search

alejandrom1999 / moodle_tfg

0 stars 1 forks source link

missing login and capability checks on a number of files. #11

Open danmarsden opened 9 months ago

danmarsden commented 9 months ago

files like: https://github.com/alejandrom1999/moodle_tfg/blob/main/objetivos/form_asignar_tarea.php https://github.com/alejandrom1999/moodle_tfg/blob/main/objetivos/form_objetivo.php https://github.com/alejandrom1999/moodle_tfg/blob/main/objetivos/vista_profesor.php

should all have login and capability checks prior to allowing the user to load them - please see:

https://moodledev.io/general/development/policies/security#summary-of-the-guidelines

note this is a blocker for plugins db approval.