Eloy Lafuente (stronk7) [Sun, 7 May 2017 19:32:36 +0000 (21:32 +0200)]
Moodle release 2.7.20
Marina Glancy [Fri, 28 Apr 2017 04:20:46 +0000 (12:20 +0800)]
MDL-58740 block_course_overview: check session key
Thanks to Kukas Schmidt for initial patch
Marina Glancy [Wed, 26 Apr 2017 07:04:25 +0000 (15:04 +0800)]
MDL-58670 blog: respect capability to search entries
Marina Glancy [Wed, 19 Apr 2017 04:04:47 +0000 (12:04 +0800)]
MDL-58635 blogs: check edited blog belongs to current user
David Monllao [Wed, 3 May 2017 02:27:36 +0000 (10:27 +0800)]
weekly release 2.7.19+
Andrew Nicols [Wed, 3 May 2017 00:32:04 +0000 (08:32 +0800)]
MDL-58746 core: Simplify environment check
Andrew Nicols [Mon, 1 May 2017 00:51:37 +0000 (08:51 +0800)]
MDL-58746 core: Add environment check for finfo
Dan Poltawski [Sat, 29 Apr 2017 08:01:14 +0000 (09:01 +0100)]
Merge branch 'MDL-58672_27' of git://github.com/stronk7/moodle into MOODLE_27_STABLE
Eloy Lafuente (stronk7) [Thu, 27 Apr 2017 18:34:05 +0000 (20:34 +0200)]
MDL-58672 timezones: Updated to 2017b
Eloy Lafuente (stronk7) [Mon, 17 Apr 2017 15:27:07 +0000 (17:27 +0200)]
MDL-54901 environment: pg93 & openssl
Eloy Lafuente (stronk7) [Mon, 17 Apr 2017 10:19:36 +0000 (12:19 +0200)]
MDL-54901 environment: 3.3 base information
This is a direct copy of the 3.2 branch to
have changes under control easier in next commits.
Eloy Lafuente (stronk7) [Sat, 11 Mar 2017 21:15:46 +0000 (22:15 +0100)]
Moodle release 2.7.19
Marina Glancy [Sat, 4 Mar 2017 04:22:12 +0000 (12:22 +0800)]
MDL-58010 user: allow to update only whitelisted preferences
Eloy Lafuente (stronk7) [Thu, 26 Jan 2017 23:27:42 +0000 (00:27 +0100)]
weekly release 2.7.18+
Dan Poltawski [Tue, 24 Jan 2017 10:11:25 +0000 (10:11 +0000)]
Merge branch 'MDL-57639-27' of git://github.com/andrewnicols/moodle into MOODLE_27_STABLE
Dan Poltawski [Mon, 23 Jan 2017 09:49:29 +0000 (09:49 +0000)]
Merge branch 'MDL-57677-27-usermodified' of git://github.com/mudrd8mz/moodle into MOODLE_27_STABLE
Andrew Nicols [Thu, 19 Jan 2017 05:47:40 +0000 (13:47 +0800)]
MDL-57639 mod_forum: Update to use correct variable name
This addresses a regression where unnecessary attributes were removed
from the old variable. This one was missed.
David Mudrák [Tue, 17 Jan 2017 18:27:57 +0000 (19:27 +0100)]
MDL-57677 mod_forum: Fix wrong user displayed as the last post's author
In the recent issue MDL-56225, we started to record the current user as
the usermodified in the forum_discussions table when updating a forum
post. It made sense but it was a mistake.
Even if the current user really modifies the discussion by updating the
post, the field usermodified has actually been always interpreted and
displayed as the last post' author. Not as the last user who touched the
discussion.
This patch reverts that particular change to the previous behaviour and
adds explicit unit test for it.
Eloy Lafuente (stronk7) [Sun, 8 Jan 2017 10:04:13 +0000 (11:04 +0100)]
Moodle release 2.7.18
Eloy Lafuente (stronk7) [Sun, 8 Jan 2017 10:04:10 +0000 (11:04 +0100)]
Merge branch 'install_27_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_27_STABLE
David Mudrák [Thu, 5 Jan 2017 12:20:59 +0000 (13:20 +0100)]
MDL-57580 mod_assign: Fix the incorrect type of some input parameters
The PARAM_TEXT has been misused in certain cases here. The 'action'
parameter seems to always be alphabetic, with values like
savesubmission, editsubmission and others as handled in assign::view().
Fixing the action handling fixes the reported XSS issue. While working
on it, I spotted two more places where PARAM_TEXT does not seem
appropriate. I include changes for them too, even if they are no
strictly related to the reported bug and there are no known ways to
abuse it.
* The 'plugin' looks like PARAM_PLUGIN and is even declared as such in
some other parts of the assignment code (such as feedback forms).
* The 'workflowstate' is one of the ASSIGN_MARKING_WORKFLOW_STATE
constants and is supposed to be alpha in external function input
parameters handling, too.
Rajesh Taneja [Thu, 5 Jan 2017 06:40:16 +0000 (14:40 +0800)]
MDL-57531 behat: Set noreplyaddress to valid address
noreplyaddress should be a valid address, else
it will not be saved. For behat we don't send
email, so set it to noreply@example.com, to
avoid failing validation on localhost
Dan Poltawski [Wed, 4 Jan 2017 13:30:59 +0000 (13:30 +0000)]
Merge branch 'MDL-57531-27-phpmailer' of git://github.com/mudrd8mz/moodle into MOODLE_27_STABLE
David Mudrák [Wed, 4 Jan 2017 12:05:03 +0000 (13:05 +0100)]
MDL-57531 mail: Validate the sender's email address
The patch adds validation for the noreplyaddress setting variable, for
the explicit $replyto parameter and for the sender's email. In case of
misconfigured noreplyaddress setting, it falls back to the default
noreply address value. In case of invalid email in the user's record,
the email is not sent.
The patch also adds unit test for the value returned by the function
generate_email_processing_address() so that it can be considered as a
valid email, too.
This is supposed to significantly minimise the risk of exploiting the
vulnerability in PHPMailer's Sender field.
David Mudrák [Wed, 4 Jan 2017 11:30:18 +0000 (12:30 +0100)]
MDL-57531 mail: Do not let admins set invalid email addresses
The noreply and support emails should always be valid.
David Mudrák [Wed, 4 Jan 2017 09:58:44 +0000 (10:58 +0100)]
MDL-56225 mod_forum: Fix inability to edit attachments
The 'attachments' is not a real DB field here. It comes from the form's
filepicker and holds the id of the attachments filearea. The function
forum_add_attachment() expects it as a property of the first argument.
There were two possible approaches here. Either to pass the raw $newpost
to forum_add_attachment(), or add the attachments into the list
modifiable fields. The second approach is safer.
Andrew Nicols [Fri, 7 Oct 2016 02:56:29 +0000 (10:56 +0800)]
MDL-56225 mod_forum: Remove unnecessary attributes from update
AMOS bot [Wed, 30 Nov 2016 16:06:42 +0000 (00:06 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 30 Nov 2016 16:06:42 +0000 (00:06 +0800)]
Merge branch 'MOODLE_27_STABLE' into install_27_STABLE
AMOS bot [Tue, 29 Nov 2016 16:05:37 +0000 (00:05 +0800)]
Automatically generated installer lang files
Dan Poltawski [Tue, 29 Nov 2016 13:36:11 +0000 (13:36 +0000)]
weekly release 2.7.17+
Dan Poltawski [Tue, 29 Nov 2016 13:36:10 +0000 (13:36 +0000)]
Merge branch 'install_27_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_27_STABLE
Vladimir Zhirov [Sat, 26 Nov 2016 19:42:54 +0000 (23:42 +0400)]
MDL-57163 installation: fixed "Call to undefined function curl_version"
AMOS bot [Sat, 26 Nov 2016 16:06:38 +0000 (00:06 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 22 Nov 2016 16:06:12 +0000 (00:06 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 16 Nov 2016 16:05:45 +0000 (00:05 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Sat, 12 Nov 2016 19:21:14 +0000 (20:21 +0100)]
Moodle release 2.7.17
Eloy Lafuente (stronk7) [Sat, 12 Nov 2016 19:21:11 +0000 (20:21 +0100)]
Merge branch 'install_27_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_27_STABLE
Andrew Nicols [Fri, 11 Nov 2016 07:15:41 +0000 (15:15 +0800)]
Merge branch 'MDL-55121-27' of git://github.com/lameze/moodle into MOODLE_27_STABLE
Simey Lameze [Tue, 4 Oct 2016 04:06:10 +0000 (12:06 +0800)]
MDL-55121 environment: check for unsuported php version 7.1
Dan Poltawski [Thu, 10 Nov 2016 13:46:52 +0000 (13:46 +0000)]
Merge branch 'MDL-55777-27' of git://github.com/ankitagarwal/moodle into MOODLE_27_STABLE
Ankit Agarwal [Wed, 2 Nov 2016 10:36:20 +0000 (16:06 +0530)]
MDL-55777 installation: Check libcurl version on install
AMOS bot [Sun, 6 Nov 2016 16:05:43 +0000 (00:05 +0800)]
Automatically generated installer lang files
Simey Lameze [Mon, 17 Oct 2016 08:07:16 +0000 (16:07 +0800)]
MDL-51347 core_notes: check view notes capability by course context
AMOS bot [Sun, 16 Oct 2016 16:07:37 +0000 (00:07 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 11 Oct 2016 16:05:47 +0000 (00:05 +0800)]
Automatically generated installer lang files
Tim Hunt [Mon, 26 Sep 2016 18:46:22 +0000 (19:46 +0100)]
MDL-53744 question file access: fix access checks
AMOS bot [Sat, 8 Oct 2016 16:07:21 +0000 (00:07 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 7 Oct 2016 16:05:39 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 4 Oct 2016 16:07:20 +0000 (00:07 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 27 Sep 2016 16:05:31 +0000 (00:05 +0800)]
Automatically generated installer lang files
Juan Leyva [Thu, 22 Sep 2016 09:52:11 +0000 (10:52 +0100)]
MDL-56065 user: Fix update_users Web Service
Users won’t be updated if:
- They are admins and the user updating is not
- They are the guest user
- They are mnet users
- They are deleted users
AMOS bot [Fri, 16 Sep 2016 16:05:36 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Thu, 15 Sep 2016 16:06:01 +0000 (00:06 +0800)]
Automatically generated installer lang files
Dan Poltawski [Thu, 15 Sep 2016 10:15:14 +0000 (11:15 +0100)]
weekly release 2.7.16+
Jake Dallimore [Tue, 13 Sep 2016 04:21:11 +0000 (12:21 +0800)]
MDL-55945 login: fix https support for forgot_password.php
Eloy Lafuente (stronk7) [Sat, 10 Sep 2016 20:50:03 +0000 (22:50 +0200)]
Moodle release 2.7.16
Eloy Lafuente (stronk7) [Sat, 10 Sep 2016 20:49:58 +0000 (22:49 +0200)]
Merge branch 'install_27_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_27_STABLE
AMOS bot [Mon, 29 Aug 2016 16:05:51 +0000 (00:05 +0800)]
Automatically generated installer lang files
Jake Dallimore [Fri, 5 Aug 2016 02:34:22 +0000 (10:34 +0800)]
MDL-50803 login: Remove token from URL in forgot password process
Store the token value in the session and redirect to self, thus
removing the token from the URL and eliminating the problem where
the token is exposed via the http referer header.
AMOS bot [Tue, 9 Aug 2016 16:05:49 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 5 Aug 2016 16:05:54 +0000 (00:05 +0800)]
Automatically generated installer lang files
Juan Leyva [Mon, 11 Jul 2016 11:06:40 +0000 (12:06 +0100)]
MDL-49026 webservice: Remove tokens on password change
AMOS bot [Mon, 1 Aug 2016 16:05:17 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 19 Jul 2016 16:06:10 +0000 (00:06 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 15 Jul 2016 16:06:28 +0000 (00:06 +0800)]
Automatically generated installer lang files
AMOS bot [Tue, 12 Jul 2016 16:05:40 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Sun, 10 Jul 2016 16:06:48 +0000 (00:06 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Sat, 9 Jul 2016 22:29:03 +0000 (00:29 +0200)]
Moodle release 2.7.15
Eloy Lafuente (stronk7) [Sat, 9 Jul 2016 22:28:59 +0000 (00:28 +0200)]
Merge branch 'install_27_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_27_STABLE
Marina Glancy [Mon, 4 Jul 2016 02:32:20 +0000 (10:32 +0800)]
MDL-55069 core: escape special characters in email headers
Andrew Nicols [Mon, 4 Jul 2016 01:15:13 +0000 (09:15 +0800)]
Merge branch 'MDL-53019_27' of git://github.com/stronk7/moodle into MOODLE_27_STABLE
AMOS bot [Fri, 1 Jul 2016 16:05:51 +0000 (00:05 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Fri, 1 Jul 2016 11:44:36 +0000 (13:44 +0200)]
MDL-53019 environment: 3.2 requirements added
Changes:
- PHP 5.6.5 required
AMOS bot [Tue, 21 Jun 2016 16:07:20 +0000 (00:07 +0800)]
Automatically generated installer lang files
AMOS bot [Mon, 20 Jun 2016 16:06:32 +0000 (00:06 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 3 Jun 2016 16:05:18 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 1 Jun 2016 16:04:59 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Mon, 23 May 2016 16:05:13 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Sat, 14 May 2016 16:05:45 +0000 (00:05 +0800)]
Automatically generated installer lang files
AMOS bot [Mon, 9 May 2016 16:05:39 +0000 (00:05 +0800)]
Automatically generated installer lang files
Eloy Lafuente (stronk7) [Sat, 7 May 2016 22:23:31 +0000 (00:23 +0200)]
Moodle release 2.7.14
Eloy Lafuente (stronk7) [Sat, 7 May 2016 22:23:27 +0000 (00:23 +0200)]
Merge branch 'install_27_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_27_STABLE
Simey Lameze [Tue, 3 May 2016 08:50:09 +0000 (16:50 +0800)]
MDL-53913 core_user: make parameters consistent across versions
Andrew Nicols [Wed, 4 May 2016 09:03:10 +0000 (17:03 +0800)]
MDL-53589 badges: Correct context
Eloy Lafuente (stronk7) [Mon, 2 May 2016 10:40:14 +0000 (12:40 +0200)]
MDL-54018 timezones: Updated to 2016d
Frederic Massart [Thu, 21 Apr 2016 08:38:57 +0000 (16:38 +0800)]
MDL-51369 course: Adding tests to cover restoring course info
Frederic Massart [Thu, 21 Apr 2016 08:37:39 +0000 (16:37 +0800)]
MDL-51369 backup: Respect capabilities when restoring course info
In short, when a user is creating a new course they can set
the ID number, shortname, fullname and summary. However, when
they merge a backup into a course they need the permissions to do so.
Frederic Massart [Thu, 28 Apr 2016 09:59:53 +0000 (17:59 +0800)]
MDL-53954 user: Prevent locked profile fields from being edited
Andrew Nicols [Fri, 8 Apr 2016 01:57:15 +0000 (09:57 +0800)]
MDL-53755 forum: Check session when marking posts
Dan Marsden [Tue, 29 Mar 2016 21:03:25 +0000 (10:03 +1300)]
MDL-53546 SCORM: Set window.opener to null
AMOS bot [Wed, 4 May 2016 16:05:14 +0000 (00:05 +0800)]
Automatically generated installer lang files
David Monllao [Mon, 2 May 2016 08:37:51 +0000 (16:37 +0800)]
MDL-54008 tz: Avoid using Caracas tz
Changed in May 2016.
AMOS bot [Sun, 1 May 2016 16:04:56 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Fri, 29 Apr 2016 16:07:31 +0000 (00:07 +0800)]
Automatically generated installer lang files
Dan Poltawski [Fri, 29 Apr 2016 14:55:15 +0000 (15:55 +0100)]
weekly release 2.7.13+
Dan Poltawski [Fri, 29 Apr 2016 14:55:12 +0000 (15:55 +0100)]
Merge branch 'install_27_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_27_STABLE
Eloy Lafuente (stronk7) [Sat, 23 Apr 2016 23:34:38 +0000 (01:34 +0200)]
MDL-53928 environment: add xmlreader requirement for 3.1
AMOS bot [Tue, 12 Apr 2016 16:04:52 +0000 (00:04 +0800)]
Automatically generated installer lang files
AMOS bot [Wed, 6 Apr 2016 16:05:44 +0000 (00:05 +0800)]
Automatically generated installer lang files
