Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Restricting Access to URL in course Locked	philipp lesmana 14 July 2016	philipp lesmana 14 July 2016	0
	Installing ssl certificates in moodle server Locked	Christine Mburu 4 Feb 2014	Linda Petty 13 July 2016	2
	Server breached front-end - malicious files uploaded Locked	Michael Iscool 30 June 2016	Ken Task 8 July 2016	19
	Should I use SSL for Login? Why not? Locked	Paul Lindgreen 27 June 2014	Dave Perry 23 June 2016	8
	Remove login link from pages or disable logging in for users Locked	Jordan Floyd 17 Mar 2011	Leticia Dark-rose 21 June 2016	4
	setup https via F5 Locked	Jaifar Al Shizawi 13 June 2016	Bret Miller 13 June 2016	2
	How to hide/disable courses and quiz? Locked	Lucilla Wang 31 May 2016	Lucilla Wang 6 June 2016	17
	SECURITY WARNING! (moodledata) Locked	Can Yasa 2 June 2016	Can Yasa 2 June 2016	3
	Making students invisible to each other. Locked	Shoned Jones 31 May 2016	Richard Oelmann 1 June 2016	2
	Moodle Security Locked	Ben Keough 27 May 2016	James McLean 30 May 2016	5
	Reset of admin password Locked	David Paige 2 June 2015	Ranil Peiris 26 May 2016	9
	Google keyword in Japanese characters for my moodle site Locked	Milan Mihajlov 20 Apr 2016	Guillermo Madero 19 May 2016	11
	Security for self enrolment and enrolment keys Locked	Alice Constable 13 May 2016	Alice Constable 17 May 2016	2
	Bots are knocking our guest door ? Locked	Antti Peltonen 17 May 2016	Antti Peltonen 17 May 2016	0
	Assigning a password Locked	Íde O'Neill 14 May 2016	Emma Richardson 16 May 2016	2
	Harold Nartey - Is Moodle Secure to Use? Locked	Harold Nartey 13 May 2016	Mike Churchward 13 May 2016	1
	Virtual schools/courses hidden from other groups/cohorts? Locked	Dave S 12 May 2016	Dave S 12 May 2016	0
	Limit the number of users into a group Locked	Paul Lemarchand 11 Apr 2016	Sebastian Wz 11 May 2016	1
	Allow (Deny access) in Browse list of users Locked	Wes Sykes 13 July 2010	Blair F. 28 Apr 2016	4
	After Upgrade to 3.0, SSL No Longer Working Locked	Greg Dietrich 27 Apr 2016	James McLean 27 Apr 2016	1
	Secure PHP Configuration Settings for Moodle Locked	Calvin Bu 22 Apr 2016	Ken Task 26 Apr 2016	3
	Comment request on vulnerability results Locked	Panagiotis Petasis 22 Apr 2016	Richard Oelmann 25 Apr 2016	7
	Security overview, some questions and question on backup Locked	John Rambo 20 Apr 2016	Emma Richardson 20 Apr 2016	4
	Customize user privacy - on user-level Locked	Marjan Milošević 24 July 2015	Devon Ritter 14 Apr 2016	1
	Possible Exploit - Accessing the Main Admins account through the CLI Locked	Alex Legg 13 Apr 2016	Alex Legg 13 Apr 2016	6
	Missing Secure Attribute in Encrypted Session (SSL) Cookie Locked	Vinod Kumar 13 Apr 2016	Vinod Kumar 13 Apr 2016	2
	Additional security measures for Moodle Locked	John Rambo 1 Apr 2016	Matt Bury 13 Apr 2016	8
	Visitors can access lesson video by copying link Locked	prashant gupta 8 Dec 2015	Guillermo Madero 12 Apr 2016	9
	"Invalid Login" if country code is lowercase Locked	Derek Chaplin 9 Apr 2016	Derek Chaplin 9 Apr 2016	0
	Is it possible to edit the Logs and specially the admin Logs Locked	Osama Hasan 6 Apr 2016	Richard Oelmann 7 Apr 2016	2
	Moodle does not restrict file types for uploads??? Security Risk??? Locked	Rob Barnett 18 Sept 2009	javier D 30 Mar 2016	17
	How do you secure email addresses? Locked	Paul Wakelam 10 Dec 2015	Richard Lisle 23 Mar 2016	10
	Hide courses and categories to specific role Locked	Renato Marchesani 17 Mar 2016	Howard Miller 19 Mar 2016	3
	access to server lost Locked	Hicham Doumali 9 Mar 2016	Hicham Doumali 18 Mar 2016	3
	user id '0' is changing passwords Locked	heli g 8 Feb 2016	Emma Richardson 17 Mar 2016	2
	Password Encryption MD5 plain text Locked	Rupesh Kumar 20 Nov 2015	Tim Hunt 11 Mar 2016	4
	xss risks - Advice please Locked	Marie Waterhouse 4 Mar 2016	Helen Foster 10 Mar 2016	8
	Log in location lock down Locked	Mitchell Gregory 23 Feb 2016	Mitchell Gregory 23 Feb 2016	5
	Access Logs Locked	John Rebtho 1 June 2009	Sudeep Nayak 22 Feb 2016	3
	Alias name - workaround Locked	Muse 79 20 Feb 2016	Just H 21 Feb 2016	3
	Is Moodle ok on GitHub? Locked	Leticia Dark-rose 11 Feb 2016	Evan Donovan 20 Feb 2016	9
	Database credentials can they be seen? Locked	Heather P 12 Feb 2016	Heather P 17 Feb 2016	4
	Maximum Time per Day Locked	Seth Mengal 29 July 2013	Howard Miller 16 Feb 2016	12
	IPV6 address in IP Blocker Locked	rabin sk 12 Feb 2016	rabin sk 12 Feb 2016	0
	Move Moodle Config Outside of Web Root Locked	Lewis Hackfath 9 Feb 2016	James McLean 10 Feb 2016	12
	moodle 2.4.3 : script injection in header Locked	razer raz 9 Feb 2016	razer raz 10 Feb 2016	8
	MySQL SSL Connection? Locked	William Voyek 11 Aug 2009	Mohammed Mohammed 7 Feb 2016	4
	Moodle SSO using LDAP Locked	Trayton Mitchell 5 Feb 2016	Visvanath Ratnaweera 6 Feb 2016	5
	Blocking access to Users from outside the country Locked	david english 24 Jan 2016	Matt Bury 25 Jan 2016	12
	Moodledata ... Moodle Code ... htaccess-dist.txt files Locked	Ken Task 25 Jan 2016	Ken Task 25 Jan 2016	0
	Moodle not displaying errors Locked	Tyler Whiteley 15 Jan 2016	Richard Oelmann 24 Jan 2016	3
	CSP Locked	Martin Greenaway 17 June 2015	Martin Greenaway 23 Jan 2016	2
	How to force users password change weekly? Locked	Mario Gonzalez 7 Sept 2010	Clara MG 12 Jan 2016	5
	Moodle platform and security. Making the move. Locked	Shane Mundee 6 Jan 2016	Bret Miller 12 Jan 2016	4
	Advice please! Is Moodle safe? Locked	jesse magees 30 Apr 2015	Visvanath Ratnaweera 7 Jan 2016	16
	Authentication problem Locked	eduardo moisa 7 Jan 2016	eduardo moisa 7 Jan 2016	1
	prevent login from the same ip address for a time Locked	Mohammed awad 17 Dec 2015	Visvanath Ratnaweera 5 Jan 2016	13
	About Drupal + Moodle integration Locked	Raviteja Yarlagadda 16 Dec 2015	Ken Task 16 Dec 2015	1
	IP addresses used by Moodle's mail servers Locked	Dan OBrien 16 Dec 2015	Dan OBrien 16 Dec 2015	6
	How to see who changed letter grades site-wide? Locked	Juan F 17 Nov 2015	John Provasnik 7 Dec 2015	3
	Restricting guests from viewing the category structure and non guest-enabled courses Locked	Deleted user 4 Dec 2015	Deleted user 4 Dec 2015	0
	Using "http head method" in Moodle Locked	Naaman Fallouh 2 Dec 2015	Naaman Fallouh 2 Dec 2015	0
	Topic Hidden and activity show, feature or what? Locked	António Godinho 1 Dec 2015	António Godinho 2 Dec 2015	4
	Spam Filter? Locked	Alex Vanden Bosch 30 Nov 2015	Marcus Green 1 Dec 2015	2
	can my activity be seen? Locked	murdoc niccals 29 Nov 2015	Just H 29 Nov 2015	6
	2.9+ moodle - recaptcha suddenly stopped working Locked	ajeet Singh 1 Nov 2015	John Okely 17 Nov 2015	8
	Insecure dataroot (yet again) Locked	Visvanath Ratnaweera 14 Nov 2015	Visvanath Ratnaweera 15 Nov 2015	13
	Warning about the config.php file Locked	mimi nom 9 Nov 2015	Visvanath Ratnaweera 14 Nov 2015	5
	Moodle session tickets not expiring when closing the browser Locked	Shaun Conway 9 Oct 2015	Simon Rediss-Whitfield 3 Nov 2015	3
	reCAPTCHA is not working Locked	Pablo Española 23 Jan 2014	ajeet Singh 2 Nov 2015	2
	Security recovery plan Locked	dani dani 29 Oct 2015	Matt Bury 29 Oct 2015	2
	Block Access to Courses list Locked	Andrew Milner 28 Oct 2015	Andrew Milner 28 Oct 2015	0
	Moodle crashes when students press F5 (refresh) continuously Locked	Graciano Torrão 22 Oct 2015	Dan Marsden 28 Oct 2015	9
	User database Locked	Pal Kerecsenyi 26 Oct 2015	Richard Oelmann 27 Oct 2015	3
	How to check if a file was deleted and by whom? Locked	Miguel Da Silva 25 Oct 2015	Miguel Da Silva 26 Oct 2015	2
	SMTP password encryption Locked	Refi Shahul 25 Oct 2015	Refi Shahul 25 Oct 2015	2
	SSL causing Backup problem Locked	René Breedveld 12 Oct 2015	René Breedveld 20 Oct 2015	1
	security test Locked	maggie jelli 19 Oct 2015	Simon Rediss-Whitfield 19 Oct 2015	1
	accessing moodle from another site without logging in again Locked	tim lambert 15 Sept 2015	Jon Bolton 16 Oct 2015	1
	all the site notes are visible for the teacher Locked	Isaac Marco Blancas 2 Oct 2015	Jon Bolton 16 Oct 2015	1
	validation of username length Locked	Irith Herman 12 Oct 2015	Irith Herman 12 Oct 2015	0
	login issue Locked	maggie jelli 5 Oct 2015	Just H 11 Oct 2015	10
	Administrator Logging??? Locked	Vincent Gullotta 2 Oct 2015	Chris Wharton 5 Oct 2015	3
	Redirect error after enforcing https Locked	Oliver W 4 Oct 2015	Oliver W 4 Oct 2015	0
	Passwords Moodle v2.8 Locked	pat webber 2 Oct 2015	Helen Foster 2 Oct 2015	1
	Getting user passwords Locked	Chardelle Busch 22 Aug 2015	Vicke Denniston 2 Oct 2015	3
	Manager role not function as expected Locked	Trace James 24 Sept 2015	Trace James 29 Sept 2015	14
	Preventing download of audio files Locked	Anand Anand 4 Sept 2012	Roxana Cabrera 25 Sept 2015	2
	Access Moodle webservice using SAML Token Locked	Nitin Khubani 16 Sept 2015	Nitin Khubani 17 Sept 2015	1
	Moving whole site from http to https on LAMP virtual host Locked	Peter DeBruyn 15 Sept 2015	Peter DeBruyn 17 Sept 2015	4
	Open Access / Student User access Locked	Catherine Seeds 7 Sept 2015	Emma Richardson 7 Sept 2015	3
	prevent guest from seeing course summary Locked	Scott Brim 7 Sept 2015	Scott Brim 7 Sept 2015	1
	CSRF on moodle pages Locked	Naaman Fallouh 6 Sept 2015	Tim Hunt 7 Sept 2015	3
	Pass through single-sigon authentication Locked	Bryan Ward 5 Sept 2015	Bryan Ward 5 Sept 2015	0
	Removing the navigation block from Moodle 2.5? Locked	Andrew Leer 14 Aug 2015	Sam Alken 31 Aug 2015	1
	Force Front page sign in Locked	Edwin Cruz 31 July 2015	Sam Alken 31 Aug 2015	2
	registration approval Locked	Corey Whatever 13 July 2009	Michael Milette 26 Aug 2015	5
	Pre-Req Course Restrictions - Possible? Locked	Beth Haggenjos 6 Aug 2015	Dave Perry 17 Aug 2015	5
	Session and Cookie Locked	Vinod Kumar 7 May 2015	Daniel Paulo 4 Aug 2015	1
	Maintenance Mode Locked	Zee Sef 3 Aug 2015	Ken Task 3 Aug 2015	1