I upgraded my dev Moodle server to 3.5.3. All of a sudden I could not login. So, I changed the password using the forgot password and was able to login after changing the password.
After I signed out, I could not login again. Same for admin or regular user. Only way to login again is to change the password, but after logging out, same thing. Cannot login.
Anyone else had the same problem? Is there a fix?
Thank you,
This is due to a recent security update included in 3.5.3.
Some non-standard themes may require updating to include new functionality to work with the login page.
The work-around is to add the following line to your Moodle config.php file.
$CFG->disablelogintoken = true;
This will allow you to login again but circumvents the security fix.
Thank you. That fix the problem. Also, by the time I read this posting, most of the themes are fixed for the token issue.
Ra
Yep - that fixed it for me as well...
Seems like the "Essential" theme we're using (https://moodle.org/plugins/theme_essential) has not been upgraded for this new security feature yet..
If using a non-core theme they must update to include a login token or a change to the moodle config to turn off login tokens is required.
New Moodle Doc helps explain the issue. A new login token is required for better security I am guessing.
https://docs.moodle.org/dev/Login_token
Fordson theme update 15 fixes this issue for our theme.
