Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-52194

Flowplayer not working when request_order is set in an insecure configuration

    XMLWordPrintable

Details

    • MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE
    • MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE, MOODLE_30_STABLE
    • wip-MDL-52194-master
    • Hide

      Set request_order="GP" in your php.ini

      Show
      Set request_order="GP" in your php.ini
    • Hide
      1. Set request_order="GPC" in your php.ini (restart apache)
      2. Enable $CFG->rememberusername
      3. logout and login again. Now if you check the $_REQUEST content on any page it won't be empty.
      4. Enable multimedia filter
      5. Upload flv file
      6. Make sure it can be played
      Show
      Set request_order="GPC" in your php.ini (restart apache) Enable $CFG->rememberusername logout and login again. Now if you check the $_REQUEST content on any page it won't be empty. Enable multimedia filter Upload flv file Make sure it can be played

    Description

      Please see forum posts
      https://moodle.org/mod/forum/discuss.php?d=323028
      https://moodle.org/mod/forum/discuss.php?d=323039

      seems to happen on servers that store cookies in $_REQUEST
      This may be some old php version that have request_order set to "GPC". See http://php.net/manual/en/ini.core.php#ini.request-order

      Attachments

        Activity

          People

            marina Marina Glancy
            marina Marina Glancy
            Dan Poltawski Dan Poltawski
            Dan Poltawski Dan Poltawski
            Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Laurent David, Raquel Ortega, Sara Arjona (@sarjona)
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              21/Dec/15