Moodle Version 2.8.5
Hi Moodle,
We were having problems where files were not completing when they were downloading, the file download would complete 90+% of the file and then just stop. After we turned off IPS inspection on our firewall the files could be downloaded successfully. Can you please let me know what kind of process is happening when the file is being downloaded through this plugin so that we can allow it through the firewall rather than just bypassing this module. Is there SQL injection? etc etc
Thanks in advance,
Ok, since no one is reponding ... I'll take a 'stab' ...
Just for clarification ... what is a 'Hi Moodle'? and which IPS system are you running?
Think the issue ... whatever IPS system running is causing the problem - configuration.
90%+ is on every file? or files of certain mimetypes ... ie, zip's
Inspection of pluginfile.php shows it to be a very small file:
require_once('config.php');
require_once('lib/filelib.php');
Inspection of lib/filelib.php looks to be building the URL to the file to download. That would involve DB queries to build the link and send that to the browser requesting - which, by the fact the download starts and gets to a certain percentage indicates that Moodle is really done with the request. (??? SQL injection ???)
Links to files could be to repositories outside of your own server ... like Google/Dropbox, whatever. Are these files coming from a file system repo, a file uploaded to Moodle, an internal NFS server etc..? So would think inspecting those links might help resolve.
How about web server config? Anything that might act to restrict bandwidth used, etc?
'spirit of sharing', Ken
One more thing ... where is the file to which moodle links?
Examples (these are real):
Shared file from Google Drive:
is really https://drive.google.com/open?id=0B5gmU8YqbNJQOFZqOTJjYnZuTW8
In moodle it shows:
http://sos.tcea.org/moodle28/mod/url/view.php?id=256
Same file uploaded to Moodle and linked shows:
http://sos.tcea.org/moodle28/mod/resource/view.php?id=257
A file in private files:
http://sos.tcea.org/moodle28/pluginfile.php/39/user/private/owl-binocs.jpg?forcedownload=1
notice the above uses pluginfile.php ...
Since file is in private files that shouldn't work for anyone without logging onto the
moodle.
'spirit of sharing', Ken