Copy-pasting the module code in version 5 is a faff.
Getting a zipfile is better, but still involves some mucking about, finding where Firefox has put the file, etc etc.

I'd like this module to offer the option to create the module folder and files for you, but I'm mindful of the security risk (same as this one with module_installer: http://drupal.org/node/211252)

However, to my mind the way to use module builder is on a localhost, so you can edit the module files to put in your code, and then test your new module. I see no reason why you'd want module builder module on a live site or even a remote server of any sort.
So I think the risk is mitigated.

What I propose is:
- there would be an admin option for this functionality, disabled by default
- the ticky box to enable this would have a big red warning about only using this on a local site that's not accessible from the internet
- the actual page with the 'Write my module' button would carry the same warning.

I haven't time to implement this just yet, but I'm filing this so I can run it past the security team :)

Comments

webchick’s picture

I'm fine with this if it's written to the files directory and someone has to manually copy it over into sites/all/modules. Otherwise we have to make sites/all/modules writable by PHP which, um, no. :)

joachim’s picture

Status: Active » Fixed

Cool.
Implemented with some terribly hacky multistep stuff. Hopefully this'll be cleaner to do in D6.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.