Moodle in English

Posts made in Moodle in English

Moodle in English -> Installing and upgrading help After upgrade to 3.3.1+, login page does not load - error - too many redirects -> Re: After upgrade to 3.3.1+, login page does not load - error - too many redirects

by Matt Spurrier -

So the first one looks to be referencing SSL resources under a HTTPS site, so that's expected, the second, however, indicates that the $_SERVER['HTTPS'] = on is not being sent to the server, or it's not recognising that it's secure.


How have you installed PHP? This usually indicates that either you're using a https offloading proxy, or you're using PHP FPM and it's not setting the HTTPS headers.


In your original post, having it redirect continuously is also indicative of PHP not 'knowing' that the server is SSL.

Average of ratings: -

Moodle in English -> Installing and upgrading help Global Search Solr Hardware Requirements -> Re: Global Search Solr Hardware Requirements

by Matt Spurrier -

Resource requirements vary greatly depending on the type of content you're indexing, and the users usage patterns.

Similar to a database, assigning cache memory speeds things up to a degree. At the moment, for example, moodle.org is only allocated 1024mb as it's not heavily used, but usage shows the process peaks over the 512mb default (but only by a little bit).

Average of ratings: Useful (1)

Moodle in English -> Installing and upgrading help Moodle move to AWS (HTTPS to HTTP) behind ELB -> Re: Moodle move to AWS (HTTPS to HTTP) behind ELB

by Matt Spurrier -

Hi Steve,

AWS's ELB should be sending HTTPS headers to Apache, which in turn may already be setting HTTPS to on.

Moodle's config.php should still show https:// even if the local Apache server is serving via HTTP to the upstream proxy.


To check this is the case, create a test.php file in the wwwroot with the contents of

<?php phpinfo();

then visit it, check for X_FORWARDED_PROTO and/or HTTPS.


If the config.php has http:// the it tries to redirect to that URL in the event it's visited on a different protocol, so this would explain the too many redirects.


Hope that helps.


Matt


Average of ratings: -

Moodle in English -> Security and privacy Cloudflare Security Issue

by Matt Spurrier -

Hi everyone,

Moodle HQ recently became aware of a global security bug issue in Cloudflare. Details of the issue are here - https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

Moodle uses some of Cloudflare’s services, but please note that the majority of systems have not been impacted by this issue. 

Moodle HQ believes that moodle.org or moodle.net passwords were NOT affected, however, we highly recommend that if you do have accounts for both or either sites to:

- Change your passwords
- Make sure that you do not have the same password across multiple sites 

If you have further queries please post your questions here or follow @moodlesites on Twitter for any necessary updates.


Average of ratings: Useful (1)