Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-68193

db_replace() doesn't emit any audit trail, should emit a Moodle event

    XMLWordPrintable

Details

    Description

      An admin could either by mistake, or if compromised a malicious admin could do a replace on content across the entire database, or targeted at specific content, and there is no audit trail at all about who did what.

      Attachments

        Activity

          People

            markn Mark Nelson
            brendanheywood Brendan Heywood
            Brendan Heywood Brendan Heywood
            Eloy Lafuente (stronk7) Eloy Lafuente (stronk7)
            CiBoT CiBoT
            Andrew Lyons, Huong Nguyen, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              11/May/20

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 16 minutes
                16m