Moodle

The SCORM Module use file.php

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Blocker Blocker
  • Resolution: Fixed
  • Affects Version/s: 1.7
  • Fix Version/s: 1.7
  • Component/s: None
  • Labels:
    None
  • Affected Branches:
    MOODLE_17_STABLE
  • Fixed Branches:
    MOODLE_17_STABLE

Description

One of the last security patch on file.php blocks the scorm module from use.
It checks for not hidden resources but not for not hidden scorm so the result is access denied.

One patch is to check for not hidden scorms and then permit to access to files in the moddata/scorm/<scorm id> directory and childrens.

Bobo

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Martin Dougiamas added a comment -

Petr can you please solve this? You know the circumstances best there.

Show
Martin Dougiamas added a comment - Petr can you please solve this? You know the circumstances best there.
Hide
Permalink
Petr Škoda (skodak) added a comment -

I did not like the ugly Resource hack in the first place, because the correct way is to store module data in moddata directory, course files should be always 'open' for anybody who can access course itself.

Where is scorm storing its data?

Show
Petr Škoda (skodak) added a comment - I did not like the ugly Resource hack in the first place, because the correct way is to store module data in moddata directory, course files should be always 'open' for anybody who can access course itself. Where is scorm storing its data?
Hide
Permalink
Roberto Pinna added a comment -

The scorm data are stored in moddata/scorm/<scorm id>/

Show
Roberto Pinna added a comment - The scorm data are stored in moddata/scorm/<scorm id>/
Hide
Permalink
Petr Škoda (skodak) added a comment -

thanks, I will get to this problem soon

Show
Petr Škoda (skodak) added a comment - thanks, I will get to this problem soon
Hide
Permalink
Petr Škoda (skodak) added a comment -

If I understand it properly, the problem shoud be now fixed in cvs, please test it and report back

Thanks!

Show
Petr Škoda (skodak) added a comment - If I understand it properly, the problem shoud be now fixed in cvs, please test it and report back Thanks!
Hide
Permalink
Roberto Pinna added a comment -

At the first check it seems to work rigthly.

Many thanks!!!

Show
Roberto Pinna added a comment - At the first check it seems to work rigthly. Many thanks!!!
Hide
Permalink
Petr Škoda (skodak) added a comment -

thanks for testing, closing now

Show
Petr Škoda (skodak) added a comment - thanks for testing, closing now

People

Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved:
Atlassian JIRA (v4.4.3#663-r165197) | Report a problem
Powered by a free Atlassian JIRA open source license for Moodle. Try JIRA - bug tracking software for your team.