Download & Extend

UI fixes and security suggestions

Project:Gallery API
Version:6.x-1.x-dev
Component:Code (GalleryAPI core)
Category:bug report
Priority:critical
Assigned:andypost
Status:needs review

Issue Summary

UI reworked to more conforming core.

- removed useless theme function, listing of presets is much cleaner
- edit preset form is reusable
- used drupal_write_record() to unify insert/update
- renamed galleryapi_get_*_names to galleryapi_get_*_options - more intuitive
- presetname should be escaped because it's inputed by user (security!!! all over module - don't use t('!name

- added dedicated permission 'administer galleryapi' because 'administer site configuration is to much

- a bit changed strings to conform security with preset name

PS: sorry for fuzz in patch - there was a lot of trailing spaces

AttachmentSize
gapi-ui-fixes-d6.patch20.08 KB
nobody click here