318
Also, it's a good idea to put a direct link to your GIT repository (git clone...) see here:
http://drupal.org/node/1011698
Just a few things that should be fixed before a full review can be made.
Good luck!
Comment #3
Ignigena commentedComment #4
eule commentedthank you
Comment #5
eule commentedplease add if you can again a link with the help for the warnings and errors. i add here the readme.txt and change issue
Comment #6
brajendrasingh commentedPlease add some more description about your project.
Also mention git repositary path in your issue details.
It appears you are working in the "master" branch in git. You should really be working in a version specific branch. The most direct documentation on this is Moving from a master branch to a version branch. For additional resources please see the documentation about release naming conventions and creating a branch in git.
Run coder to check your style, some issues were found (please check the Drupal coding standards).
Drupal Code Sniffer has found some issues with your code (please check the Drupal coding standards).
Comment #7
eule commentedyes i work in the master branch on git...u drupal heros make my live not easyer ;/
will see what i can do! maybe i see someone on the irc chan thats can help...
the "coder" project - i see this is only aviable on drupal 7...to understand..i setup a d7 install and run "coder" here
can i check than d6 modules ???
Comment #8
varunmishra2006 commentedManual Review
In gtm.install and gtm.admin.inc file why used $result = db_query('SELECT * FROM {role} ORDER BY name');
You can use user_roles function .
The README.txt is not proper . Check http://drupal.org/node/161085
The project page is quite messed up. Please add some screen shot and categorized description. see http://drupal.org/node/997024
Online review.
The module failed to meet drupal coding standards. Please fix them. You can use coder module or ventral.org to see errors and warnings. See http://ventral.org/pareview/httpgitdrupalorgsandboxekn331802214git
You are using master branch.You should really be working in a version specific branch.
Comment #9
eule commentedGuys how i can get this to the new branch? i setup in git a new one for .dev release but with this document http://drupal.org/node/1127732 it is not possibel to get a new brach in drupal on a sandbox project.
i can´t change under drupal my versions control, here is only master aviable.
http://drupal.org/project/1802214/git-instructions
Comment #10
eule commentedhello, sorry for the needs review but i need help with the setup for a new branch! i descript my problem here but i get no answer http://drupal.org/node/1819164
the guys on the git chan have no clue about it..so i need help by you drupaler´s
Comment #11
eule commentedSandbox: http://drupal.org/sandbox/ekn33/1802214
Git Clone: ekn33@git.drupal.org:sandbox/ekn33/1802214.git
Drupalcode tree: http://drupalcode.org/sandbox/ekn33/1802214.git/tree
New Branch: https://github.com/ekn33/GTM/tree/6.x-1.x
Version: 6.x
Comment #12
plazik commentedThis module http://drupal.org/sandbox/sgerrand/1809298 seems to be more powerful.
Comment #13
eule commentedi try it.
first. go and use it if u have a d7 install
second..who is the power?
this module here gives u more options! and came up FiRST
Comment #14
eule commentedswitching branch to 6.x-1.x
updating project page
Comment #15
indydas commentedHi there,
Just initially ran your module and this is the results.
There is still a master branch, make sure to set the correct default branch: http://drupal.org/node/1659588 . Then remove the master branch, see also step 6 and 7 in http://drupal.org/node/1127732
http://ventral.org/pareview/httpgitdrupalorgsandboxekn331802214git. Not too many errors if you go to this link.
Comment #16
udaksh commentedHi Eule,
Manual Review :
README.txt is not in proper format.
Usage of t() at line 38 in gtm.admin.inc is incorrect. Use placeholder for passing variables to t() http://api.drupal.org/api/drupal/includes%21common.inc/function/t/6 .
change all db_query() to db_select().
Function documentation is not present for function gtm_footer() in gtm.module .
Your commenting style is incorrect in file gtm.module. You are presently using
/**
*
*/
Please Use
/**
*
*/
and correct similar coding style issues raised by automated review tool.
Thanks
Comment #17
klausiWe are currently quite busy with all the project applications and I can only review projects with a review bonus. Please help me reviewing and I'll take a look at your project right away :-)
Comment #18
eule commentedmaster branch purged
Comment #19
benjy commented@eule, how are you going with this?
Do you need some help finishing it off because I'm keen to use this module.
Comment #20
eule commentedhi, i found one who will help me..so i add a new co-maintainer. i test it a lot and have now troubel with tracking, dunno whats up with the tag manager...i join today the google help forum.
and yes Help is always welcome. looking for someone who can rewrite it for d7.
cheers
Comment #21
eule commentedtracking works again ..lags on tag manager settings
Comment #21.0
eule commentedspelling, my english is not the best
Comment #21.1
eule commentedchanging project name
Comment #22
ain commentedAutomated review of both D6 and D7 branches: all clear.
Manual review of D6 and D7: all fine.
I also tested the D7 module and found a problem. From Google Tag Manager documentation:
Currently the snippet is being added not right after the
<body>tag:It's not likely to affect the functionality, but to keep the high quality of our modules, it's worth to make the correction. Please also check if this is the case on D6 module.
Additional recommendations:
hook_help()to increase UX of the module administration.Generally I think the module is ready for prime time.
NB! Please consider reviewing 3 other projects yourself to get this ticket closure on a fast track.
Comment #23
benjy commentedIt looks like you have a D7 branch in the repo. Have you started work on this? Otherwise let me know and i'll have a look this week.
Comment #24
eule commented@benjy yes the start is alive thanks to drupalrv but if you have some tips let me know please
thanks
Comment #25
benjy commented@eule, i'll give it a look over this week. Do you plan on doing a few reviews to get this module into contrib?
Comment #26
eule commentedi plan to get this module into contrib ..sure....but my coding experience @all not the best, i got the idee and have make the module for my d6 sites without any experience on drupal coding standarts..for me the module was working so i think me i give this to the community. for now i have learned about that git and drupal stuff :)
thats why help / patches always welcome to make it stable for the community
Comment #26.0
eule commentedupd
Comment #26.1
eule commentedreview added
Comment #26.2
eule commentedreview added
Comment #27
eule commentedadding 3 manual reviews for the bonus
Comment #28
klausiDon't forget to add the "PAReview: review bonus" tag as indicated in #1410826: [META] Review bonus, otherwise you won't show up on my high priority list.
Comment #29
eule commented3 manual reviews for the bonus
Comment #30
yannickooYou should remove the author statement from the module file (6.x-1.x, 7.x-1.x).
Comment #31
klausiThat is surely no application blocker, any other issues you found in your manual review?
Comment #32
yannickooOh, he doesn't use filter_xss when getting the variable.
variable_getshould be wrapped by filter_xss.Comment #33
eule commentedThis vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer google tag manager".
Comment #34
klausiRemoving review bonus tag, you have not done any manual review, you just posted the output of an automated review tool. Make sure to read through the source code of the other projects.
And please review applications in the "needs review" state, applications in "needs work" are blocked already and need a maintainer response anyway.
Comment #34.0
klausimanual review added
Comment #35
ain commentedI don't think
filter_xss()should be used forvariable_get()since the latter just fetches the data from the database. There should be no malicious content stored in the first place even if the content shouldn't be mingled with on storage. The general principle should always be to only store valid data.Comment #35.0
ain commentedremoved non-manual reviews
Comment #36
ain commentedAutomated review
Manual review
Not all aforementioned issues have been resolved.
Comment #36.0
ain commentedmanual review
Comment #36.1
eule commentedsecond manual review
Comment #36.2
eule commented3´te manual review
Comment #37
eule commentedComment #38
eule commented3 manual reviews done and square eyes
Comment #39
benjy commented@eule, please post the links to three projects you've reviewed manually to help the admins see the work you've done.
Overall this module is simple and works exactly as described. The above points should not stop this module moving to contrib.
Comment #39.0
eule commentedripping out "not done yet"
Comment #40
eule commentedcommited :: reviews on the first entry
Comment #41
klausimanual review of the 7.x branch:
The first point is a security blocker, otherwise looks pretty ready to me. Removing review bonus tag, you can add it again if you have done another 3 reviews of other projects.
Comment #42
eule commentedi do not again 3 reviews...moving to wordpress..
Comment #43
eule commentedother modules like foo table working in the master, and 7.x-1.x and have no readme.txt, comment_goodness a module sponsored by acquia is still unsupported - fixes makes a other guy but dont get in branch - but is live. i do not understud why this is happend. Module development still suxxs and makes no one who will help drupal more happy.
i do maybe a rewrite, but i dont have the time to make another 3 reviews. i have done 6 reviews now. nothing is accepted. i a´m done.
sorry
Comment #44
ain commentedeule, this is not about this particular project getting accepted and confirmed, it is about the authority to create full projects.
Citing Apply for permission to create full projects:
Additionally, I find this process one of the best possible places for professional and free training. No developer has all the skills in the world, you can only improve by the experience from the others. Sure the hurdle has been long, but it's well worth it knowledge-wise. I hope you agree.
Comment #45
eule commented7.x-1.x i add restrict access => TRUE in gtm.module
Comment #46
benjy commented@eule, I moved from WordPress to Drupal and I can tell you you're almost certainly going in the wrong direction :)
Comment #47
eule commented@benjy,@ain ok. i will finaly do the steps ..but for a none programmer it is not easy. it takes some time and i will work on a better security solution for the Google Tag Manager aka GTM. The thing is i don´t have think thats anyone will give permissions to a anon to setup GTM. For now i mean the module is useable. Try, Test and save my Live!
Comment #48
eule commentedand someone know why on my profil page my project not appear?
Comment #49
benjy commented@eule, I can see my projects here: http://drupal.org/project/user but I don't have any sandbox projects so I can't comment if they should also appear.
You've added restrict access but you still need to change #markup to drupal_add_js. Once that's done set back to RTBC.
Comment #50
klausiThe Git commits are not connected to your user account. You need to specify an email address. See http://drupal.org/node/1022156 and http://drupal.org/node/1051722
Comment #51
PA robot commentedClosing due to lack of activity. Feel free to reopen if you are still working on this application.
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #52
Vic_ commentedHi guys
I need this for D7 install, so im porting it.
il start with this module
il look into the security part. But for now. Porting it to D7 is the most important thing.
Comment #53
benjy commentedThere already is a 7.x branch
Comment #54
eule commented@Vic_ if u want to rewrite please let me know
security issue is a good point to start, and yes there is a d7 working version of it
i want some for d8
please let me know ..i can give rights to support this module
Comment #55
iamEAP commentedI've got a custom (though generic) GTM module that has dataLayer integrations that I'd like to deprecate in favor of something hosted on d.o. I'd be more than happy to help/contribute.
Comment #56
benjy commentedI've thought about taking over this module also but it does very little other than inject one JS file into the page. Do we want to start by outlining what else this module can offer?
Or is the fact it overs a UI for non-technical users to use GTM enough? If so, as iamEAP mentioned, maybe a generic solution is a better alternative?
Comment #57
iamEAP commentedIn addition to injecting the script in the proper way, the module should, at its base, handle GTM's datalayer in a similar way to how Drupal handles Drupal.settings.
Would need to include:
gtm_add_datalayer()or somesuch)Like I said, I have a lot of this built out in a custom module that I'd like to incorporate into this module.
Off of that, there might be contrib module that could: provide a Context reaction datalayer push, provide some other UI (maybe with token support) for datalayer stuff.
I think the module should also probably handle GTM macros, but I'm not very familiar with those, currently.
Comment #58
lsolesen commentedI concur with Plazik in #12 that another sandbox seems a little more powerful with tests included.
Comment #59
rwohlebBoth this and the sandbox mentioned in #12 have not been updated in quite a while. I'm keen to start working on the GTM code, so we need to come to a consensus on who is doing what. Don't make me create my own sandbox :P
Comment #60
rp7 commented@57 / iamEAP
This looks like a very good starting point. Why not add your code to this module/or completely replace it?
Comment #61
webbroidrupal commentedAre you guys thinking about getting this project off the ground? It would really be nice to have a Google Task Manager Module. One of my developers could take on some development tasks if someone out there leads.
https://drupal.org/user/2705195
Comment #62
eule commented@webbroidrupal hello, glad to hear this. I´m not a coder and sometimes its very hard to get all the stuff running from git - to drupal -and coding standards. drupalrv have me helped a lot in the beginning. so it would be nice if your develop will help here.
Comment #63
webbroidrupal commented@eule
If you don't mind we are going to spin it up using Pantheon Multdev next week. It makes it easier to test and collaborate on the code as a team in the same place. Certainly save you some time. I might have a few others who can help too.
Who else is working with you on this?
Still the group listed on project Page:
iamEAP
drupalrv
gnuget
benjy
If your curious about the functionality of Pantheon MultiDev check out this link:
https://www.getpantheon.com/multidev
Comment #64
eule commentedhi @webbroidrupal i work alone on it. i will purge the guys. but i´m sure drupalrv helps too. i just can give you guys permission on it and perhaps credits on the project page. would be nice so i can learn from you ;-)
Comment #65
eule commented@webbroidrupal i update the project page ..give me a user/coder...i will setup permission for you guys
Comment #66
benjy commentedHi all, yeah I just don't have time to commit to this and I don't actually use GTM anymore.
@webbroidrupal Multidev looks great but starting at $400 a month puts it out of reach for most of us.
Comment #67
webbroidrupal commented@benjy
No problem. What are you using for Event Tracking?
MultiDev won't cost you guys a thing. You will use my account, I can invite other developers in for Free.
@benjy,
The developer on this project will be Andrew_Emelianenko
Comment #68
eule commented@webbroidrupal he is ready to rock i setup all.
Comment #69
rwohlebWhere are we at with this? There is another project application for a GTM module (#2070317: [D7] Google Tag Manager). I added a comment pointing them to this thread. Hopefully all efforts are combined.
Speaking of efforts, if you are doing your work outside of Drupal GIT, please add a link to the respository in this thread and on the original sandbox. People may want to submit patches and if we can't see what's up, there will be overlaps.
I'm more than happy to act as a co-maintainer on this project. This isn't my first rodeo, so I can review everything and get it up to standards and best practices.
FYI, I'm setting this back to Needs Work since there is new activity.
Comment #70
webbroidrupal commentedRobert,
We will be starting this week. We will connect with the other team. Give us a week or so to get going on this, then we can call you in to review and standardize everything.
Comment #71
kscheirerJust fixing title.
Comment #72
eule commentedWTF?? Both Version for D6 and D7 available
Comment #73
kscheirerOh, sorry, I was just looking at the initial project application. We only need to evaluate one branch for the application, do you want that to be the D6 or D7 version?
Comment #74
eule commentedwe work with @webbroidrupal soon on it...so ...please still test the stuff.
Comment #75
kscheirerWhen you're ready for review, set this issue to "needs review" and someone will look at it. Also, if you could let us know which branch you'd like to have reviewed, that would be great.
Comment #76
Andrew_Emelianenko commentedHi guys,
I just refactored the code. You can look at this on github: https://github.com/MrWEST/drupal-gtm
I allowed access for: drupalrv and ekn33. Anyone else will need the access?
Guys do you registered at www.getpantheon.com? We can use Multidev system for developing this module.
If you are registered, please, give me your account names and I will give you access.
If your not registered just create a free account, and give me your email address.
Comment #77
ryan osītis commentedAndrew,
Would you add me as well?
rositis@gmail.com
Comment #78
Andrew_Emelianenko commentedRositis,
Done!
Also, I added access to repo for your GitHub account: https://github.com/rositis
Comment #79
webbroidrupal commentedRobert,
I think we are ready to get going on this. Thank you for offering to help work as a co-maintainer on this. If you have some time we are going to need some help on PM side too.
https://github.com/MrWEST/drupal-gtm
I will need your email to invite you into the Dev Environment.
Comment #79.0
webbroidrupal commentedstrong manual reviews
Comment #80
PA robot commentedClosing due to lack of activity. Feel free to reopen if you are still working on this application (see also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #81
chris burge commentedThere is now a Google Tag Manager project: http://drupal.org/project/google_tag