Issue Details (XML | Word | Printable)

Key: MDL-15559
Type: Improvement Improvement
Status: Open Open
Priority: Major Major
Assignee: Eloy Lafuente (stronk7)
Reporter: Oleg Sychev
Votes: 0
Watchers: 1
Operations

Add/Edit UI Mockup to this issue
If you were logged in you would be able to see more operations.
Moodle

Add an option to automatic backup to keep several backup files

Created: 07/Jul/08 06:49 PM   Updated: 10/Jul/08 04:38 PM
Return to search
Component/s: Backup
Affects Version/s: 1.9.1
Fix Version/s: None

Participants: Eloy Lafuente (stronk7), Oleg Sychev and Petr Skoda
Security Level: None
Affected Branches: MOODLE_19_STABLE


 Description  « Hide
Currently automaticv backup saves only one file, deleting previous files on the next backup. This scheme has very high risk of data loss: we encountered an attempt to illegally delete data made shortly before automatic backup work, so it backuped new, damaged course and delete old backup. This could potentially lead to major data loss.

The problem is easily solved by keeping several backup files (possibly admin can chose how many). Also it would be good to automaticaly send backup files via e-mail since experienced hacker can attempt to delete them from Moodle catalog (or store it in some place, accessible only for admins).

Please heed this problem. Kepping olny one backup file in automatic backup is a serious flaw in the site security.

 All   Comments   Change History   Version Control      Sort Order: Ascending order - Click to sort in descending order
Petr Skoda added a comment - 10/Jul/08 03:42 AM
Hello, the built in scheduled backups are not recommended for large sites, you can do sql database dumps or database file snapshots.

Petr Skoda added a comment - 10/Jul/08 03:43 AM - edited
... if you need to restore one course only, you can restore the site into some development server review course and use normal backup/restore to transfer it back to the production server.

Eloy Lafuente (stronk7) added a comment - 10/Jul/08 04:38 PM
Hi Oleg,

admins can define how many backups want to keep for automated backups.

Other options like copying them to protected area/server or sending them by email should be handled by admins but not within Moodle (mainly because Moodle is executed as non-privileged user and it cannot perform those actions).