moodle upgrade key

Moodle 3.0 has a good deal of new features, fixes and updates that can be taken advantage of by all Moodlers. I think one of these new features is especially important: the Upgrade Key. As explained by

Post Pages - Post Inline - WIRIS

When the Moodle site is being upgraded as a result of the Moodle core update and/or a plugin installation/update, no authentication and authorization mechanisms are reliable. Any anonymous visitor of your site can potentially trigger the upgrade process by navigating their browser to your admin page. This can be seen as a security risk because a lot of sensitive information (server environment, plugin versions etc) are available at the upgrade screens.

The Upgrade Key takes care of this issue in one nice, easy addition to your config.php file. (add this line of code: $CFG->upgradekey = ‘put_some_shared_secret_here’;). With that in place, only authorized individuals will be able to access the admin sections during the upgrade process.

What other features in 3.0 are you excited about? Tell us in the comments below!

Previous articleMonopage theme for Moodle 2.9 – First Commercial theme by @gjbarnard
Next articlePioneer theme updated to a new version with Dashboard Tabs feature #MoodleThemes @kennibc


Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.