Closed (won't fix)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
18 Feb 2017 at 15:19 UTC
Updated:
16 Oct 2018 at 09:21 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #2
PA robot commentedThere are some errors reported by automated review tools, did you already check them? See http://pareview.sh/pareview/httpsgitdrupalorgsandboxveerasekarr892852598git
We are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and put yourself on the high priority list, then we will take a look at your project right away :-)
Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #3
parthpandya24 commentedPlease resolve the https://pareview.sh/node/1149 errors
Its spacing and some other functional error.
And after installing, Forgot email tab display on login form.
I have seen this error.
Comment #4
ishwar commentedHi @veerasekar.r89
My manual review have been given below :
1. Implement
hook_helpin your module file.2. Either you use
t()in all menu items or just remove them.3. check spelling on line 129
4. Add proper comments with param and return type used in function.
Comment #5
veerasekar.r89 commentedThanks your reviewing..
I just committed all the issues are mentioned.
https://www.drupal.org/node/2853833#comment-11948353
https://pareview.sh/node/1149
https://www.drupal.org/node/2853833#comment-11949231
Comment #6
puspanjalim commentedHi @veerasekar.r89
If you can add some more information in readme.txt regarding how to access this feature then this will be helpful forusers.
Comment #7
puspanjalim commented1 . Got error while trying to configure Forgot email at admin/config/people/forgot_email
" unable to handle this request"
2 . Also before configuring Forgot Email settings the Forgot email tab should not be displayed on login form
Please review again with latest D7 version.
Comment #8
puspanjalim commentedComment #9
jeetendrakumar commented@veerasekar.r89
Please fix following issue.
Fatal error: Call to undefined function filter_filter() in /var/www/html/drupal7-1/sites/all/modules/forgot_email/forgot_email.module on line 15
Suggestion:
1. Forgot email tab should be come on user login page once we configured setting.
2. Add new link on login block "forgot email" It will show more visibility for user to access this functionality.
Comment #10
veerasekar.r89 commentedThanks All,
Fixed below issues...
https://www.drupal.org/node/2853833#comment-11952543
https://www.drupal.org/node/2853833#comment-11952546
Comment #11
shamas41 commented@veerasekar.r89
Here is the test results of my initial manual review
1. Log Messages: Need to fix
Notice: Use of undefined constant forgot_email_access - assumed 'forgot_email_access' in forgot_email_menu() (line 29 of /Users/shamas_mac/Sites/drtest/sites/all/modules/forgot_email/forgot_email.module)
Notice: Use of undefined constant forgot_email_access - assumed 'forgot_email_access' in forgot_email_menu() (line 39 of /Users/shamas_mac/Sites/drtest/sites/all/modules/forgot_email/forgot_email.module).
2. Request
I think you should add Forgot Email Link in User Login block also. I can't see it in login block see screenshot
Comment #12
veerasekar.r89 commented@shamas4 Thanks for your review.
I updated with user login block also have forgot email link.
Comment #13
veerasekar.r89 commentedComment #14
rajveergangwarHi Below are my reivews:
1:
Please decribe more details in readme.TXT for
admin/config/people/forgot_email
As m not getting any value in dropdown of Choose Field.
2:
Please use drupal_exit() instide exit in forgot_email_resendpass function.
3:
You are seting variable forgot_email_field. Please delete this variable in .install file.
Comment #15
visabhishek commented@rajveergang : Looks like you forgot to change the status. Is this now RTBC after your review or are there application blockers left and this should be "needs work"?
Comment #16
rajveergangwar@Abhishek,
Its not an application blocker, It should be in RTBC...
Comment #17
anishnirmal commentedMoving it to "Needs Work". Use drupal_exit() and delete all the setting variable on module uninstall as suggested by @rajveergang at #14.
Place the below code inside a module .install file to delete the setting variable on uninstall.
Comment #18
PA robot commentedClosing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #19
veerasekar.r89 commentedI fixed and committed #14 and #17
Regards,
Veera.
Comment #20
rajveergangwarComment #21
sachintyagi99 commentedHi @veerasekar.r89
I have checked your module on pareview.sh (https://pareview.sh/node/1149)
Please fix coding standard issues:
http://www.awesomescreenshot.com/image/2467967/320eeb4b389509d2a62124974...
Comment #22
sachintyagi99 commentedComment #23
PA robot commentedClosing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #24
veerasekar.r89 commented@sachintyagi99
Thanks for your reviewing
Its fixed now.
Comment #25
jadhavdevendra commentedI think displaying all email address matching certain field from user profile is providing more information to hacker. Can we mask the email address instead of showing them in plain text?
Like Facebook do - https://b-i.forbesimg.com/adamtanner/files/2014/01/facebook1.jpg
Comment #26
PA robot commentedClosing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #27
veerasekar.r89 commented@jadhavdevendra thanks for your review, this is feature request,
Comment #28
avpadernoComment #29
avpadernoActually, what reported in #25 is information breach. Only users with the permission to administer users should be able to see the email used from users.
If a site would install this module, as it is written now, a spammer could easily collect emails used from users with an account on the site. There are many bad things that hackers could do knowing somebody is using an email on a site, for example sending an email making them think the site is asking to change password, and steal the account password.
Comment #30
avpadernoI can see a use case for the module. In the past, I bought a new computer because my old one got broken, and had to set all my emails in the new computer. I first set up the ones I use more frequently, but it could happen I forgot to set up the one I use for a Drupal account, and when I visited that Drupal site, I noticed I could not remember the password. Knowing which email I set for that site would have helped.
This doesn't mean the module should show any matching emails without identifying the user to whom the matching emails are shown.
Comment #31
avpadernoThat code is wrong because it is adding links Drupal already adds, using the wrong paths. user/password is used also for Create new account.
See
user_login_block().Comment #32
sheetal-V commentedHello
There are some typo errors please check and fix
Comment #34
sheetal-V commented@kiamlaluno I have mentioned about the English grammar mistakes in Description of module, not about the functionality.
Comment #35
avpadernoI apologize: It seemed you were commenting about the module.
There are many errors in that description, such as the grammar of every user have, which E-mail address registered in a Site, and This module helps to user can known; the spelling of E-mail ids, E-mail, and Site.
Those are not application stoppers, though. It would be nice if the OP would fix them, but there is a more serious error to fix.
Comment #36
avpadernoIf you are still working on this application, you should fix all known problems and set the status to Needs review. (See also the project application workflow.)
Please don't change status of this application if you aren't sure you have time to dedicate to this application, or it will be closed again as won't fix.
I am closing this application due to lack of activity.