Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-52194

Flowplayer not working when request_order is set in an insecure configuration

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      1. Set request_order="GPC" in your php.ini (restart apache)
      2. Enable $CFG->rememberusername
      3. logout and login again. Now if you check the $_REQUEST content on any page it won't be empty.
      4. Enable multimedia filter
      5. Upload flv file
      6. Make sure it can be played
      Show
      Set request_order="GPC" in your php.ini (restart apache) Enable $CFG->rememberusername logout and login again. Now if you check the $_REQUEST content on any page it won't be empty. Enable multimedia filter Upload flv file Make sure it can be played
    • Workaround:
      Hide

      Set request_order="GP" in your php.ini

      Show
      Set request_order="GP" in your php.ini
    • Affected Branches:
      MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE
    • Fixed Branches:
      MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE, MOODLE_30_STABLE
    • Pull Master Branch:
      wip-MDL-52194-master

      Description

      Please see forum posts
      https://moodle.org/mod/forum/discuss.php?d=323028
      https://moodle.org/mod/forum/discuss.php?d=323039

      seems to happen on servers that store cookies in $_REQUEST
      This may be some old php version that have request_order set to "GPC". See http://php.net/manual/en/ini.core.php#ini.request-order

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Fix Release Date:
                21/Dec/15