Guide37K views2,204 votes0 replies4,201 following
Moodle Private File Serving via pluginfile.php: Architecture Note
Moodle keeps user uploads outside the web root and serves them through pluginfile.php, which validates sessions, resolves context, checks capabilities, and streams files via the configured storage driver.