m-schwabe / local_bs_badge_pool Goto Github PK

With this plugin you can create badge templates which can be used to simplify creating badges in all courses of your moodle system. These templates can be organized in categories and exported to a XML file to share them with others. Trainers can use the badge templates by going to Course administration --> Badges --> Badge Pool.

PHP 99.64% CSS 0.36%

local_bs_badge_pool's People

Stargazers

Watchers

Forkers

ccs24

local_bs_badge_pool's Issues

DB table name prefix does not match the plugin name

Same case as in m-schwabe/local_bs_badge_ladder#1

Missing sesskey check in managecat.php

The script managecat.php is vulnerable to CSRF - https://docs.moodle.org/dev/Security:Cross-site_request_forgery

Before performing the local_bs_badge_pool_delete_category() call, require_sesskey() must be used and the sesskey must be part of the delete icon link.

Unable to create the course badge from the template

Attempting to create a new course badge from a template in the pool ends with error:

Warning: fopen(/path/to/moodledata\temp\files\badgeicon_1448493851.tmp): failed to open stream: Permission denied in /local/bs_badge_pool/index.php on line 69

Warning: fwrite() expects parameter 1 to be resource, boolean given in /local/bs_badge_pool/index.php on line 70

Warning: fclose() expects parameter 1 to be resource, boolean given in /local/bs_badge_pool/index.php on line 71

Recommend Projects