Logging in with any Password

Kevin O Reilly
Topic Author
Offline
New Member

14 years 8 months ago #1 by Kevin O Reilly

Logging in with any Password was created by Kevin O Reilly

Hi guys,

just wondering if anyone has encountered this error before. We only noticed it yesterday quite by accident. For some reason users that have been synced up with Joomdle can login using any password to moodle. For instance our admin account can be accessed by leaving the password blank or entering in anything you want.

any advice would be appreciated

Regards,

Kevin..

Please Log in or Create an account to join the conversation.

Chris
Offline
Moderator

14 years 8 months ago #2 by Chris

Replied by Chris on topic Re: Logging in with any Password

Can you specify the versions of your applications. Also, logging in from Moodle? From Joomdle? etc.

You say using any password - any password in joomla or moodle?

Please Log in or Create an account to join the conversation.

Kevin O Reilly
Topic Author
Offline
New Member

14 years 8 months ago #3 by Kevin O Reilly

Replied by Kevin O Reilly on topic Re: Logging in with any Password

The password issue only seems to be with moodle. They need the proper password to log in to Joomla.

I can just make up a password and log in as any registered user.

Were using Moodle 2.1 (Build: 20110701) and joomdle ver joomdle-0.5-for-joomla16-alpha5.zip

kind regards,

kevin.

Please Log in or Create an account to join the conversation.

Chris
Offline
Moderator

14 years 8 months ago #4 by Chris

Replied by Chris on topic Re: Logging in with any Password

What happens to users created in Moodle?

You say your admin account in Moodle, Joomdle does not manage the Moodle admin accounts thus pointing to an unrelated issue.

Are you logging into Moodle using the same browser and connecting through Joomla or different browsers such as FF and Chrome. You should always use Admin in one browser say, FF, while using Chrome for the test users (students) because

Please Log in or Create an account to join the conversation.

Kevin O Reilly
Topic Author
Offline
New Member

14 years 8 months ago #5 by Kevin O Reilly

Replied by Kevin O Reilly on topic Re: Logging in with any Password

Hi Chris,

If I create an account Within Moodle It works as it should. I have attached an Image of how the Admin account looks under users.

I don't know if the admin should also be a Joomdle user. Please advise

Regards,

Kevin

Please Log in or Create an account to join the conversation.

Antonio Durán
Offline
Moderator

14 years 8 months ago #6 by Antonio Durán

Replied by Antonio Durán on topic Re: Logging in with any Password

Hi.

I can confirm there is a bug that causes the problem you are experiencing.

If you want to fix it manually while we have a new release, you only need to replace the login() function in components/com_joomdle/controllers/ws.xmlrpc.php.

Delete old one and put this in its place:

Code:

    /* Web service used to log in from Moodle */
    function login ($method, $params)
    {
        $username = $params[0];
        $password = $params[1];

        $mainframe =& JFactory::getApplication('site');

        $options = array ( 'skip_joomdlehooks' => '1', 'silent' => 1);
        $credentials = array ( 'username' => $username, 'password' => $password);
        if ($mainframe->login( $credentials, $options ))
            return true;
        return false;
    }

This should fix the problem (it does for me locally).

Please Log in or Create an account to join the conversation.

Kevin O Reilly
Topic Author
Offline
New Member

14 years 8 months ago #7 by Kevin O Reilly

Replied by Kevin O Reilly on topic Re: Logging in with any Password

Thanks for that Antonio. I will test it and let you know if it works

Kind regards,

Kevin

Please Log in or Create an account to join the conversation.

Kevin O Reilly
Topic Author
Offline
New Member

14 years 8 months ago #8 by Kevin O Reilly

Replied by Kevin O Reilly on topic Re: Logging in with any Password

That worked a treat Antonio. Thanks a million

Regards,

kevin

Please Log in or Create an account to join the conversation.

Login

Logging in with any Password