[MDL-52194] Flowplayer not working when request_order is set in an insecure configuration - Moodle Tracker

XML

Word

Printable

Affected Branches:
MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE
Fixed Branches:
MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE, MOODLE_30_STABLE
Pull from Repository:
https://github.com/marinaglancy/moodle
Pull Main Branch:
wip-~~MDL-52194~~-master
Pull Main Diff URL:
https://github.com/moodle/moodle/compare/master...marinaglancy:wip-MDL-52194-master
Workaround:

Hide

Set request_order="GP" in your php.ini

Show
Set request_order="GP" in your php.ini
Testing Instructions:
Hide

Set request_order="GPC" in your php.ini (restart apache)

Enable $CFG->rememberusername

logout and login again. Now if you check the $_REQUEST content on any page it won't be empty.

Enable multimedia filter

Upload flv file

Make sure it can be played
Show
Set request_order="GPC" in your php.ini (restart apache) Enable $CFG->rememberusername logout and login again. Now if you check the $_REQUEST content on any page it won't be empty. Enable multimedia filter Upload flv file Make sure it can be played

seems to happen on servers that store cookies in $_REQUEST
This may be some old php version that have request_order set to "GPC". See http://php.net/manual/en/ini.core.php#ini.request-order

Participants:: CiBoT, Damyon Wiese, Dan Poltawski, Marina Glancy, Petr Skoda, Tyler Bannister