"admin":"admin"

"admin":"admin"

by Colin G -
Number of replies: 2 

Someone flagged this as being a security issue

admin credentials on moodles login page. I think it has something to do with yui config but exactly why and what is the reference to admin there for ???

"iconsystemmodule":"core\/icon_system_fontawesome","jsrev":"1676322633","admin":"admin","svgicons":true,"usertimezone

Average of ratings: -
In reply to Colin G

Re: "admin":"admin"

by Tim Hunt -
Picture of Core developers Picture of Documentation writers Picture of Particularly helpful Moodlers Picture of Peer reviewers Picture of Plugin developers
Those are not admin credentials!

Moodle has a little-used option (https://github.com/moodle/moodle/blob/master/config-dist.php#L181) to alter the URL of all the admin pages from https://your.moodle/admin/whatever... to https://your.moodle/something-else/whatever....

That bit of JavaScript configuration is telling the JavaScript that that otion is not being used, that the bit of URL for the admin screens is still admin.
Average of ratings: Useful (1)
In reply to Tim Hunt

Re: "admin":"admin"

by Colin G -
ok thanks for explaining that. Looks like this feature is going to be removed. I have never seen it used so makes sense.
Average of ratings: -