Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1795 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	NET::ERR_CERT_AUTHORITY_INVALID 3.2.2 Locked	David Robertson 2 May 2017	Amit Shingala 5 Sep 2017	9
	Security issue - authentification Locked	Marta Mik 1 Aug 2017	Adam Jenkins 1 Sep 2017	1
	uses moodle username and password for login on main site Locked	Muhammad Abdulhakeem 7 Aug 2017	Adam Jenkins 1 Sep 2017	1
	how to set different views for a database activity for different users or groups Locked	Luca Tomsi 31 Jul 2017	AL Rachels 20 Aug 2017	8
	Security Moodle Locked	Rondi Ariyanto 27 Jul 2017	Rondi Ariyanto 7 Aug 2017	13
	Hide "Inactive for more than" and "User list" from students Locked	Christos Savva 31 Jul 2017	Emma Richardson 1 Aug 2017	3
	with loginhttps the cookiesecure security check fails Locked	Michael Schneider 27 Jul 2017	Michael Schneider 31 Jul 2017	4
	Is password policy change "retroactive"? Locked	Jacques LeCavalier 27 Jul 2017	Emma Richardson 28 Jul 2017	3
	IP address being blocked by the server Locked	Rick Enderle, Jr. 25 Jul 2017	Just H 25 Jul 2017	1
	Security settings Locked	Ali Shettima 21 Jul 2017	John Okely 21 Jul 2017	1
	Code security certification Locked	Anand Rajendran 20 Jul 2017	Marcus Green 21 Jul 2017	2
	Can't enable web services for authentication Locked	Brad Smith 1 Jun 2017	Dave Perry 20 Jul 2017	3
	SQL-Injection Locked	Fabienne Neveu 14 Feb 2017	kim Rechter 19 Jul 2017	8
	Default Password policies: Self enrolment vs group enrolment Locked	Deleted user 14 Jun 2017	Deleted user 10 Jul 2017	3
	How do I remove "Forgotten your username or password?" in moodle 3.2 Locked	Obuntu Cracks 23 Apr 2017	Ambreen Kiran 7 Jul 2017	3
	Moving to HTTPS everywhere Locked	Michael Aherne 16 May 2017	Susan Mangan 7 Jul 2017	6
	is it possible that category administrator can upload new user and course Locked	rajani gupta 11 May 2017	Ambrish Tiwari 4 Jul 2017	2
	Antivirus Locked	Ripa Desai 18 May 2017	Rahul Rai 3 Jul 2017	2
	GeoLite Database Locked	Doug Moody 21 Jun 2017	Ken Task 21 Jun 2017	1
	settings for multiple manager(admin) for each organization Locked	Anand Vadivelu 19 May 2017	gurpreet singh 20 Jun 2017	1
	Moodle SSL Offloading Locked	Daniel Alves 9 Jun 2017	Daniel Alves 13 Jun 2017	5
	create an option to prevent xss injection ? Locked	Julien Boulen 1 Jun 2017	Marina Glancy 6 Jun 2017	1
	Security for SCORM files Locked	Peter Aherne 30 May 2017	Mathew Gancarz 31 May 2017	2
	Security Issue in Moodle 3.2.2: Can you tell me what happened with my content as a Administrator ... Locked	Ricardo Rodriguez 17 May 2017	Emma Richardson 17 May 2017	1
	Guide to ssl certificate https linux ubuntu apache Locked	Christian Kristiansen 1 May 2017	Ken Task 16 May 2017	10
	Daniel Esterly - Is Moodle secure to use with Windows 10 Locked	Daniel Esterly 12 May 2017	John Okely 15 May 2017	1
	settings required to do for running diff ministry sites on single moodle installation Locked	rajani gupta 10 May 2017	Emma Richardson 10 May 2017	1
	Access to lesson activities Locked	Joe Chacha 6 May 2017	Joe Chacha 6 May 2017	0
	Manager role with system role - only view site page forum, search for users too Locked	Usman Arshad 27 Apr 2017	Usman Arshad 27 Apr 2017	2
	How to display home page for non-login user ? Locked	Imran Patel 17 Apr 2017	Jon Bolton 17 Apr 2017	2
	Reviewing messages table for bullying incidents Locked	DR LMS 26 Mar 2017	Mike Hoddee 11 Apr 2017	1
	security issue Locked	Anderson Hsu 28 Nov 2016	Mike Hoddee 11 Apr 2017	4
	Site policy > empty frame Locked	Daniel S 9 Apr 2017	Ken Task 10 Apr 2017	4
	Plugins security and privacy Locked	Thomas Barna 31 Mar 2017	Jon Bolton 31 Mar 2017	2
	Recaptcha Locked	Miyone G 24 Feb 2017	Randy Thornton 28 Mar 2017	3
	Applying patch to protect against CVE-2017-2641 Locked	B J 21 Mar 2017	Nadav Kavalerchik 25 Mar 2017	18
	3.1.4 - new security Announcement: MDL-57597 and MDL-57596 competency Locked	Monica Franz 22 Mar 2017	Monica Franz 24 Mar 2017	7
	What are the best practices to determine if site was affected by security vulnerability Locked	Rex Lorenzo 23 Mar 2017	Randy Thornton 24 Mar 2017	1
	Folder Password in Moodle Locked	Yonten Jamtsho 17 Mar 2017	Mary Cooch 17 Mar 2017	1
	Moodle not caching/Storing LDAP username and passwords Locked	RSA NOC 14 Mar 2017	RSA NOC 15 Mar 2017	7
	Moodle acting as OAuth2 server Locked	Deleted user 2 Mar 2017	Deleted user 2 Mar 2017	0
	Restrict Access to Categories By User Locked	William Workman 7 Jan 2016	John Provasnik 28 Feb 2017	5
	Cloudflare Security Issue Locked	Matt Spurrier 25 Feb 2017	Randy Thornton 28 Feb 2017	1
	How to restrict users who are not using office's computer? Locked	Fung Tony 10 Feb 2017	Jon Bolton 23 Feb 2017	3
	Avoiding LDAP data in plain text when you check the source code from a browser Locked	Robespierre Galindo 16 Feb 2017	Randy Thornton 16 Feb 2017	3
	task: download all submissions is possible even when you only are allowed to assess one Locked	Jeus Perez 9 Feb 2017	Dave Perry 13 Feb 2017	2
	Redis Sessions Locked	John Rickard 10 Feb 2017	John Rickard 10 Feb 2017	0
	Move to secure protocol (https) issues Locked	Wes Matchett 2 Feb 2017	Ken Task 8 Feb 2017	8
	Can't change a password for the student Locked	Jesse Techno 3 Feb 2017	Jesse Techno 3 Feb 2017	2
	PHPMailer vulnerability in no-reply address Locked	mimi nom 30 Jan 2017	mimi nom 31 Jan 2017	4
	loginhttps true = too many redirects? Locked	Christos Savva 19 Jan 2017	Christos Savva 20 Jan 2017	8
	[Security] How to protect source code and database from hosting company Locked	Hu La 9 Jan 2017	Dave Perry 16 Jan 2017	7
	"Guest user has logged in" ? Locked	g k 7 Jul 2016	Ken Task 9 Jan 2017	2
	[Security] Moodle showed all users to Sub Category Manager Locked	Hu La 7 Jan 2017	Emma Richardson 7 Jan 2017	1
	Moodle 3.1.3: Website Adminstration Security Overview Locked	Monica Franz 5 Jan 2017	John Okely 6 Jan 2017	2
	Fun times with Poisoned Cookies! Locked	Robin Stark 22 Dec 2016	Randy Thornton 23 Dec 2016	1
	Limit number of ip adresses per user Locked	marwa bekrar 8 Dec 2016	Robin Stark 22 Dec 2016	4
	SSL Proxy woes Locked	Ben Steeples 27 Jul 2012	Robin Stark 22 Dec 2016	20
	Permissions Issues Locked	Aretha Etienne 17 Nov 2016	Randy Thornton 22 Dec 2016	4
	Gravatar Advisory: How to Protect Your Email Address and Identity Locked	Nadav Kavalerchik 9 Dec 2016	Nadav Kavalerchik 9 Dec 2016	0
	Caching Locked	Aretha Etienne 7 Dec 2016	Aretha Etienne 7 Dec 2016	0
	How secure is using admin/tool/uploaduser/index.php Locked	callum Wood 5 Dec 2016	Matt Bury 6 Dec 2016	3
	Hiding email addresses in Moodle 2.6 forums Locked	John Edmiston 9 Oct 2014	Randy Thornton 3 Dec 2016	3
	Allow view-only access to user list Locked	Joe Behymer 15 Nov 2012	Randy Thornton 2 Dec 2016	5
	"view courses without participation" - not wanted / and changed? Locked	Klaas Hobo 17 Nov 2016	Klaas Hobo 19 Nov 2016	5
	help: how to get rid of these terrible infinite recaptcha loops Locked	Pieter van der Hijden 18 Nov 2016	Pieter van der Hijden 18 Nov 2016	0
	Single sign in from a student registration portal Locked	Abdulrauf Yamta 17 Nov 2016	Christopher McCool 18 Nov 2016	1
	Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 15 Nov 2016	10
	Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 14 Nov 2016	2
	Access to label's files prevented by user's rights? Locked	Philippe Decloitre 24 Jun 2015	T W 11 Nov 2016	2
	I think our Moodle site just survived a serious HACK attempt Locked	Deleted user 20 Oct 2016	Deleted user 8 Nov 2016	8
	MySQL / MariaDB / PerconaDB - Root Privilege Escalation Locked	Grant Mucha 4 Nov 2016	Grant Mucha 4 Nov 2016	0
	How to make sure Accounts get not shared? Max 3 IPs for 1 user Locked	Sven Faltin 24 Oct 2016	James McLean 26 Oct 2016	1
	Katharine Edson - How secure is to use Moodle? Locked	Katharine Edson 8 Oct 2016	Christopher McCool 22 Oct 2016	5
	how to restrict domain Locked	m question 16 Oct 2016	Helen Foster 21 Oct 2016	3
	Can I have moodle 2.9 onward function without a single cookie? Locked	Baljé Weber 17 Oct 2016	Baljé Weber 17 Oct 2016	0
	Windows PowerShell of AD Users to JSON Endpoint Fails to Upload Data Locked	Tim West 17 Oct 2016	Tim West 17 Oct 2016	0
	How to add/allow "unsecure" code examples as text in Moodle pages Locked	Til Edward 11 Oct 2016	Til Edward 15 Oct 2016	9
	Moodle 2.9 apache can access moodle files Locked	Zola Anderson 15 Oct 2016	Tim Hunt 15 Oct 2016	1
	Security Question Locked	Andrew Taylor 16 Jul 2014	Howard Miller 11 Oct 2016	20
	Alternatives to reCaptcha Locked	Colin Fraser 21 Sep 2016	Rick Jerz 24 Sep 2016	3
	How to fix a mix of secure and insecure content? Locked	Arturs Polis 6 Jun 2016	Luke Barone 24 Sep 2016	3
	New Profile field not working as a course restriction Locked	Anne Sherman 14 Sep 2016	Helen Foster 15 Sep 2016	3
	Hiding users in grade reports Locked	bart de bie 12 Sep 2016	Emma Richardson 13 Sep 2016	3
	forgotten password stopped working with https Locked	Martin Millmore 13 Sep 2016	Martin Millmore 13 Sep 2016	2
	My homepage (frontpage) before login is only showing the login module Locked	Stefan Stefansson 6 Sep 2016	Stefan Stefansson 6 Sep 2016	2
	Secure Cookies Locked	Deleted user 1 Sep 2016	John Okely 2 Sep 2016	1
	IP Blocker - help Locked	Paul Baumeister 20 Feb 2013	Ernani Veloso Freire 1 Sep 2016	16
	dbuser hash for password in config.php? Locked	J C 19 Sep 2011	Wissam Nahas 31 Aug 2016	4
	Autologin with the special account Locked	Grigorii Andreev 28 Aug 2016	Grigorii Andreev 28 Aug 2016	0
	cross domain ajax in script Locked	Bradley Botkin 12 Aug 2016	Bradley Botkin 17 Aug 2016	5
	Category Permissions and Restrictions Locked	David Van Thillo 17 Aug 2016	David Van Thillo 17 Aug 2016	0
	Moodle should not force a password change Locked	Irma Boks - Eek 9 Aug 2016	Irma Boks - Eek 10 Aug 2016	6
	Captcha alternatives? Locked	Tom Litchfield 24 Feb 2016	Visti Larsen 4 Aug 2016	7
	Issues with a virus in Moodle 3.0.2+ Locked	Luis Pu 2 Aug 2016	Ken Task 3 Aug 2016	7
	Read Only Site Locked	Kehinde Okesanjo 12 Sep 2011	Antonio Negro 30 Jul 2016	9
	Httpoxy vulnerabilities in php addressed? Locked	Jerry Lau 28 Jul 2016	Ken Task 29 Jul 2016	1
	Password Security in moodle 2.9 or greater Locked	Sanmeet Singh 19 Jul 2016	Sanmeet Singh 19 Jul 2016	4
	SSL certificate issues Locked	raghav agarwal 30 Mar 2013	James McLean 19 Jul 2016	23
	Restricting Access to URL in course Locked	philipp lesmana 14 Jul 2016	philipp lesmana 14 Jul 2016	0