dravek / moodle-tool_powerusers Goto Github PK
View Code? Open in Web Editor NEWThis plugin uses the Marvel API to generate users in your Moodle instance
This plugin uses the Marvel API to generate users in your Moodle instance
As mentioned by Tomasz in the review process, the index.php is missing a require_capability check - you could probably use something like:
require_capability('moodle/site:config', context_system::instance());
or implement your own capability so that you can give certain roles the ability to add the users.
Please note - all plugins that implement an integration with an external service are required to implement the privacy api - I think in your case you can implement the null provider as your plugin doesn't pass any personal identifying information to the external api, and you don't store any personal information in the plugin itself.
I'm a little uncomfortable with this line:
https://github.com/dravek/moodle-tool_powerusers/blob/master/classes/generator.php#L107
I think by default it should randomly assign a different password for each user (or even better - not set a password at all.)
basically this would allow someone to go looking for sites that have installed your plugin then try to login with the generic password, giving them authenticated access to the site.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.