Is the project still maintained?

CommentFileSizeAuthor
#11 node_browser.module.patch3.04 KBsnipe
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

apaderno’s picture

Title: Is Node Browser still maintained? » Node Browser seems abandoned
Project: Node Browser » Drupal.org site moderators
Version: 5.x-2.5 »
Component: Code » Project ownership
Category: support » task

I am moving the report to the right issue queue.

Dave Reid’s picture

Please post links back to the original module so we don't have to search for it.

apaderno’s picture

I am sorry again; the link to the project page is http://drupal.org/project/node_browser.

Dave Reid’s picture

Status: Active » Fixed

Marked as abandoned.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

snipe’s picture

Status: Closed (fixed) » Needs review

Hey there
i've just port this project old codes to D6 at

http://drupal.org/node/287451#comment-2622918
its just a half an hour work done to move to d5 to d6 so it is not a solutions, will make further changes soon in upcoming weeks

i would like to maintain the project as it have good potential to used as business directories, yellow pages

Thanks You
Suketu Topiwala
Demarlos Solutions
http://www.demarlos.biz

apaderno’s picture

Status: Needs review » Active

There is a note about the project being not secure on the project page. In order to allow any further development (if there aren't any other projects with the same or similar purpose) a patch to resolve the security issue must be provided.

snipe’s picture

Hi, i've just downloaded the 5.x-2.5 version and will start working on the code standards with drupal 6 with patch in upcoming weeks

snipe’s picture

Hi
i am not able to find exactly what is the issue regarding security in Drupal5, i mean to say i would like to Continue with Drupal 6 Development

if solving drupal 5's issues are critically required i will look at them asap before i move to drupal 6

Regards
Suketu

andypost’s picture

Anyway you should provide a patch, this patch should be against current HEAD (which is DRUPAL-5) You already have code at http://drupal.org/node/287451#comment-2622918 with a half of code

snipe’s picture

Status: Active » Needs review
FileSize
3.04 KB

Hey
okey i have made a small changes, find the attached patched file for review, its for D5, once the project get active, i will start converting it to D6 & then after D7, it still needs much work to be done

Regards
Suketu

andypost’s picture

@suketu.topiwala Are you sure that removing a part of code could fix a security issue?

snipe’s picture

I think so, as that parts were may allow Sql Injunction to work
this was my initial view, so if some one can testify it, it will be great

Regards
Suketu

apaderno’s picture

This kind of reviews are made from the Drupal.org security team. You should probably ask to somebody that is part of the Drupal.org security team to review the code you wrote.

snipe’s picture

How to do that?

redndahead’s picture

@snipe are you still interested in maintaining this?

tim.plunkett’s picture

Assigned: Unassigned » tim.plunkett
Status: Needs review » Postponed

Contacting snipe through his contact form, I will follow up if he doesn't.

snipe’s picture

Assigned: Unassigned » tim.plunkett
Status: Active » Postponed

Hey @redndahead, I was stuck in some projects, also I am still not the maintainer of the project, I'll let you know in next few days about the plan

Regards

snipe’s picture

@tim, Yes I am interested in maintenance for the project, Please let me know what are the proceedings to get the ownership

Regards

tim.plunkett’s picture

Assigned: tim.plunkett » Unassigned
Status: Postponed » Active
apaderno’s picture

Assigned: tim.plunkett » Unassigned
Status: Postponed » Active

@snipe As the module has been reported to have a security issue, your patch needs to be reviewed from somebody of the security team, as only the security team is able to check if your patch resolves the issue they reported.

tim.plunkett’s picture

Title: Node Browser seems abandoned » Offering to maintain Node Browser
snipe’s picture

@kiamlaluno , can you tell me how can I ask security team to review the patch, Its a year old issue now. because there are many persons are asking to get this module for their website.

tim.plunkett’s picture

Status: Active » Postponed

@snipe, follow the instructions here: http://drupal.org/node/251466#security

Once that issue is dealt with, please mark this issue back to "active".

tim.plunkett’s picture

Status: Postponed » Fixed

Marking back to fixed per #4.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

Project: Drupal.org site moderators » Drupal.org project ownership
Component: Project ownership » Ownership transfer