Message-ID: <11613980.1182488862397.JavaMail.joeescobar@joe-escobars-computer.local>
Date: Mon, 11 Dec 2006 07:32:05 -0800 (PST)
From: waltond
Reply-To: Online.MC_PO3.LCC-Mail@lanecc.edu
Subject: Adding feature for workstation OR password security to online quizzes
Mime-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_1077_3475522.1182488862397"
GWItemID: 457CA705.LCC-Mail.MC_PO3.100.1346735.1.2769.1

------=_Part_1077_3475522.1182488862397
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


So I was thinking about the whole quiz security question again.

If I recall correctly, we wanted some way for the instructor to specify a password AND an IP address for a quiz but not require both from the student--i.e., if the student's at an approved wokstation, let her in; othewise, force him to enter the password.  Is that correct?  Or am I misremembering?

The problem with doing this in any formal way is that we would have to change a) the Quiz settings form; b) the code that creates the quiz settings form; c) the code that processes the quiz settings form; and d) the database table (adding a new column).  I'm extremely reluctant to do this, but I think I've thought of a workaround.

For any instructor who wants to set up a quiz this way, let's have them enter a special IP address as the first one in the list.  For example: to provide access to 10.1.56.1, 10.1.56.2, and 10.1.0.167, the instructor enters "1.1.1.1,10.1.56.1, 10.1.56.2, and 10.1.0.167."  The 1.1.1.1 is a flag to try the password if the IP address check fails.  

Does this seem like a reasonable workaround?  I haven't actually tested it, but the access.php script which seems to control access to secure quizzes looks like it's relatively simple.  So I can't say that it's a solution, but I can try it out, if you guys think it's a good way to address the problem.

David

----
David Walton
Web/Moodle administration and identity management
Information Technology
Lane Community College
Email: waltond@lanecc.edu
Voice: 541-463-3367

------=_Part_1077_3475522.1182488862397--