Weird session problem after deleting admin/delete.php

Weird session problem after deleting admin/delete.php

Atanas Radenski -
回帖数:1
I followed a recent recommendation to fix sequrity problem by deleting admin/delete.php (http://security.moodle.org/mod/forum/discuss.php?d=115), and I ran into trouble (hopefully not related to the deletion). I started experiencing "The weird session problem", as described here: http://moodle.org/mod/forum/discuss.php?d=10941. Students find themselves logged as someone else when they use the back button on to review previous pages.
 
I am still using Moodle 1.3.4 (did not want to upgrade during the school year). Students access Moodle from university labs, while Moodle resides on a commercial server outside of the school domain (www.radenski.com). 
 
Could have my deletion of admin/delete.php created this problem? If so, what to do?
 
My school is using a proxy, Squid. They have upgraded to a new Squid release. Can this be a proxy issue, after all?
 
I have used this same installation for aboiut a year, and never had any difficulties like this. This is the last week of classes and want to have things finish smoothly. What is best to do now?
 
Any hints will be apprecaiated.
Atanas Radenski
回复Atanas Radenski

Re: Weird session problem after deleting admin/delete.php

Martin Dougiamas -
Core developers的头像 Documentation writers的头像 Moodle HQ的头像 Particularly helpful Moodlers的头像 Plugin developers的头像 Testers的头像
Firstly, the two things are not related. That script is not used in any way by Moodle.

As far as I know we still don't have any firm knowledge about the cause of that problem. It's something in PHP, most likely. I still suspect proxies too, in some cases. It's definitely not a Moodle bug.

Moodle 1.5 has a detection capability that will detect this problem and ask the user to log in again.