Security and privacy

 
 
Picture of Daniele Cordella
Is notification page supposed to be free of require_login()?
Group Developers

It is late in the night.
I am upgrading moodle code. (git fetch...)
Baby cries and I run to him.
The time passes and I go to sleep.
Next morning I go back to notification page... and login is not required.
Moodle upgrade happens regularly.
Is this supposed to be allowed?

 
Average of ratings: -
Tim at Lone Pine Koala Sanctuary
Re: Is notification page supposed to be free of require_login()?
Group DevelopersGroup Documentation writersGroup Particularly helpful Moodlers

It has to be. For major upgrades, like 1.9 -> 2.0, the database tables that the login code uses may have changed a lot between releases, so require_login cannot work until after the upgrade is comlete.

This is why you should put your site into maintenance mode before starting to upgrade.

 
Average of ratings:Useful (1)