Moodle 1.9.2 release notes: Difference between revisions
From MoodleDocs
Helen Foster (talk | contribs) (content moved from Release notes) |
Helen Foster (talk | contribs) (see also) |
||
Line 17: | Line 17: | ||
* [http://moodle.org/mod/forum/discuss.php?d=101407 MSA-08-0015]: accessible profiles of deleted users | * [http://moodle.org/mod/forum/discuss.php?d=101407 MSA-08-0015]: accessible profiles of deleted users | ||
* [http://moodle.org/mod/forum/discuss.php?d=101409 MSA-08-0016]: Email could be changed in profile without confirmation | * [http://moodle.org/mod/forum/discuss.php?d=101409 MSA-08-0016]: Email could be changed in profile without confirmation | ||
<noinclude>==See also== | |||
*[[Moodle 1.9.1 release notes]] | |||
*[[Moodle 1.9.3 release notes]] | |||
[[Category:Release notes]] | [[Category:Release notes]] | ||
[[Category:Moodle 1.9]] | [[Category:Moodle 1.9]] | ||
</noinclude> |
Revision as of 10:06, 1 December 2008
Release date: 11th July 2008
Here is the full list of fixed issues in 1.9.2.
Highlights
- Compatibility fixes for MSSQL, Oracle and PostgreSQL
- Improved triggering of core events (though contributed code needs to be updated - see MDL-9983)
- Email change confirmation and other improvements relating to reducing the risk of spam
- Forum subscription improvements
- Setting for deleting not-fully-set-up accounts
- Quiz report enhancements and bug fixes (see Quiz report enhancements for full list, though most are planned for Moodle 2.0)
Security issues
- MSA-08-0010: sql injection in HotPot module
- MSA-08-0012: Potential non-persistent XSS when searching for group members (MSSQL and Oracle only)
- MSA-08-0014: potential sql injection in events handling code
- MSA-08-0015: accessible profiles of deleted users
- MSA-08-0016: Email could be changed in profile without confirmation