Anonymous quiz takers sometimes get access denied during a quiz

Created on 7 April 2017, about 8 years ago
Updated 12 August 2024, 8 months ago

On a live website, anonymous users can take some quizzes.

Now a small percentage of page loads results in a false 403. With between 10-25 users doing the tests, about every minute some of them gets a false 403 page showing up instead of:

  • The next question of the quiz
  • The quiz result

Although it was pretty hard to reproduce this on command, I found a way to get (at least) a false 403 by doing the following:

At the last question of a quiz with 15 multiple choice questions, after you press 'finish' (very) quickly change the answer of your 1st choice to another answer and quickly hit 'finish' again

The URL of the 403 is then actually the url of the last question (not the url of the quiz result). In this example /node/69/take/15

While I can only reproduce this sudden 403 this way, the visitors on the website get 403's also while navigating to the next question in the middle of a quiz.

All the access denied logs just have the previous question as the referrer path. For example:

Location of the 403:
/node/69/take/10

Referrer:
/node/69/take/9

πŸ› Bug report
Status

Closed: outdated

Version

5.1

Component

Code - Quiz core

Created by

πŸ‡³πŸ‡±Netherlands Rodgey

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡ΊπŸ‡ΈUnited States smustgrave

    With D7 approaching EOL soon I've started the process of triaging the D7 queue here. Since there hasn't been any movement on this going to close out.

    If needed for 7.0.x (D10+) please reopen under there

Production build 0.71.5 2024