Closed (won't fix)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
3 Mar 2016 at 13:27 UTC
Updated:
22 Apr 2016 at 04:55 UTC
Jump to comment: Most recent
Comments
Comment #2
benellefimostfa commentedComment #3
benellefimostfa commentedComment #4
benellefimostfa commentedA simple and light module to manage user redirections after login or registration.
* Redirect user after login.
* Redirect user after registration.
* Simple user friendly.
sandbox link: git clone --branch 8.x-1.x benellefimostfa@git.drupal.org:sandbox/benellefimostfa/2676602.git user_redirect
Comment #5
benellefimostfa commentedA simple and light module to manage user redirections after login or registration.
* Redirect user after login.
* Redirect user after registration.
* Simple user friendly.
sandbox link: git clone --branch 8.x-1.x benellefimostfa@git.drupal.org:sandbox/benellefimostfa/2676602.git user_redirect
Comment #6
manikaprasanth commentedHi,
Can u please explain difference between login_destination.
Comment #7
benellefimostfa commentedThank you for your feedback, user_redirect is about redirecting user after login, register and other actions in the future, and login_destination is only acting after login
Comment #8
tarekdj commentedNot blocker but good to consider:
No automated test cases were found, did you consider writing Simpletests or PHPUnit tests? This is not a requirement but encouraged for professional software development.Nice work! looks good to me.
Comment #9
benellefimostfa commentedComment #10
benellefimostfa commentedComment #11
benellefimostfa commentedComment #12
benellefimostfa commentedComment #13
benellefimostfa commentedComment #14
benellefimostfa commentedComment #15
benellefimostfa commentedComment #16
benellefimostfa commentedComment #17
benellefimostfa commentedComment #18
nitesh pawar commentedHi benellefimostfa,
Pareview.sh is automated review, Please do some real testing for code break, security and blocker errors.
Thanks
Comment #19
benellefimostfa commentedComment #20
benellefimostfa commentedComment #21
benellefimostfa commentedComment #22
heykarthikwithuAutomated Review
Review of the 8.x-1.x branch (commit 172f9b1):
No automated test cases were found, did you consider writing Simpletests or PHPUnit tests? This is not a requirement but encouraged for professional software development.
This automated report was generated with PAReview.sh, your friendly project application review script. You can also use the online version to check your project. You have to get a review bonus to get a review from me.
Source: http://pareview.sh/ - PAReview.sh online service
Manual Review
User Registerconfiguration set touserpage, but after registration, i was seeing WSOD.admin/config/user-redirect/defaultaccess administration pagespermission, if we have a custom permission, that would be great.UserRedirectwhich would be matching our module, rather thandefault_form, which should be a unique one.And their are similar modules Login redirect, the module maintainers are looking for co-maintainers, if possible you can work with 8.x for
login_redirectmodule.Comment #23
xaiwant commentedSince it is a major issue. moving back to Needs work
Comment #24
naveenvalechaComment #25
benellefimostfa commented1- fixed
2- fixed
For "login redirect" he is not very similar to this project.
Comment #26
heykarthikwithuI am getting WSOD.
Also this changes are better practice.
Comment #27
benellefimostfa commentedfixed
Comment #28
heykarthikwithuActually i was able to reproduce, lets wait for few other to review this :)
Comment #29
tarekdj commentedBoth login & register work like a charm. Looks RTBC for me. Nice work everyone!
Comment #30
heddn@tarekdj, in your reviews, it would help a lot to write up some notes of what you reviewed in the code. Project applications aren't so much a review of the functionality of the module, but rather a review of the coding ability of the person applying for git access.
Note that perfect adherence to Drupal Coding Standard is NOT a reason to block an application, except for total disregard of them. However, modules should follow them as closely as possible.
Manual Review
$url_object = \Drupal::service('path.validator')->getUrlIfValid($destination);, if the destination isn't valid, it will return FALSE and$url_object->setAbsolute();will WSOD.drupal/core: 8.*Please enter un internal path without. Spelling error, un = an.\Drupal::, which is a code smell. Take a look at ConfigSync for an example that does this. In your case, since you are extending ConfigFormBase, you'll want to continue injecting the ConfigFactory, and also add the path validator service.The starred items (*) are fairly big issues and warrant going back to Needs Work. Items marked with a plus sign (+) are important and should be addressed before a stable project release. The rest of the comments in the code walkthrough are recommendations.
If added, please don't remove the security tag, we keep that for statistics and to show examples of security problems.
This review uses the Project Application Review Template.
I've marked this as Need Work for several reasons. First, due to project duplication. This is identical services to both https://www.drupal.org/project/login_destination & https://www.drupal.org/project/login_redirect. The second reason for marking Needs Work is that it doesn't include sufficient code to demonstrate knowledge of the Drupal APIs. I understand this is frustrating to you as an applicant, but this is somewhat a judgement call on the part of the git admin (myself).
Comment #31
PA robot commentedClosing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #32
naveenvalechaThere's also a similar module https://www.drupal.org/project/simple_redirect