Code injections via moodle internal messenger possible?

Re: பதில்: Re: Code injections via moodle internal messenger possible?

by Gareth J Barnard -
Number of replies: 0
Picture of Core developers Picture of Particularly helpful Moodlers Picture of Plugin developers
Hi Alex,

I think its seeing it as HTML, but perhaps not understanding the PHP syntax. But then again, PHP is a pre-processor that processes the combined HTML / PHP and converts its tags into HTML that the browser can understand. I don't know if it is recognised as media, I didn't look any further after finding the one place that C14N() is called.

Kind regards,

Gareth