search

lmsace / eguru

Eguru - a free responsive moodle theme developed by LMSACE
9 stars 9 forks source link

Moodle login error after Upgrade from Moodle v3.1.1 to Moodle v3.1.18: "Invalid login, please try again" #14

Open klorinczi opened 5 years ago

klorinczi commented 5 years ago

It seems eGuru plugin v1.3 (2016110400) which is compatible with Moodle 2.6, 2.7, 2.8, 2.9, 3.0, 3.1, is affected by a bug, which is caused by a new introduced security feature: Login token is a security related feature introduced in Moodle versions 3.1.15, 3.3.9, 3.4.6, 3.5.3 and 3.6.0. It helps to protect against a range of vulnerabilities, such as stealing other user's session, via the login form. https://docs.moodle.org/dev/Login_token

This causes Moodle v3.1.18: "Invalid login, please try again" with the installed Eguru v1.3 plugin version to fail to login with "Invalid login, please try again" error.

Could you release a fix for this?

klorinczi commented 5 years ago

Also the plugin upgrade screen says: There is a new version 2018111500 available! Release v1.3.1

After pressing the Install this update button, I get the following error:”Downloading theme_eguru ... OK Validating theme_eguru ... Error [Error] Required Moodle version [2018041200] Installation aborted due to validation failure”

I use Moodle v3.1.18 (Build: 20190513), which was released on 2019.05.13.

So the plugin should be fixed.