Webform Email Triggers allows you to modify webform email text depending on the options selected by the user during submission.

Project Sandbox page: https://www.drupal.org/sandbox/jphuxley/2853952
Drupal version: 7.x

This is my first project, thank you for looking.

GIT clone

git clone --branch 7.x-1.x https://git.drupal.org/sandbox/JPHuxley/2853952.git webform_email_triggers

Manual reviews of other projects

https://www.drupal.org/node/2674676#comment-12024917
https://www.drupal.org/node/2852752#comment-12027134
https://www.drupal.org/node/2669698#comment-12021191

Comments

JPHuxley created an issue. See original summary.

JPHuxley’s picture

Issue summary: View changes
Status: Active » Needs review
JPHuxley’s picture

Issue summary: View changes
PA robot’s picture

Status: Needs review » Needs work

There are some errors reported by automated review tools, did you already check them? See http://pareview.sh/pareview/httpsgitdrupalorgsandboxJPHuxley2853952git

We are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and put yourself on the high priority list, then we will take a look at your project right away :-)

Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).

I'm a robot and this is an automated message from Project Applications Scraper.

JPHuxley’s picture

Status: Needs work » Needs review
visabhishek’s picture

Assigned: JPHuxley » Unassigned

Please do not assign ticket yourself. See the workflow https://www.drupal.org/node/532400

ishwar’s picture

Hi jphuxley,

Please check below manual review:

1. Line no 208 | WARNING | Unused variable $token_name.
2. Add hook_help in your module file.

klausi’s picture

@ishwar: those are nice tips for improvements, but probably not application blockers. I think you forgot to change the status - anything else that you found or should this be set to RTBC?

djalxs’s picture

Please make sure you're using check_plain() or filter_xss() as on lines 43 & 52 of the webform_email_triggers.module file there are 2 possible security issues relating to variable sanitation.

JPHuxley’s picture

Many thanks for the reviews @ishwar and @djalxs.

I have made the following changes:

  1. Removed the unused variable from the list() call.
  2. Added hook_help (and a little more detail to the readme).
  3. Used check_plain for the component/option titles in the form.
JPHuxley’s picture

Priority: Normal » Critical

Updated the readme file to follow the template.

JPHuxley’s picture

Issue summary: View changes
Issue tags: +PAreview: review bonus
tatarbj’s picture

Assigned: Unassigned » tatarbj

I'm starting a manual review on this module.

tatarbj’s picture

Assigned: tatarbj » Unassigned
Status: Needs review » Needs work

Module is clear and secure, there are no issues by PHPCS, PAReview.sh only reports the obvious missing tests, but as we know a lot of other Security Team covered contribs have the same issue, so i don't feel it as a blocker :)

Review of the 7.x-1.x branch (commit 2165799):

  • No automated test cases were found, did you consider writing Simpletests or PHPUnit tests? This is not a requirement but encouraged for professional software development.

This automated report was generated with PAReview.sh, your friendly project application review script. You can also use the online version to check your project. You have to get a review bonus to get a review from me.

Also i've operated a manual review with functional tests, nothing really serious is found, except the missing token module dependency. I've made all my tests on a clean drupal7 installation, when this contrib wanted to be enabled, it asked webform, that asked ctools and views, that is perfectly fine, all of them got enabled, but when i wanted to use the contrib as it's written in its README.txt, i got the following warning: "User warning: The following module is missing from the file system: token. For information about how to fix this, see the documentation page. in _drupal_trigger_error_with_delayed_logging() (line 1143 of /ec/dev/server/fpfis/webroot/sources/tatabal/drupal7/includes/bootstrap.inc)." It should be fixed before application can turn to RTBC, but nothing else is discovered.

Bests,
Balazs.

PA robot’s picture

Status: Needs work » Closed (won't fix)

Closing due to lack of activity. If you are still working on this application, you should fix all known problems and then set the status to "Needs review". (See also the project application workflow).

I'm a robot and this is an automated message from Project Applications Scraper.

JPHuxley’s picture

Priority: Critical » Normal
Status: Closed (won't fix) » Needs review
Issue tags: -PAreview: review bonus

Appreciate the feedback @tatarbj

I've added token to the dependencies and retested with a fresh installation - token installs OK and the module works.

Thanks
John

tatarbj’s picture

Status: Needs review » Reviewed & tested by the community
Issue tags: +PAreview: review bonus

Hi @JPHuxley,
i've checked the module's new version (from this commit: 8e63ba5e) again carefully and it works as it's expected - there is no issues with the code itself, it's well organised, nicely documented (header and inline ones too!), so as a result of this application i'm giving RTBC and also putting back the review bonus tag as it got removed even you've made them before :)
Nice work overall!
Bests,
Balazs.

visabhishek’s picture

Status: Reviewed & tested by the community » Fixed

Thanks for your contribution, JPHuxley!

I updated your account so you can opt into security advisory coverage now.

Here are some recommended readings to help with excellent maintainership:

You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and stay involved!

Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.

Thanks to the dedicated reviewer(s) as well.

visabhishek’s picture

Assigning Credits.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.