Hi, a regular student access user was able to change their grades/scores in Moodle's SCORM report by using javascripts (findLMSAPI, lmsAPI, SetScore) in the Chrome browser developer tools console. Essentially, the student can cheat the system by injecting his own javascripts to give himself a higher score without ever having to complete the SCORM module. Has anyone ran into this issue?
We came across this issue from trying to improve SCORM completion/progress tracking in Moodle for Storyline via javascripts. The same javascripts were tested in the developer tools console and we were able to change the SCORM report score directly for that particular user. Is this supposed to happen?
Thanks.