News for hackers. Stuff that matters.

A comment on Evil Teacher: Code Injection in Moodle.

Re:Evil Teacher: Code Injection in Moodle by jwilk on Tuesday June 12, 2018 @06:31PM (#17298667)
> Moodle allows teachers to set up a quiz with many types of questions. Among them is the calculated question which allows teachers to enter a mathematical formula which will be evaluated by Moodle dynamically on randomized input variables.

But... why? What's the practical use for such a quiz?

[ Parent | on HN ]
Re:Evil Teacher: Code Injection in Moodle by defen on Tuesday June 12, 2018 @07:01PM (#17298868)
It says later in the article, it's so that students can't easily share answers.
[ Parent | on HN ]
Re:Evil Teacher: Code Injection in Moodle by Something1234 on Tuesday June 12, 2018 @09:25PM (#17299537)
Would be handy for a ctf competition maybe if I could run a validator against a string. Especially if I wanted to check if some string validates against my program, and there are possibly many flags in the solution space.
[ Parent | on HN ]
Re:Evil Teacher: Code Injection in Moodle by saagarjha on Wednesday June 13, 2018 @12:43AM (#17300322)
If I'm understand you correctly, what you're asking is an undecidable problem.
[ Parent | on HN ]