| Topic: | $CFG->forceloginforprofiles option ignored for course profiles |
| Severity: | Major |
| Versions affected: | <2.0.2 (1.9.x not affected) |
| Reported by: | Amr Hourani |
| Issue no.: | MDL-26389 |
| Solution: | Upgrade to latest version |
| Workaround: | Enable $CFG->forcelogin and disable $CFG->opentogoogle (recommended settings for sites with high privacy requirements) |
Description:
$CFG->forceloginforprofiles was ignored for course profiles resulting in search engine indexing and guest user access.