Cursor rule

1---
2description:
3globs:
4alwaysApply: false
5---
6---
7name: Moodle Configuration Management
8---
9 
10# Moodle Configuration Management
11 
12## Purpose
13Ensure all configuration is managed securely and consistently using Moodle's APIs.
14 
15## Instructions
16- Use `get_config()` and `set_config()` for plugin and site settings
17- Store configuration in the `config_plugins` or `config` tables
18- Provide admin settings pages using `settings.php`
19- Validate and sanitize all configuration values
20- Document all configuration options
21- Avoid storing sensitive data in plain text
22- Use Moodle's capabilities to restrict access to settings
23 
24## Examples
25```php
26// File: ./settings.php
27$settings->add(new admin_setting_configtext('myplugin/apikey', get_string('apikey', 'myplugin'), '', ''));
28 
29// File: ./lib.php
30$apikey = get_config('myplugin', 'apikey');
31```
32 
33## Exceptions
34- Temporary runtime settings may use $SESSION
35