Details
-
Type:
Improvement
-
Status:
Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: 1.9.5
-
Fix Version/s: None
-
Component/s: Other
-
Labels:None
-
Affected Branches:MOODLE_19_STABLE
Description
If a file in Moodle has any php code in it at all it should not have a .html extension. This has proved unsettling for security conscious users. For example, go to
http://moodle.site/backup/backup_form.html
and you get a screen full of code. This is perceived as a possible security issue even if it actually isn't. It would be better if code could not be readily viewed through the web interface.
Activity
- All
- Comments
- History
- Activity
- Source
- Test Sessions
