Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next

List of discussions. Showing 100 of 1499 discussions
Discussion	Started by	Last post	Replies
EU General Data Protection Regulation (GDPR) compliance Locked	Martin Dougiamas 17 May 2017	Prince Namdev 9 Jul 2019	100
About JQuery	Mahmood Naderan 11 Jun 2020	Michael Hawkins 30 Oct 2020	8
Moodle db server hacked	manoj joseph 24 Oct 2020	manoj joseph 24 Oct 2020	0
Database: Operating system used to Access Moodle	Blaž Podobnik 20 Oct 2020	Ken Task 20 Oct 2020	1
Guest login Suddenly stopped Working	Deepika Sahu 15 Oct 2020	Deepika Sahu 15 Oct 2020	0
Getting ClamAV Daemon working in Ubuntu 20.04	Davide Longo 11 Oct 2020	Tim Hunt 13 Oct 2020	1
VAPT Issues reported on Moodle 3.9.2+	Vinod Kumar Aleti 8 Oct 2020	Michael Hawkins 9 Oct 2020	4
student is not allowed to enter from a device different from the device he entered for the first ...	Jo Jo 29 Sep 2020	Visvanath Ratnaweera 30 Sep 2020	2
report by fraudulent mail	Iris Fernández 24 Sep 2020	Kaye Cheung 29 Sep 2020	3
How to hide bbb secret key on moodle?	Kenan Babacic 25 Sep 2020	Tim Hunt 26 Sep 2020	1
BURP scan: Session token in URL and Short Anti-CSRF token value detected	Rod Spears 24 Sep 2020	Rod Spears 25 Sep 2020	5
DDOS Protection	Eric Katchan 18 Sep 2020	Eric Katchan 18 Sep 2020	0
`Forbidden. "sesskey" field is missing or contains an incorrect value.`	cyber sec 15 Sep 2020	cyber sec 17 Sep 2020	2
Permissions for guests and connected users	Irith Herman 16 Sep 2020	Irith Herman 16 Sep 2020	0
Developer Admin Access Security	Keith VW 15 Aug 2020	Keith VW 11 Sep 2020	2
Google document converter and privacy/GDPR	Jari Vilkman 11 Sep 2020	Jari Vilkman 11 Sep 2020	0
Cannot find 'loginhttps' in mdl_config	Esli Verheggen 10 Sep 2020	Esli Verheggen 10 Sep 2020	1
Invalid Login Token	Mahmood Naderan 10 Jul 2020	Mahmood Naderan 10 Sep 2020	4
Block CLI login by Main Admin	Abayomi Dipeolu 9 Sep 2020	Emma Richardson 9 Sep 2020	1
Invalid sesskey Problem	James Quinones 9 Sep 2020	James Quinones 9 Sep 2020	0
Burp Suite Security report shows Issues for Moodle 3.5	vikas k 3 Sep 2020	Dan Marsden 7 Sep 2020	7
Inserting Javascript code in user profile (description field)	Peter Allen 21 Aug 2020	Michael Hawkins 24 Aug 2020	1
Getting ClamAV Daemon working in Ubuntu 18.04	Mark Sharp 19 Oct 2018	tore erotavlas 21 Aug 2020	6
Cookie Consent and Privacy Notice Popup	Alan Christie 13 Jul 2018	Mathias Nguyen 20 Aug 2020	14
reset admin password?	Rachel Horst 6 Jun 2017	Frank Santos 16 Aug 2020	15
How can we delete entries in datarequests overview?	Ralf Hilgenstock 15 Aug 2020	Ralf Hilgenstock 15 Aug 2020	0
Should /admin/cli contents be hidden?	Christopher King 17 May 2020	Stefano Krister 28 Jul 2020	1
Multi-Factor authentication plugin for only specific users	Mario Gharib 13 Jul 2020	Tim Hunt 24 Jul 2020	1
User Audit in Prison Environement	Duncan Blake 19 Jul 2020	Visvanath Ratnaweera 22 Jul 2020	5
Prevent piracy - add watermark with user username to videos	Joana Pauperio 21 Jul 2020	Matt Bury 22 Jul 2020	1
Privacy Policy on Every Signon	Ryan Campbell 21 Jul 2020	Ryan Campbell 21 Jul 2020	0
Guest user	E HP 19 Jul 2020	E HP 21 Jul 2020	3
GDPR compliance & Moodle	Bente Olsen 17 Jul 2020	Michael Hawkins 20 Jul 2020	3
install CERTbot on moodle	Luis Alford 18 Jul 2020	Luis Alford 18 Jul 2020	2
'Successful Login Notification' to catch potential impersonation	Mario Gharib 13 Jul 2020	Mario Gharib 16 Jul 2020	4
Multi-Factor authentication plugin for only specific users	Mario Gharib 13 Jul 2020	Dan Marsden 16 Jul 2020	2
Email-based self-registration security without reCaptcha	Abhas Abhinav 16 Jul 2020	Abhas Abhinav 16 Jul 2020	0
Sending anonymous email	Kate Rhodes 10 Jul 2020	Kate Rhodes 16 Jul 2020	4
How can we disable attemp button when browser is closed	John Dafielmoto 3 Jul 2020	Visvanath Ratnaweera 11 Jul 2020	1
Files and uploads	Sultan Mehmood 30 Jun 2020	Michael Hawkins 1 Jul 2020	1
Messages in the sent folder of the email client	Mahmood Naderan 28 Jun 2020	Mahmood Naderan 30 Jun 2020	3
Trusted contents from users	Mahmood Naderan 17 Jun 2020	Michael Hawkins 22 Jun 2020	6
Modifying jQuery	Mahmood Naderan 19 Jun 2020	Mahmood Naderan 19 Jun 2020	0
Issue with javascript.php	Mahmood Naderan 17 Jun 2020	Mahmood Naderan 17 Jun 2020	2
data request tasks failing	Mark Kinoshita 12 Oct 2019	Mark Kinoshita 16 Jun 2020	10
Guest Access to Calendar Attachments.	Brian Pool 12 Mar 2020	Brian Pool 15 Jun 2020	2
Invalid Login Attempt	Visionaries ICT 12 Jun 2020	Visionaries ICT 14 Jun 2020	2
Security checks and Default role for all users	Séverin Terrier 15 May 2020	Nicolas Martignoni 12 Jun 2020	3
Privacy policies based on cohorts	andrea lms 8 Jun 2020	andrea lms 9 Jun 2020	2
Privacy consent on courses	andrea lms 4 Jun 2020	andrea lms 8 Jun 2020	2
User log in only from Mobile app	Misganu Muruts 7 Jun 2020	Misganu Muruts 7 Jun 2020	0
Assistance with running Cron	Heidie Chaplin 5 Jun 2020	Heidie Chaplin 5 Jun 2020	0
Manually update the MathJax URL in site administration to reference the patched version but failed	Bei Chapman 3 Jun 2020	Ken Task 4 Jun 2020	7
Cannot read WP salted passwords via External database authentication	Stavros Filippidis 28 Apr 2020	Leon Stringer 2 Jun 2020	1
Moodle data folder permissons	Eduardo Aspe 29 May 2020	Visvanath Ratnaweera 1 Jun 2020	10
Removing Teacher Permissions	Colin Tennyson 29 May 2020	Tim Hunt 30 May 2020	1
Best way to embed videos in courses and preventing download	umberto de domenico 21 May 2020	Rick Jerz 26 May 2020	7
Making embedded content visible for roles other than Admin	DaVinci Menno 22 May 2020	DaVinci Menno 22 May 2020	0
login page	Stefan Lippke 24 Apr 2020	Stefan Lippke 18 May 2020	2
Quick Question: Moodle backups and privacy	Bill Johnson 15 May 2020	Marcus Green 17 May 2020	1
Reset role button missing?	Richard van Iwaarden 25 Feb 2020	Séverin Terrier 15 May 2020	3
can a user steal another user's session by stealing it's session cookie?	Di Juwel 12 May 2020	Michael Hawkins 14 May 2020	3
any risks to report all PHP errors on production ?	Julien Boulen 13 May 2020	Julien Boulen 13 May 2020	2
Restrict access to courses during a period of hours on a day	Adolfo Franco 22 Apr 2020	Visvanath Ratnaweera 12 May 2020	3
Database connection failed	Safeen Shun 5 May 2020	koen roggemans 7 May 2020	9
Hidden course is visible to user with "Student" role in the course	Ricardo Caiado 2 May 2020	Mary Cooch 3 May 2020	4
Securing moodle courses / intellectual property	DJSH H 2 May 2020	DJSH H 2 May 2020	2
Ability for "view only" on PDFs	Rachael Gaunce 28 Apr 2020	Rick Jerz 28 Apr 2020	4
download backup via file picker	Deleted user 26 Apr 2020	Ken Task 27 Apr 2020	6
Dialogue box when forced to change the password	Tom Connolly 21 Apr 2020	Emma Richardson 22 Apr 2020	3
Test cheating: Tracking students' use of TeamViewer	Atikhom Thienthong 21 Apr 2020	Dan Marsden 22 Apr 2020	3
image and pdf not found after https	melina meline 21 Apr 2020	melina meline 21 Apr 2020	2
How to set SMTP server for Moodle 3.7?	priya a 19 Apr 2020	Emma Richardson 19 Apr 2020	1
Microsoft Streams and 3rd party cookies	Ecole Mosaic 14 Apr 2020	Ecole Mosaic 14 Apr 2020	0
Access to SharePoint files via Moodle Mobile?	Frank Burger 21 Mar 2020	Jorge Farfan 14 Apr 2020	1
Security overview - Allow EMBED and OBJECT tags?	Jim Courter 14 Apr 2020	Jim Courter 14 Apr 2020	0
Problem redirecting http to https	Dave Langcaster 5 Apr 2020	Dave Langcaster 7 Apr 2020	2
Content sanitizing?	Ewout ter Haar 7 Apr 2020	Ewout ter Haar 7 Apr 2020	0
Create only alpha / numerical usernames (Prevent symbols)	Marie Waterhouse 3 Apr 2020	Marie Waterhouse 3 Apr 2020	0
HaProxy: Moodle complains about not running via SSL though it does	ray charles 4 Mar 2020	Matteo Scaramuccia 30 Mar 2020	15
LTI in moodle and security	Patrick Scott 13 Jan 2020	Lang Holloman 20 Mar 2020	1
How to show a label to a not logged user and hide it from a logged user	João Paulo Souza Soares 17 Mar 2020	John Provasnik 18 Mar 2020	2
My students don't have email!!!!	Tom Connolly 14 Mar 2020	Visvanath Ratnaweera 17 Mar 2020	2
One Time Permission Camera Access	Nick Marr 11 Mar 2020	Nick Marr 11 Mar 2020	0
editing recent activity block	altan ahmet 28 Feb 2020	altan ahmet 9 Mar 2020	2
Limit number of IP Addresses per User	Jamie Zelenak-Hyre 27 Feb 2020	Jamie Zelenak-Hyre 3 Mar 2020	2
CVE-2020-1692	callum Wood 28 Feb 2020	Tim Hunt 29 Feb 2020	1
Multiple LDAP authentication servers	Hamza Khan 18 Feb 2020	Visvanath Ratnaweera 25 Feb 2020	1
Identity Verification	Thomas Beard 7 Feb 2020	Dan Marsden 18 Feb 2020	4
Plugin privacy registry shows nothing	Lorin Toews 15 Apr 2019	Peter Diedrichs 17 Feb 2020	3
Data Deletion Request gives an error - Moodle 3.6.8	Dave Emsley 4 Feb 2020	Dave Emsley 14 Feb 2020	4
Data request download includes courses a user isn't enrolled on	Mark Sharp 12 Feb 2020	Mark Sharp 12 Feb 2020	0
Guest access to courses	Frank Burger 6 Feb 2020	Frank Burger 8 Feb 2020	6
SSL issue in moodle home page.	sarendar vennapureddy 31 May 2019	Visvanath Ratnaweera 7 Feb 2020	8
Adding Teacher and Group name on the home page when student logs in	Andrew McDonald 6 Feb 2020	Andrew McDonald 6 Feb 2020	0
Privacy Plug in and GDPR	Ric Robinson 5 Feb 2020	Thorsten Bartel 6 Feb 2020	3
Can WebServices calls or SCORMS circumvent?	Ken Task 31 Jan 2020	Ken Task 31 Jan 2020	0
certain paths available in url without logging in	Nicholas Esterhuysen 31 Jan 2020	Ken Task 31 Jan 2020	1
Someone viewing course with user id '0'	Boštjan Gabrovšek 25 Jan 2020	Gareth J Barnard 26 Jan 2020	1
Suspended accounts on App vs Browser	zohir meddane 23 Jan 2020	Juan Leyva 24 Jan 2020	3

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next