I have not actually looked at the code of this module, but am instantly concerned with security here. It is bad practice and a security rick to have the webserver be able to manipulate module files.

See: http://drupal.org/project/module_installer

I am not sure if this module does this securely, but either way, I think it is important to put a note up on the module page explaining whether this module is secure or not.

Thanks.

Comments

arcaneadam’s picture

arcaneadam commented

When it gets to the point of release that will be addressed. Thank you for your concern. I will help me work through the security aspect with a more fine tooth comb as I write this.