QA_Checking Tool for Modules 2.0RC2 is out ! - XOOPS - XOOPS News

XOOPS

News

News World of XOOPS Developers Hacks Themes Archive Submit News

XOOPS: QA_Checking Tool for Modules 2.0RC2 is out !

Posted by: MarcoOn 2005/9/4 21:30:00 7888 reads

Changelog RC1-->RC2 2005/09/03
------------------------------------
Add files disclosing physical server paths into Security Section
Add utf 8 Compatibility : waiting for some feedback about !
Add confirmation/redirection messages into
Add Dev/Run Check Status
Some wording
Add sheet protection (no passwd)
Modification in SQL Query : add no query in xoops_version file
Added absolute patch in SEO
Add one ligne in Design/Documentation
Change name of tool (was before Checklist4ModDevs) after kaotik gave me some inputs (thanks guy)

Please feel free to give us feedback

The comments are owned by the author. We aren't responsible for their content.

Re: QA_Checking Tool for Modules 2.0RC2 is out !

brash Published 09/05/2005 4:46 Updated 09/05/2005 4:56 Friend of XOOPS Joined 04/10/2003 Comments 2206

Good work. Just noticed that in the security page, under item S1 it mentions each directory should have security files that are specific to the Apache webserver. Will examples/templates of what should be used be provided for this?

P.S - Just noticed that item S7 talks specifically about chmoding too, which is obviously *nix specfic (unless you have posix tools for windows). With Windows you want only Read NTFS permissions for you web server account, then also the Write permission for those that need to be writable by the server.

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Graviton Published 09/05/2005 17:43 Just popping in Joined 08/10/2005 Comments 60

Well, I could do dutch, german, french and couple more when I have time that is or maybe in the future releases.
I'll keep in touch if and when.

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Marco Published 09/05/2005 20:38 Updated 09/05/2005 20:39 Home away from home Joined 03/15/2004 Comments 1256

@graviton
for french, it will be ok, will do it.
thanks for others languages if you can.

@ brash
yes, this tool is too .nix oriented. Thanks, i will improve it on that point. Could you give me some inputs on these specific points. What should be there for Windows environment?
For .htaccess, i will add lines that a .htaccess file should have.

thanks
marco

Re: QA_Checking Tool for Modules 2.0RC2 is out !

kaotik Published 09/05/2005 21:00 Just can't stay away Joined 02/19/2004 Comments 861

Thanks Marco for a great tool!

Re: QA_Checking Tool for Modules 2.0RC2 is out !

brash Published 09/06/2005 1:37 Friend of XOOPS Joined 04/10/2003 Comments 2206

@ MarcoFr

With Windows you have both Apache and IIS environments. So .htaccess will still apply, but IIS has no real equivilent. As for permisions, all you need to do with Windows is what I suggested in my first post.

Re: QA_Checking Tool for Modules 2.0RC2 is out !

phppp Published 09/07/2005 18:40 XOOPS Contributor Joined 01/25/2004 Comments 2857

IMO, an extra "utf-8" test is not necessary but there should be an option for "coding standard" (or some proper term) in "core features" to address:
1 proper use of XoopsLocal that allows flexible language localization
2 proper use of XoopsDB API (especially not use direct mysql_query), and XoopsQuery (if there is not a specific "query performance" option)
3 proper use of Xoops::textsanitizer for text I/O processing (it is mentioned in "security" but I think it should be stated more formally)

Also, encourage developers to use XOOPS_CACHE_PATH for his module cache files and XOOPS_UPLOAD_PATH for his uploads, not only for a central management but also for security concern.

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Marco Published 09/20/2005 16:12 Updated 09/20/2005 16:16 Home away from home Joined 03/15/2004 Comments 1256

@phppp
about utf-8, i was refering to this comment, in news1.4 release announcement. What do you think about LazyBadger demand ( htlmentities() ), on a dev point of view ???
marco

nb thanks for all others items you pointed us out.

Re: QA_Checking Tool for Modules 2.0RC2 is out !

phppp Published 09/20/2005 16:32 XOOPS Contributor Joined 01/25/2004 Comments 2857

LazyBadger's comment on htmlentities() is correct, and that's why I suggested:
Quote:

3 proper use of Xoops::textsanitizer for text I/O processing

Actually I have not found any problem that could not be solved by properly using Xoops::textsanitizer

Re: QA_Checking Tool for Modules 2.0RC2 is out !

hervet Published 09/20/2005 16:49 Friend of XOOPS Joined 11/04/2003 Comments 2267

html pages validation

Login

Username

Password

Remember me

Search

Advanced Search

Donat-O-Meter

Stats
Goal:	$100.00
Due Date:	Apr 30
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}

{{ record.commit.author.name }} {{ record.commit.author.date | formatDate }}

XOOPS: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Re: QA_Checking Tool for Modules 2.0RC2 is out !

Login

Search

Recent Comments

Re: XOOPS 2.5.11 Final Released

Re: XOOPS 2.5.11 Final Released

Re: XOOPS 2.5.11 Final Released

Re: XOOPS 2.5.11 Final Released

Re: XOOPS 2.5.11 Final Released

Who's Online

Donat-O-Meter

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}

Archives

News archives