Club Drupal

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

20130923022437 - Your web server should not be able to write to your modules directory. This is a security vulnerable. Consult the Security Review file permissions check help for mitigation steps.

 */

// Include security_review.inc file for when invoked from outside the site.

/**

 * Implementation of hook_drush_command().

      'log' => 'Log results of each check to watchdog, defaults to off',

      'lastrun' => 'Do not run the checklist, just print last results',

      'check' => 'Comma-separated list of specified checks to run. See README.txt for list of options',

      'short' => "Short result messages instead of full description (e.g. 'Text formats').",

      'results' => 'Show the incorrect settings for failed checks.',

    ),

 * Run checklist and display results command.

 */

function security_review_drush() {

  // Retrieve the checklist.

  $checklist = security_review_get_checklist();

    $store = $log = $lastrun = FALSE;

  }

  $specific_checks = drush_get_option_list('check');

  $short_titles = drush_get_option('short');

  if (!empty($short_titles)) {

    $short_titles = TRUE;

  if (!$lastrun) {

    if (!empty($specific_checks)) {

      foreach ($specific_checks as $check_name) {

        if (empty($check_name)) {

          continue; // Can happen if user puts space after comma.

          $module = 'security_review';

        }

        if (isset($checklist[$module][$check_name])) {

        }

      }

    }

    else {

      // Unset file_perms of security_review because drush is running as a

  }

  elseif ($lastrun) {

    // Retrieve results from last run of the checklist.

    // Print results.

      }

    }

  }

        case 'incorrect_htaccess':

            $element['findings']['descriptions'][] = t("The .htaccess file exists but does not contain the correct content. It is possible it's been maliciously altered.");

            break;

        case 'writable_htaccess':

          $element['findings']['descriptions'][] = t("The .htaccess file is writeable which poses a risk should a malious user find a way to execute PHP code they could alter the htaccess file to allow further PHP code execution.");

          break;

    $result = FALSE;

    $check_result_value[] = 'missing_htaccess';

  }

  else {

    $contents = file_get_contents($directory . '/.htaccess');

    // Text from includes/file.inc.

      $result = FALSE;

      $check_result_value[] = 'incorrect_htaccess';

    }

description = "Site security and configuration review module."

core = 7.x

files[] = tests/security_review.test

core = "7.x"

project = "security_review"

  $header = t('Review results from last run !date', array('!date' => $date));

  $desc = t("Here you can review the results from the last run of the checklist. Checks are not always perfectly correct in their procedure and result. You can keep a check from running by clicking the 'Skip' link beside it. You can run the checklist again by expanding the fieldset above.");

  foreach ($checks as $check) {

    $message = $check['result'] ? $checklist[$check['namespace']][$check['reviewcheck']]['success'] : $checklist[$check['namespace']][$check['reviewcheck']]['failure'];

    $title = $check['result'] ? t('OK') : t('Error');

    $class = $check['skip'] ? 'info' : ($check['result'] ? 'ok' : 'error');

    '#default_value' => variable_get('security_review_untrusted_roles', array_keys($defaults)),

  );

  $form['security_review_adv'] = array(

    '#type' => 'fieldset',

    '#title' => t('Advanced'),

  foreach ($checklist as $module => $checks) {

    foreach ($checks as $check_name => $check) {

      // Determine if check is being skipped.

        $values[] = $check_name;

        $label = t('!name <em>skipped by UID !uid on !date</em>', array('!name' => $check['title'], '!uid' => $skipped[$module][$check_name]['skipuid'], '!date' => format_date($skipped[$module][$check_name]['skiptime'])));

      }

    }

    elseif (isset($check['callback'])) {

      if (isset($check['file'])) {

        // Handle Security Review defining checks for other modules.

        if (isset($check['module'])) {

        }

      }

      $function = $check['callback'] . '_help';

      if (function_exists($function)) {

files[] = webform_validation.rules.inc

files[] = webform_validation.validators.inc

core = "7.x"

project = "webform_validation"

      ),

      'description' => t('Verifies that a user-entered value contains at most the specified number of words.'),

    ),

    'sum' => array(

      'name' => t('Adds up to'),

      'component_types' => array(

    ),

  );

  if (module_exists('email_verify')) {

    $validators['email_verify'] = array(

      'name' => t('Email Verify'),

      $compare_number = (float) preg_replace('/^[^0-9]+/', '', $rule['data']);

      // Parse the comparision operator and do comparison.

      $error = FALSE;

      if (substr($rule['data'], 0, 2) === '<=') {

          $error = t('less than or equal to');

        }

      }

      elseif (substr($rule['data'], 0, 1) === '<') {

          $error = t('less than');

        }

      }

      elseif (substr($rule['data'], 0, 2) === '>=') {

          $error = t('greater than or equal to');

        }

      }

      elseif (substr($rule['data'], 0, 1) === '>') {

          $error = t('greater than');

        }

      }

      else {

          $error = t('exactly');

        }

      }