Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-52194

Flowplayer not working when request_order is set in an insecure configuration

    XMLWordPrintable

Details

    • MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE
    • MOODLE_27_STABLE, MOODLE_28_STABLE, MOODLE_29_STABLE, MOODLE_30_STABLE
    • wip-MDL-52194-master
    • Hide

      Set request_order="GP" in your php.ini

      Show
      Set request_order="GP" in your php.ini
    • Hide
      1. Set request_order="GPC" in your php.ini (restart apache)
      2. Enable $CFG->rememberusername
      3. logout and login again. Now if you check the $_REQUEST content on any page it won't be empty.
      4. Enable multimedia filter
      5. Upload flv file
      6. Make sure it can be played
      Show
      Set request_order="GPC" in your php.ini (restart apache) Enable $CFG->rememberusername logout and login again. Now if you check the $_REQUEST content on any page it won't be empty. Enable multimedia filter Upload flv file Make sure it can be played

    Description

      Please see forum posts
      https://moodle.org/mod/forum/discuss.php?d=323028
      https://moodle.org/mod/forum/discuss.php?d=323039

      seems to happen on servers that store cookies in $_REQUEST
      This may be some old php version that have request_order set to "GPC". See http://php.net/manual/en/ini.core.php#ini.request-order

      Attachments

        Activity

          People

            marina Marina Glancy
            marina Marina Glancy
            Dan Poltawski Dan Poltawski
            Dan Poltawski Dan Poltawski
            Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Sara Arjona (@sarjona)
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              21/Dec/15