Martin Dougiamas

Wierd! I strongly doubt it's anything to do with Moodle. HTML pages are often compressed with gzip for transmission - perhaps this is un-decrypted traffic? Try turning off all firewalls, proxies, caches etc between you and the server to get raw access as much as possible.

Yes, you need to suggest they install GD.

I just took a look at your server's phpinfo() and it definitely does not have GD. Perhaps the phpinfo() you saw was actually on another machine within a server cluster or something.

In any case, recompiling Apache is not necessary in this case, they need to recompile PHP using the --with-gd and --with-jpeg options.

This has also nothing to do with anti-virus software, it's to do with firewalls (which is why you didn't see the problem locally). As far as I can see there is absolutely NO security benefit in disabling referrers. Nevertheless it seems people are increasingly turning this option on in their firewalls (or maybe it's enabled by default) which is why there will definitely be a workaround in the next release: http://moodle.org/bugs/bug.php?op=show&bugid=295

After logging in I was sent to the home page: http://203.86.100.236:8181/moodle/

Check that you don't have security software (eg zonealarm or norton security) that might be stripping referrer information from your browser traffic.

I logged in OK - but when I logged out I got forwarded to http://host-236.palcomonline.com:8181/moodle/ which doesn't exist.

It's hard to say what the problem might be since the copy of Moodle you have there has been heavily modified, so I have no idea what your code is doing. Site looks nice though.