Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Major
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
28 Dec 2015 at 00:49 UTC
Updated:
28 Feb 2016 at 23:54 UTC
Jump to comment: Most recent
Comments
Comment #2
PA robot commentedFixed the git clone URL in the issue summary for non-maintainer users.
We are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and put yourself on the high priority list, then we will take a look at your project right away :-)
Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #3
almaudoh commentedAdded links to manual review of other projects.
Comment #4
almaudoh commentedNow ready for reviews
Comment #5
almaudoh commentedBumping up priority...
Comment #6
sdstyles commentedHi, I did a manually code review on your project, I tested only admin interface, I didn't find how to register a developer account for http://www.routesms.com/ and fill credentials to send requests to Routesms API. Maybe @almaudoh can help with some info or credentials for testing it. Thanks.
Automated Review
Not found any issues reported by Pareview
Manual Review
The starred items (*) are fairly big issues and warrant going back to Needs Work. Items marked with a plus sign (+) are important and should be addressed before a stable project release. The rest of the comments in the code walkthrough are recommendations.
If added, please don't remove the security tag, we keep that for statistics and to show examples of security problems.
This review uses the Project Application Review Template.
Comment #7
almaudoh commentedThanks for the review @sdstyles. Your recommendation is great and I have incorporated it. Makes the code neater.
Unfortunately, I don't have a test account with routesms right now for testing the functionality. The only account I have is for production which I am not allowed to divulge.
However, you can contact them via email for a test account.
Comment #8
ayesh commentedHi Aniebiet,
I had the opportunity to review you module, and after the review, I could not find any serious issues that blocks this from going further. I could not personally test this with the RouteSMS service in particular, but I can see you have several commits in SMS Framework module, so I'm sure you have tested this well yourself.
A few suggestions though:
- There are some minor types: "Encyption" for example.
- Duplicate keys in the country list function (34, 269, ...). In form API, this will make the former country name to be replaced with the latter ones. These are countries with same code (Spain and Canary Islands share same code), so consider combining the country name like how you have done already for some countries.
- SMS credit balance and sms_routesms_dlr_url functionality: I'm not sure if these parts are complete or not. If you plan to add some sort of callback URL to push delivery reports, please make sure you add necessary validation with to prevent CSRF and forged requests.
- In the configuration form, I think it would be better if there were some introduction to each fields and additional validation handlers could make things a lot easy to use.
element_validate_integer_positivefor the port number field to mention one.I'll mark this RTBC for another review administrators (I'm still new, so) to take a look if they have some time. I'll approve this myself by January 28 otherwise.
Thank you.
Comment #9
ayesh commentedComment #10
almaudoh commentedThanks for the review, @Ayesh. Your suggestions will be incorporated, especially on the CSRF validation for delivery reports.
Comment #11
almaudoh commentedAdded three more code reviews:
https://www.drupal.org/node/2649064#comment-10807834
https://www.drupal.org/node/2651096#comment-10831212
https://www.drupal.org/node/2644596#comment-10831284
@Ayesh, you did promise you'd approve my application by 28th January :)
Comment #12
klausiReview of the 7.x-1.x branch (commit 935cea7):
This automated report was generated with PAReview.sh, your friendly project application review script. You can also use the online version to check your project. You have to get a review bonus to get a review from me.
manual review:
Otherwise looks good to me.
Thanks for your contribution, Aniebiet!
I updated your account so you can promote this to a full project and also create new projects as either a sandbox or a "full" project.
Here are some recommended readings to help with excellent maintainership:
You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and stay involved!
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
Thanks to the dedicated reviewer(s) as well.
Comment #13
almaudoh commentedThanks @klausi, I'll fix the remaining issues shortly.
Ha, :o, that was a leftover from the D6 version when I ported over to D7, will fix.
Thanks again!!