Inlägg av Visvanath Ratnaweera

Bild på Particularly helpful Moodlers Bild på Translators
If you have found a vulnerability in VPL pl. inform its developer https://moodle.org/user/profile.php?id=150298 personally with details of the exploit. I'm no security expert, but I don't believe secure/not secure is a digital thing. You have to dive in to details, in to quite deep places.

This is a security discussion I had some time back: Securing vpl-jail-system on a production LAMP server. Quoting a post there "VPL-Jail-System serves as a stateless, secure, and isolate sandbox for the execution and evaluation of student’s code." https://vpl.dis.ulpgc.es/documentation/vpl-jail-system-3.0.1/introduction.html
Bild på Particularly helpful Moodlers Bild på Translators
Display PHP info outside Moodle as explained in PHP#Displaying_phpinfo_outside_of_Moodle and put it in the root of the Moodle code directory - that is where config.php resides. Then call yoursite/phpinfo.php and make sure you get a page like this:
Bilaga phpinfo-Mozilla-Firefox_0021.png
Bild på Particularly helpful Moodlers Bild på Translators
But the question is "How long does it take [for the OP] to prepare [his institution to] upgrading moodle" - which needs some telepathy and other magical powers in addition to knowledge in Moodle.

May be, a good question to ask these ChatGPT and the like.
stort leende