MOODLE:

Check all public / private paths

Problem

Moodle "Security Check" report returns the following Error.

max_input_vars

CAUSE

Moodle is notifying us to check the common hack tactics. Let's disable all files and folders that could reveal vulnerability or check what Moodle version you are using. For a quick test of your environment, you can simple visit https://www.yourmoodledomain.com/theme/upgrade.txt. If you can see your Moodle version number, you have not configured the "public/private path" correctly.

Resolution

Plesk configuraTION

In your Plesk hosting portal, visit “Apache & nginx Settings” > "Additional Apache directives" > "Additional directives for HTTP and HTTPS" and add the following commands:

<IfModule mod_fcgid.c>
FcgidMaxRequestLen 1073741824
FcgidMaxRequestsPerProcess 500
FcgidProcessLifeTime 7200
</IfModule>

ProxyErrorOverride on
<Location /error/>
ProxyErrorOverride off
</Location>

ErrorDocument 400 /error/index.php
ErrorDocument 401 /error/index.php
ErrorDocument 403 /error/index.php
ErrorDocument 404 /error/index.php
ErrorDocument 405 /error/index.php
ErrorDocument 406 /error/index.php
ErrorDocument 407 /error/index.php
ErrorDocument 412 /error/index.php
ErrorDocument 414 /error/index.php
ErrorDocument 415 /error/index.php

Save the config and reload your Moodle page.