MSA-08-0024: Overriding of frozen values in Moodle forms

MSA-08-0024: Overriding of frozen values in Moodle forms

by Petr Skoda -
Number of replies: 0
Topic: Overriding of frozen values in Moodle forms
Severity: Minor
Versions affected: < 1.8.7, < 1.9.3
Reported by: Ashley Holman
Issue no.: MDL-16839
Solution: update to latest releases

Description:

Anshley Holman reported that it is possible to side step user profile locking mechanism. The cause of this is in our quickforms integration, unfortunately it can not be fixed without potential regressions. We have decided to work around this problem by using setConstant() together with hardFreeze(). Please update your code in a similar way if required. The problem will be fully resolved in 2.0.