Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-58330

Database upgrades can be triggered by unauthenticated user

    XMLWordPrintable

Details

    • MOODLE_30_STABLE, MOODLE_31_STABLE, MOODLE_32_STABLE

    Description

      The issue occurs when adding an additional plugin to the site.

      As a non logged in user you can go to the path sitename.com/admin and you will be taken to the plugin screen, you can then proceed and complete the installation before being taken to the login page.

      This also occurs when the site is placed in maintenance mode via the Moodle interface.

       

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents Moodle from functioning correctly. MDL-26973 Installation is still available to anyone despite site being in maintenance mode

          • Critical - Crashes server, loss of data, severe memory leak
          • Closed

          Bug - A problem which impairs or prevents Moodle from functioning correctly. MDL-49832 Able to upgrade moodle database whilst not logged in!

          • Minor - Minor loss of function where workaround is possible
          • Closed

          Activity

            People

              Unassigned Unassigned
              jamie.biddulph Jamie Biddulph
              David Woloszyn, Huong Nguyen, Jake Dallimore, Meirza, Michael Hawkins, Raquel Ortega, Safat Shahin, Stevani Andolo
              Votes:
              2 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: