Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-21573

Possible to set users language without interaction/confirmation

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Inactive
    • Icon: Minor Minor
    • None
    • 1.9.7
    • Accessibility, Language
    • MOODLE_19_STABLE

      It's possible to set a users language for the current session without any confirmation from the user.

      setup.lib checks for a 'lang' parameter and sets $SESSION->lang

      http://xref.moodle.org/nav.html?lib/setup.php.source.html#l644

      current_language() checks for existence of this session variable and sets language

      http://xref.moodle.org/nav.html?lib/moodlelib.php.source.html#l5069

      Probably some confirm_sesskey() checks should be used so that users can't have their language changed simply by requesting http://moodle.org?lang=he

            Unassigned Unassigned
            pholden Paul Holden
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.