Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-66068

Forms library API is not 100% compatible with Web Service requests

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 3.7
    • Fix Version/s: None
    • Component/s: Forms Library
    • Labels:
    • Affected Branches:
      MOODLE_37_STABLE

      Description

      Please, see MDL-65973 for reference.

      The form lib internaly do some sesskey checks to validate a form submission (for security, mostly).
      This is not compatible with WS requests so we've had to patch this via $USER->ignoresesskey

      Maybe we should look for a generic solution for this at the form library? formlibs.php _process_submission() function does the sesskey check. Should we ignore the sesskey check when the global WS_SERVER is set?

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                jleyva Juan Leyva
                Participants:
                Component watchers:
                Jake Dallimore, Jun Pataleta, Ryan Wyllie
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: