Moodle

admin/plugins.php does require_capability before require_login

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Minor Minor
  • Resolution: Fixed
  • Affects Version/s: 2.2.7, 2.3.4, 2.4, 2.5
  • Fix Version/s: 2.2.8, 2.3.5, 2.4.2
  • Component/s: Administration
  • Labels:

Description

Leading to ugly errors if you are not logged in.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Tim Hunt added a comment -

This is not really a security issue, since it cannot be used to hack your site, so I did not restrict it. Still, there are security aspects, which is why I made the _22 branch.

Show
Tim Hunt added a comment - This is not really a security issue, since it cannot be used to hack your site, so I did not restrict it. Still, there are security aspects, which is why I made the _22 branch.
Hide
Permalink
David Mudrak added a comment -

+1 thanks for spotting and fixing this Tim.

Show
David Mudrak added a comment - +1 thanks for spotting and fixing this Tim.
Hide
Permalink
Eloy Lafuente (stronk7) added a comment -

The main moodle.git repository has just been updated with latest weekly modifications. You may wish to rebase your PULL branches to simplify history and avoid any possible merge conflicts. This would also make integrator's life easier next week.

TIA and ciao

Show
Eloy Lafuente (stronk7) added a comment - The main moodle.git repository has just been updated with latest weekly modifications. You may wish to rebase your PULL branches to simplify history and avoid any possible merge conflicts. This would also make integrator's life easier next week. TIA and ciao
Hide
Permalink
Eloy Lafuente (stronk7) added a comment -

Integrated (22, 23, 24 & master), thanks!

Show
Eloy Lafuente (stronk7) added a comment - Integrated (22, 23, 24 & master), thanks!
Hide
Permalink
Adrian Greeve added a comment -

Tested on the 2.2, 2.3, 2.4 and master integration branches. All branches redirected to the login page.
Test passed.

Show
Adrian Greeve added a comment - Tested on the 2.2, 2.3, 2.4 and master integration branches. All branches redirected to the login page. Test passed.
Hide
Permalink
Dan Poltawski added a comment -

Hurray! We did it! Thanks to all the reporters, testers, user and watchers for a bumper week of Moodling!

Show
Dan Poltawski added a comment - Hurray! We did it! Thanks to all the reporters, testers, user and watchers for a bumper week of Moodling!

People

Vote (0)
Watch (4)

Dates

  • Created:
    Updated:
    Resolved: