Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-68193

db_replace() doesn't emit any audit trail, should emit a Moodle event

    XMLWordPrintable

    Details

      Description

      An admin could either by mistake, or if compromised a malicious admin could do a replace on content across the entire database, or targeted at specific content, and there is no audit trail at all about who did what.

        Attachments

          Activity

            People

            Assignee:
            markn Mark Nelson
            Reporter:
            brendanheywood Brendan Heywood
            Peer reviewer:
            Brendan Heywood
            Integrator:
            Eloy Lafuente (stronk7)
            Tester:
            CiBoT
            Participants:
            Component watchers:
            Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Fix Release Date:
              11/May/20

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 16 minutes
                16m