Hey Guys,
I noticed something kinda odd when putting up a Moodle site. During the login process the Moodle Session Cookie appears to be modified by the client side. The reason why I say this is because a Cookie Poisoning alert has been raised and upon further inspection the Moodle Session Cookie does appear changed. Below is an excerpt of the alert:
url: /login/index.php
Cookie Poisoning | |
Cookie Name | MoodleSession |
Domain | funstuff.org |
Path | / |
Old Value | 3s6r6a2fri94c8idcajhms0202 |
Corrupted Value | 9mtc0hoicru8svo1ppv6vnqte1 |
The reason why I'm posting is I'm curious if anyone knows why Moodle has chosen to do this?
Thanks,
Rob