Security and privacy

Hello D.W.!

Wow! Sorry to hear your site was hacked. You can force SSL for your Moodle site by doing the following.

1. Edit the config.php file in the Moodle directory
2. Change the following:
   

   $CFG->wwwroot   = 'http://yourdomain.com';

   to
   

   $CFG->wwwroot   = 'https://yourdomain.com';

3. Then set a redirect up in your .htaccess to do redirect to the https:// of your site. The code will look like the following.
   

   RewriteEngine On 
   RewriteCond %{SERVER_PORT} 80 
   RewriteRule ^(.*)$ https://www.yourdomain.com/$1 [R,L]

This should force the site to go to your SSL connection instead of the Non SSL connection. I also wrote and article on forcing SSL sitewide that has more details. Hopefully you can get your site restored with now hacks in it. Hope this helps.

Take care

James R