Code Review

SITES/ALL/MODULES/WEBFORM/WEBFORM.MODULE
webform.module

1. severity: normalreview: comment_docblock_fileFile: @file block missing (Drupal Docs) [comment_docblock_file]
2. severity: normalreview: style_else_spacingLine 565: else statements should begin on a new line [style_else_spacing]
   } else {
3. severity: criticalreview: security_5Line 2939: Potential problem: form_set_error() and form_error() only accept filtered text, be sure all !placeholders for $variables in t() are fully sanitized using check_plain(), filter_xss() or similar. (Drupal Docs) [security_5]
   form_error($elements, t('!name field is required.', array('!name' => $elements['#title'])));
4. severity: criticalreview: security_5Line 2944: Potential problem: form_set_error() and form_error() only accept filtered text, be sure all !placeholders for $variables in t() are fully sanitized using check_plain(), filter_xss() or similar. (Drupal Docs) [security_5]
   form_error($elements, t('!name cannot be longer than %max characters but is currently %length characters long.', array('!name' => empty($elements['#title']) ? $elements['#parents'][0] : $elements['#title'], '%max' => $elements['#maxlength'], '%length' => drupal_strlen($elements['#value']))));
5. severity: normalreview: style_paren_spacingLine 3158: use a space between the closing parenthesis and the open bracket [style_paren_spacing]
   : ($component['page_num'] <= $form_state['storage']['page_num'])){
6. severity: normalreview: style_function_spacingLine 3177: Functions should be called with no spaces between the function name and opening parentheses [style_function_spacing]
   $page_num = max (1, $page_num);
7. severity: criticalreview: security_2Line 3340: Potential problem: drupal_set_message() only accepts filtered text, be sure to use check_plain(), filter_xss() or similar to ensure your $variable is fully sanitized. (Drupal Docs) [security_2]
   drupal_set_message(webform_replace_tokens($message, $node, NULL, NULL, TRUE));
8. severity: normalreview: style_uppercase_constantsLine 3852: Use uppercase for PHP constants, e.g. NULL, TRUE, FALSE [style_uppercase_constants]
   return token_replace($string, $token_data, array('clear' => true, 'sanitize' => $sanitize));
9. severity: normalreview: style_paren_spacingLine 5034: use a space between the closing parenthesis and the open bracket [style_paren_spacing]
   function webform_count_input_vars($element){