Forums / Contribution-Writing Guidelines / Plugin Submission feedback

Plugin Submission feedback

Views: 117

Results 1 to 5 of 5
6 Sep 2026, 1:12 AM
#1
flappingfish avatar

flappingfish

Zen Follower

Join Date:
Nov 2020
Posts:
319
Plugin Contributions:
4

Plugin Submission feedback

I am curious if it would be possible for the plugin submission to provide a bit more feedback to authors, this seems like it could have done with a reason code/explanation...

Submission processed
Your submission of Mollie Payments For ZenCart v.1.0.0 has been received and its automated security scan has finished.

Scan result: 1 item(s) flagged (highest severity: High). A moderator will take a look — no action is needed from you yet.

Status: pending moderation review.

Asking for a friend 😄

8 Sep 2026, 9:47 PM
#2
wilt avatar

wilt

Oji-san

Join Date:
Jun 2003
Location:
Newcastle UK
Posts:
1,927
Plugin Contributions:
3

Re: Plugin Submission feedback

The process here would normally be that the moderator would review any security issues and ask for changes if they thought it would be necessary.

The current automated has a tendency to generate false positives especially around the use of "eval"

So sending the security report to the uploader currently is more likely to trigger even more contact with moderators.

As we refine the system, this may become an option in the future.

8 Sep 2026, 9:54 PM
#3
flappingfish avatar

flappingfish

Zen Follower

Join Date:
Nov 2020
Posts:
319
Plugin Contributions:
4

Re: Plugin Submission feedback

Yeah i would personally have preferred a generic thankyou email too rather than a notification of a possible issue. I tested the module as best I could and then went live. Api logs on mollies side look clean and I am yet to have one of those "my order did not process after payment" complaints i occasssionally get with the stripe module.

You professionals may see a flaw that needs correcting or the community may have suggestions for polishing touches post release in all honesty. Im proud of it though, hopefully gets the seal of approval 🙂

8 Sep 2026, 10:09 PM
#4
wilt avatar

wilt

Oji-san

Join Date:
Jun 2003
Location:
Newcastle UK
Posts:
1,927
Plugin Contributions:
3

Re: Plugin Submission feedback

So I will share the security report for Mollie Payments, but also say I don't generally moderate plugins, other members of the team do. I'm sure someone will get to it soon

[HIGH] static_php — Decode function feeding a dynamic execution call (possible obfuscated payload) in Mollie for zen v1.0.0/zc_plugins/MolliePayments/v1.0.0/catalog/includes/classes/MolliePaymentsService.php (obfuscated-payload) 

Basically the php static analyser hates eval. However given the way our configuration settings db schema works using eval here has become commonplace, something I hope v3 will address

8 Sep 2026, 10:24 PM
#5
flappingfish avatar

flappingfish

Zen Follower

Join Date:
Nov 2020
Posts:
319
Plugin Contributions:
4

Re: Plugin Submission feedback

I fed the feedback into the assistant who said it can and should be removed.. is there a method to correct a submission whilst it is pending review? Or easier to concentrate on the payment plan and submit an update once approved?