Possible Bug

Possible Bug

ដោយ web dzinez នៅ
ចំនួនតប៖ 9
Any post / topic that has a "less than" sign gets stripped. I am not even able to post an example on this board to explain the problem. Because every time I use "Less than" sign, the text after it gets completely stripped.
មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ web dzinez

Re: Possible Bug

ដោយ Mary Cooch នៅ
រូបភាព Documentation writers រូបភាព Moodle HQ រូបភាព Particularly helpful Moodlers រូបភាព Testers រូបភាព Translators
Hi there. I don't think it is a bug as such, but it is the fact that the "less than" sign along with the "more than" sign is part of coding and so Moodle thinks it is some code you maybe shouldn't be putting in. I have tried to do ‹ and › by getting them from here http://copypastecharacter.com/
មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ Mary Cooch

Re: Possible Bug

ដោយ kathy chilvers នៅ
I agree with Mary - Moodle is seeing it as part of the coding.  I have used typing in &lt; where I want < and
&gt; where I want >  to get the more than, less than symbols to show.
មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ kathy chilvers

Re: Possible Bug

ដោយ web dzinez នៅ
Wouldnt that result in a security issue that moodle is not escaping these characters .... If I or a user tries to run a server side php code I am guessing he will be able run it ....
មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ web dzinez

Re: Possible Bug

ដោយ kathy chilvers នៅ

Sorry I do not understand your comment. 

I am not a php person.....my reply was just from a simple understanding of Moodle is web based so therefore putting in a < sign from simple html coding it would be interpreted as as possibly as html tag and that is why you had the problem that you did.  I have found no security issues in typing in the correct code to create a < or > that I wished to appear in a quiz question.

It may be that I did not understand completely what you were asking about. 

មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ kathy chilvers

Re: Possible Bug

ដោយ web dzinez នៅ
I am not sure either, my understanding was anything that was being posted as html should be stripped otherwise there could be a security concern .. Is there a restriction on what html can be posted .. if not, then a hacker can deface a website by posting arbitrary html. Just a thought
មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ web dzinez

Re: Possible Bug

ដោយ Tim Hunt នៅ
រូបភាព Core developers រូបភាព Documentation writers រូបភាព Particularly helpful Moodlers រូបភាព Peer reviewers រូបភាព Plugin developers
If you want a really secure solution, then yes, the simple answer is never to let the user input HTML.

Unfortunately, for Moodle developers, communication and teaching is enhanced by being able to use richly styled content. So, we can't get around processing HTML. Therefore, we have a lot of code for cleaning up the HTML that in input, and it is that code that it stripping stuff that follows a < sign that does not look like a safe HTML tag. Note that this problem only occurs when you are not using the HTML editor.
មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ Tim Hunt

Re: Possible Bug

ដោយ Debora Weber-Wulff នៅ
But Tim, what if the exam is on HTML? We are not all English teachers.... Moodle should not interpret HTML-Input, but enclose it in a preformatted tag. Same goes for programming code, which has lots of less than and greater than signs.

This problem seemed to have been solved and has now reappeared...
មធ្យមភាគនៃរង្វាយតម្លៃ: -
ឆ្លើយតបទៅកាន់ Debora Weber-Wulff

Re: Possible Bug

ដោយ Tim Hunt នៅ
រូបភាព Core developers រូបភាព Documentation writers រូបភាព Particularly helpful Moodlers រូបភាព Peer reviewers រូបភាព Plugin developers
If you are teaching HTML, then you should know about the differences when using the HTML editor or not, and about escaping < as &lt; where appropriate.

Moodle should handle teaching both English and HTML just fine, and it should do so with good usability for students and teachers. However, it is hard, and we are not quite there yet.
មធ្យមភាគនៃរង្វាយតម្លៃ: -