Commit Graph

25 Commits

Author SHA1 Message Date
Eloy Lafuente (stronk7) ed0b6f0da4 MDL-61656 report_security: fix role name 2018-03-16 02:24:59 +01:00
sam marshall a938e4096c MDL-60174 core_dml: fix miscellaneous incorrect recordset usage
The new recordset support for Postgres requires transactions and
will cause errors if recordsets are not closed correctly. This
commit fixes problems that were identified during unit tests, and
via some basic code analysis, across all core code. Most of these
are incorrect usage of recordset (forgetting to close them).
2017-11-27 11:10:33 +00:00
David Mudrák 911fcae895 MDL-59969 admin: Warn admins if a development libs directory exists
We can't really control the direct web access to directories in dirroot,
that is part of the server setup. So we at least warn admins as they may
not realize the risks of having directories like vendor or node_modules
exposed.

Credit goes to Petr Škoda for mentioning the PHPUnit issue CVE-2017-9841
to me.
2017-09-07 10:53:35 +02:00
David Monllao f17fc9dba7 MDL-58109 report_security: Remove empty line 2017-03-14 11:27:26 +01:00
Brendan Heywood f2b7572a54 MDL-58109 reports: Add security check for preventexecpath 2017-03-01 15:18:30 +11:00
Marina Glancy 6f19da0549 MDL-57186 media: fix link in security report 2016-11-29 13:54:49 +08:00
Marina Glancy fab11235d8 MDL-38158 core_media: Convert media players to new plugin type
AMOS BEGIN
  MOV [siteyoutube,core_media],[pluginname,media_youtube]
  MOV [siteyoutube_desc,core_media],[pluginname_help,media_youtube]
  MOV [sitevimeo,core_media],[pluginname,media_vimeo]
  MOV [sitevimeo_desc,core_media],[pluginname_help,media_vimeo]
  MOV [html5audio,core_media],[pluginname,media_html5audio]
  MOV [html5audio_desc,core_media],[pluginname_help,media_html5audio]
  MOV [html5video,core_media],[pluginname,media_html5video]
  MOV [html5video_desc,core_media],[pluginname_help,media_html5video]
  MOV [flashanimation,core_media],[pluginname,media_swf]
  MOV [flashanimation_desc,core_media],[pluginname_help,media_swf]
AMOS END
2016-11-04 17:30:40 +08:00
Brendan Heywood 657ddbf592 MDL-55273 admin: Change $CFG->cookiesecure default to on 2016-08-22 09:20:32 +10:00
Ankit Agarwal 9e01886562 MDL-48559 reports: security report checks for web cron 2015-01-27 11:00:40 +05:30
Tony Butler 1e31f11852 MDL-28484 core_lib: Add function for https detection
Signed-off-by: Tony Butler <tonyjbutler@gmail.com>
2014-10-03 13:02:29 +01:00
Paul Holden 3ae478ffd1 MDL-21042 report_security: don't display warning for riskbackup unnecessarily 2014-08-06 19:53:54 -07:00
Petr Škoda 6a27439b8f MDL-43529 delete all unnecessary register_globals checks 2014-01-12 17:58:39 +08:00
Eloy Lafuente (stronk7) 7b583eea95 Merge branch 'wip-MDL-43058-master' of git://github.com/abgreeve/moodle 2013-12-03 19:33:15 +01:00
Adrian Greeve 8b1d424098 MDL-43058 reports: updated sql to return fullnames in security check reports. 2013-11-27 14:43:33 +08:00
Simon Coggins b92709db40 MDL-43045 report: Fix missing role name in security overview report 2013-11-26 08:14:10 +13:00
Adrian Greeve 329846f198 MDL-40430 - Libraries: Deprecate print_context_name(). 2013-07-09 16:11:55 +08:00
Simon Coggins ec2d8ceb88 MDL-35332 lib: Improve security of hashed passwords 2013-02-09 06:47:57 +13:00
Sam Hemelryk f44e7d0a77 Merge branch 'MDL-36357' of git://github.com/danpoltawski/moodle
Conflicts:
	user/view.php
2013-01-09 09:34:22 +13:00
Petr Škoda 0662bd677c MDL-29996 remove deprecated stuff from filter code 2012-12-30 17:02:18 +01:00
Dan Poltawski 0e35ba6ffc MDL-36357 cleanup - remove double semicolons 2012-11-15 09:51:26 +08:00
Tim Hunt 9695ff811b MDL-34657 user sorting: consistent sorting everywhere.
This commit coverts everything in the codebase to use the new
users_order_by_sql function when sorting lists of users. More details in
the bug.

Note that this does not change places where users are displayed in a
sortable table, and the sort order comes from the table.
2012-09-27 12:41:42 +01:00
Ankit Agarwal d197ea4300 MDL-34549 libraries: Replace get_context_instance_by_id() by context::instance_by_id() 2012-08-24 11:30:10 +08:00
Frederic Massart 21c08c63ca MDL-34458 Librairies: Replaced deprecated get_context_instance() 2012-07-24 16:58:17 +08:00
Petr Skoda c52551dc3c MDL-8249 localise standard role names and descriptions if empty 2012-07-06 08:22:34 +02:00
Petr Skoda d9298dc6fd MDL-29030 standardise report_security 2011-11-06 12:22:46 +01:00