Closed (won't fix)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Critical
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
11 Oct 2013 at 21:01 UTC
Updated:
3 Jul 2016 at 16:24 UTC
Jump to comment: Most recent
Comments
Comment #1
PA robot commentedThere are some errors reported by automated review tools, did you already check them? See http://pareview.sh/pareview/httpgitdrupalorgsandboxbigfishdev2059889git
We are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and put yourself on the high priority list, then we will take a look at your project right away :-)
Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #2
bigfishdev commentedI fixed all of the errors. There are only 2 long line warnings remained.
Comment #2.0
bigfishdev commentedsimilar module's page added
Comment #3
kscheirerAll user accounts are for individuals. Accounts created for more than one user or those using anonymous mail services will be blocked when discovered (see Get a Drupal.org account).
Can you confirm that the bigfishdev account is a single user? Please change your account information and enter your realname.
If you prefer, we can also promote this sandbox to a full project without granting you "git vetted user" status.
----
Top Shelf Modules - Crafted, Curated, Contributed.
Comment #4
david.juhasz commentedThanks for your review.
The bigfishdev is a shared account for our development team,
but currently I'm the only one, who using it and due to this policy nobody else
will be using it in the future.
I've created an individual account for myself. How can I become the owner of this project?
The version specific branch was created before, but now I deleted the master branch.
7.x-3.x is the default.
The large switches were just some skeleton codes for the different payment method submodules.
Those were unnecessary at the moment, so I removed them.
I've extended hook_requirements to check the library already at install phase.
I've checked the Libraries API also, but I think this module doesn't need it. The SDK
won't be shared, only this project will use it. Also the Libraries module doesn't help yet
the user implementing the third party code on the site. (except in the documentation)
Comment #5
david.juhasz commentedComment #6
nitesh pawar commentedManual Review:
you can also use like this:
why do you want this blank condition???
Comment #7
nitesh pawar commentedComment #8
david.juhasz commentedThanks, Niteshp!
I removed the unnecessary breaks and the condition is not
blank anymore.
Comment #9
david.juhasz commentedComment #10
heddnHi, there's still a couple comments that are too long per pareview. Below is some feedback, of which only the inline comment are really git vetted blockers. The rest is just good information to know.
It is unnecessary to list fetchField(0) as zero is the default.
Consider not spamming the user in hook_init. In a local development environment where the payment gateway might not be set up, these types of messages on every page view become highly annoying.
The default type of MENU_CALLBACK isn't strictly necessary.
Empty description isn't necessary and the default size is already 60.
Remove commented out code and depend on the VCS to store history of changes.
Inline comments should begin with two slashes (//) and end with a full stop.
Comment #11
heddnI also struggle with saying this, but the project name seems a little, shall we say broad. There are many payment gateway options. Naming the project uc_paymentgateway makes me think this is an API project for creating payment gateways, not a payment gateway specifically purposed for Big Fish. Perhaps a project re-name is in order that includes some variation of Big Fish in the name.
Comment #12
david.juhasz commentedThanks for the review, heddn!
I fixed the code as you suggested, except the menu settings.
As the API document says, the default type is MENU_NORMAL_ITEM.
I also renamed the module to uc_bigfish_paymentgateway.
Comment #13
david.juhasz commentedComment #14
heddnNot sure how I missed these earlier:
In uc_bigfish_paymentgateway_otp.inc, t() expects all strings to be in English.
.install:
public://uc_bigfish_paymentgateway' is created but never deleted on uninstall.
Non-blocking:
Have you considered the use of libraries module to wire in the external big fish PHP library? That way folks don't have to place the library within the module. Which makes version control easier.
Comment #15
david.juhasz commentedI fixed the uninstall hook. Now it deletes the unnecessary folder.
Those strings can't be translated in English, so I removed all the t(),
but now Pareview shows warning about this. I hope it's not a blocker.
Comment #16
david.juhasz commentedComment #17
heddnLet's see what the git administrators have to say about t(). Marking RTBCed.
Comment #18
david.juhasz commentedOK. Thanks again for the review.
Comment #19
kscheirerI think this is an issue that should definitely be fixed, but you clearly have a good understanding of the Drupal API, so it's not a blocker:
The untranslated t() strings in uc_bigfish_paymentgateway_otp.inc are ok, I assume those are country-specific and therefore language-specific and would never need to be translated from Hungarian.
So we're left with the account name issue. We can only promote 1 account for this application, and it must be an individual. I see two options:
Checked for use of the Drupal API, security, licensing, everything else seems ready to go!
Comment #20
kscheirerComment #21
PA robot commentedClosing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #22
david.juhasz commentedI fixed the heavy-handed file loading issue. The included files will be loaded only, if necessary.
Also our senior developer took over the bigfishdev account, and updated that filling out the profile with his name.
So we confirm that is not a shared account, and we ask you to promote it for us.
Comment #23
david.juhasz commentedComment #24
heddnTypically moving the status to RTBC is an indication of a review by someone un-related to the code. Moving back to needs review for now.
Comment #25
Anonymous (not verified) commentedHi.
I tried your module in a fresh Drupal installation, and i've read the code.
So I'll try to give my little contribution:
* please consider to use db_select() on line 17 of uc_bigfish_paymentgateway.admin.inc
* While trying to install the module I received this error:
undefined constant UC_BIGFISH_PAYMENTGATEWAY_LIBRARY_NAME...in _uc_bigfish_paymentgateway_check_library() (line 20 of uc_bigfish_paymentgateway.inc).
I tried to replace the variable with the string 'payment-gateway-php-sdk-master', but it still does not find the library.
* $items['uc_bigfish_paymentgateway_result'] perhaps should it have "view payments" as access argument?
Some minor notices:
* it seems there is not the hook_help()
* Can the demo be in english? :)
* For a better readability of your project page, you could:
- put "Install" into h2 tag
- create a new paragraph for the Configuration tips
- create a new paragraph for required modules
I did not find other security or Drupal API issues.
I hope to have been of help.
Congratulations for your module, i'm an Ubercart user and i hope i'll use it a day. :)
(sorry if I set the wrong state due to inexperience in the drupal review area.
I hope to be helpful anyway, otherwise please stop me immediately! thanks)
Comment #26
kscheirerNone of those are blocking issues.
Comment #27
tr commentedAccording to the guidelines, this issue should now be critical:
Comment #28
takim commentedYour module still have some warning and error accroding to coding standard. Can you fix those? you can see the errors from the following link
http://pareview.sh/pareview/httpgitdrupalorgsandboxbigfishdev2059889git
It is always important to follow coding standard if you want to move your experimental module to full project.
Comment #29
david.juhasz commentedI fixed the coding standard issues.
Comment #30
tr commentedComment #31
mlncn commentedI gave your david.juhasz vetted git status.
Thanks for your contribution! Congratulations, you are now a vetted Git user. When you create new projects (typically as a sandbox to start) you can then promote them to a full project.
Here are some recommended readings to help with excellent maintainership:
You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and stay involved!
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
Comment #32
david.juhasz commentedThanks for the status update, but i'm not the owner of this project.
I'm only a maintainer, so i can't promote this module.
Is it possible to assign the project to me, or the bigfishdev user (the owner) to have a vetted git status also?
Comment #33
david.juhasz commentedComment #34
jthorson commentedHey David ... given the scenario (where you were approved as opposed to the submitter of the project), and that meaning that you aren't able to promote the sandbox, I'd suggest opening an issue in the Drupal.org Webmasters Queue with your request that they either transfer ownership of the module to you, or promote it from sandbox to full project on your behalf (in which case you'll need to supply them with your desired machine-name for the project as well).
Comment #35
gisleThe directory http://cgit.drupalcode.org/sandbox-bigfishdev-2059889/tree/images in the project repo is full of 3rd party company logos that is both copyrighted and trademarked. Don't even dream about licensing this intellectual property belonging to various third parties under the GPL.
Our policy on 3rd party materials in the repo is described in the 3rd party libraries and content on Drupal.org. It also appears in the Drupal Git Repository Usage policy you agreed to when you signed up for Git access, which you may want to re-read, to be sure you're not violating other terms.
Comment #36
PA robot commentedClosing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.