copy/paste url of " log In As " to another browser doesn't work

copy/paste url of " log In As " to another browser doesn't work

by REMI PICARD (substitute) -
Number of replies: 7

hi,

i use moodle 3.5.2 with admin account in firefox brwser.

when i need to log in as a student account, i copy the url link of the text "log in as " (ie : https://www.mybebsitecourse/loginas.php?id=1&user=161&sesskey=64gNblabla602aPB ) from the profil page (of course i'm admin)

and i paste it into Chrome url address bar. but it doesn't work, moodle refuse to log...

the url pasted only works in firefox (home session of the admin) .

is it normal ? the sesskey thing is only available in the same browser or the same session ?


can't i use many different browsert to simulate multiple student in the same time without knowing their password ?


Best regards



Average of ratings: -
In reply to REMI PICARD (substitute)

Re: copy/paste url of " log In As " to another browser doesn't work

by Jon Witts -
Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers

You can do this, but not by just copying and pasting the URL...

Log into each browser as your admin account and then login as each student in each different browser. The session key is unique to the session of that browser and will not work in another browser...

Average of ratings: -
In reply to Jon Witts

Re: copy/paste url of " log In As " to another browser doesn't work

by REMI PICARD (substitute) -

moodle offer the "facility" to an admin to log in 2 time at the same time in different broswser ? isn't it a danger ?

Average of ratings: -
In reply to REMI PICARD (substitute)

Re: copy/paste url of " log In As " to another browser doesn't work

by Visvanath Ratnaweera -
Picture of Particularly helpful Moodlers Picture of Translators
Any "facility" is a security risk. In this case, transferable "hot links" of "log in as" would be a greater risk than allowing a double log in.
Average of ratings: -
In reply to REMI PICARD (substitute)

Re: copy/paste url of " log In As " to another browser doesn't work

by AL Rachels -
Picture of Core developers Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers

If you cannot trust your admin with two log ins at the same time, then why did you make them an admin in the first place? The fact they are an admin could be more dangerous than being able to log in multiple times.

Average of ratings: -
In reply to AL Rachels

Re: copy/paste url of " log In As " to another browser doesn't work

by REMI PICARD (substitute) -

i mean there should be a "root" account with only 1 session available.

and admin accounts with multiple accounts availables.

Each multiple sessions should send a message to each other login and a log activity to the super admin (root), it would be more secured.

Gmail performs that (alerting multiple instances of the same account in the same time).


Average of ratings: -
In reply to REMI PICARD (substitute)

Re: Re: copy/paste url of " log In As " to another browser doesn't work

by Visvanath Ratnaweera -
Picture of Particularly helpful Moodlers Picture of Translators
You wrote:
> there should be a "root" account with only 1 session available.

If that session is held because the device ran out of battery power, then what?

Moodle is not Gmail - one is a client the other a server.

Average of ratings: -