mirror of
https://github.com/moodle/moodle.git
synced 2025-08-08 10:26:40 +02:00
45ae1da263
This patch fixes a XSS vulnerability with surveys where a student user
could inject arbitrary HTML in a comment on the survey. The fix is to
escape the comment before displaying it to the teacher.
|
||
|---|---|---|
| .. | ||
| assign | ||
| assignment | ||
| book | ||
| chat | ||
| choice | ||
| data | ||
| feedback | ||
| folder | ||
| forum | ||
| glossary | ||
| imscp | ||
| label | ||
| lesson | ||
| lti | ||
| page | ||
| quiz | ||
| resource | ||
| scorm | ||
| survey | ||
| url | ||
| wiki | ||
| workshop | ||
| index.html | ||
| README.txt | ||
| upgrade.txt | ||
ACTIVITY MODULES
----------------
These are main modules in Moodle, allowing various activities.
Each of these modules contains a number of expected components:
mod_form.php: a form to setup/update a module instance
version.php: defines some meta-info and provides upgrading code
pix/icon.gif: a 16x16 icon for the module
db/install.xml: an SQL dump of all the required db tables and data
index.php: a page to list all instances in a course
view.php: a page to view a particular instance
lib.php: any/all functions defined by the module should be in here.
constants should be defined using MODULENAME_xxxxxx
functions should be defined using modulename_xxxxxx
There are a number of standard functions:
modulename_add_instance()
modulename_update_instance()
modulename_delete_instance()
modulename_user_complete()
modulename_user_outline()
modulename_cron()
modulename_print_recent_activity()
If you are a developer and interested in developing new Modules see:
Moodle Documentation: http://moodle.org/doc
Moodle Community: http://moodle.org/community