Martin Dougiamas

Yep, what Greg said.

To be more specific, add:

      require("location/moodle/config.php");

at the top of each of your PHP scripts, and then:

      require_login(); 

followed by your code. All this does is check that the person is logged in to the server - it does not do a check for enrolment in a course (sadly this isn't currently possible in normal resources).

Another way is to use the "Program" resource type. This passes url, username, password etc to the external resource (as part of the URL, ie GET). You can get more details on the format by looking in mod/resource/view.php (must document it some day). The Program type probably needs some work to pass information in a less convoluted way, but it should be usable enough.

No, not possible ... that would be a massive security risk.

Perhaps that might be an optional feature to add sometime, though, for admins only, perhaps.

There shouldn't even be any _notes folders in Moodle ... they've probably been added by Dreamweaver or another tool you used to upload Moodle. Just delete them all from your version of Moodle - as they will cause a number of problems.

Almost certainly this is because the PHP variable short_open_tag is not enabled. See the install docs: http://moodle.org/doc/?frame=install.html&sub=webserver

Please check to see if you are running a security product like ZoneAlarm or Norton Security which might be blocking your browsers from sending referrer information.