Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next

List of discussions. Showing 100 of 1431 discussions
Discussion	Started by	Last post	Replies
EU General Data Protection Regulation (GDPR) compliance	Martin Dougiamas 17 May 2017	Prince Namdev 9 Jul 2019	100
Problem redirecting http to https	Dave Langcaster 5 Apr 2020	Dave Langcaster 7 Apr 2020	2
Content sanitizing?	Ewout ter Haar 7 Apr 2020	Ewout ter Haar 7 Apr 2020	0
Create only alpha / numerical usernames (Prevent symbols)	Marie Waterhouse 3 Apr 2020	Marie Waterhouse 3 Apr 2020	0
HaProxy: Moodle complains about not running via SSL though it does	ray charles 4 Mar 2020	Matteo Scaramuccia 30 Mar 2020	15
Access to SharePoint files via Moodle Mobile?	Frank Burger 21 Mar 2020	Frank Burger 21 Mar 2020	0
LTI in moodle and security	Patrick Scott 13 Jan 2020	Lang Holloman 20 Mar 2020	1
How to show a label to a not logged user and hide it from a logged user	João Paulo Souza Soares 17 Mar 2020	John Provasnik 18 Mar 2020	2
My students don't have email!!!!	Tom Connolly 14 Mar 2020	Visvanath Ratnaweera 17 Mar 2020	2
Guest Access to Calendar Attachments.	Brian Pool 12 Mar 2020	Emma Richardson 12 Mar 2020	1
One Time Permission Camera Access	Nick Marr 11 Mar 2020	Nick Marr 11 Mar 2020	0
editing recent activity block	altan ahmet 28 Feb 2020	altan ahmet 9 Mar 2020	2
Limit number of IP Addresses per User	Jamie Zelenak-Hyre 27 Feb 2020	Jamie Zelenak-Hyre 3 Mar 2020	2
CVE-2020-1692	callum Wood 28 Feb 2020	Tim Hunt 29 Feb 2020	1
reset admin password?	Rachel Horst 6 Jun 2017	Vinod Kumar 26 Feb 2020	14
Multiple LDAP authentication servers	Hamza Khan 18 Feb 2020	Visvanath Ratnaweera 25 Feb 2020	1
Reset role button missing?	Richard van Iwaarden 25 Feb 2020	Richard van Iwaarden 25 Feb 2020	2
Identity Verification	Thomas Beard 7 Feb 2020	Dan Marsden 18 Feb 2020	4
Plugin privacy registry shows nothing	Lorin Toews 15 Apr 2019	Peter Diedrichs 17 Feb 2020	3
Data Deletion Request gives an error - Moodle 3.6.8	Dave Emsley 4 Feb 2020	Dave Emsley 14 Feb 2020	4
Data request download includes courses a user isn't enrolled on	Mark Sharp 12 Feb 2020	Mark Sharp 12 Feb 2020	0
Guest access to courses	Frank Burger 6 Feb 2020	Frank Burger 8 Feb 2020	6
SSL issue in moodle home page.	sarendar vennapureddy 31 May 2019	Visvanath Ratnaweera 7 Feb 2020	8
Adding Teacher and Group name on the home page when student logs in	Andrew McDonald 6 Feb 2020	Andrew McDonald 6 Feb 2020	0
Privacy Plug in and GDPR	Ric Robinson 5 Feb 2020	Thorsten Bartel 6 Feb 2020	3
Can WebServices calls or SCORMS circumvent?	Ken Task 31 Jan 2020	Ken Task 31 Jan 2020	0
certain paths available in url without logging in	Nicholas Esterhuysen 31 Jan 2020	Ken Task 31 Jan 2020	1
Someone viewing course with user id '0'	Jaka Spaka 25 Jan 2020	Gareth J Barnard 26 Jan 2020	1
Suspended accounts on App vs Browser	zohir meddane 23 Jan 2020	Juan Leyva 24 Jan 2020	3
Security of LDAP caching of passwords	stefan weber 20 Jan 2020	stefan weber 23 Jan 2020	2
myphp & Admin username/pass	Skyler Crandall 22 Jan 2020	Ken Task 22 Jan 2020	7
IP Blocker Issue - Urgent	Alexa Lupenec 16 Jan 2020	Ken Task 16 Jan 2020	2
Privacy in an LTI tool provider	George Schaathun 12 Jul 2019	George Schaathun 13 Jan 2020	2
[3.7]Block certain HTML codes	Richard van Iwaarden 12 Nov 2019	Michael Hawkins 13 Jan 2020	6
Security Features of Moodle	azhar mir 8 Jan 2020	Marcus Green 9 Jan 2020	1
external antivirus and header responses	André B 16 Dec 2019	André B 19 Dec 2019	2
Why aren’t deleted users actually deleted?	Natassia Stelmaszek 18 Dec 2019	Michael Hawkins 18 Dec 2019	1
How can I be update of any to moodle code security releases?	Patrick Scott 10 Dec 2019	koen roggemans 16 Dec 2019	4
How to force clear session cookie on logout for all resources	Debbie Kay 6 Dec 2019	Debbie Kay 6 Dec 2019	0
How easy is it to hack a Moodle site?	Teresa Fryer 13 Nov 2019	Tim Hunt 5 Dec 2019	8
Can logging be turned off for individual courses?	stefan weber 5 Dec 2019	stefan weber 5 Dec 2019	0
Content Security Policy	Hal MacLean 4 Dec 2019	Hal MacLean 4 Dec 2019	0
Has Moodle done any Vulnerability Assessments themselves?	Monty Bhatia 23 Nov 2019	Michael Hawkins 29 Nov 2019	10
Google is indexing content when Opentogoogle is disabled	Susana L. 20 Nov 2019	John Provasnik 27 Nov 2019	1
Vulnerabilities in Moodle code scan	Vinod Kumar Aleti 17 Jul 2019	Eu Wee TAN 22 Nov 2019	17
SSO	Didier T. 18 Nov 2019	Didier T. 18 Nov 2019	0
Automated Security Testing	John Papworth 13 Nov 2019	Michael Hawkins 14 Nov 2019	3
When QA testers test upcoming releases, do ...	Ken Task 11 Nov 2019	AL Rachels 11 Nov 2019	4
Moodle.org tracker ...	Ken Task 4 Nov 2019	Michael Hawkins 4 Nov 2019	1
Changing quiz password while quiz is underway	Ranjith Kunnath 2 Nov 2019	Tim Hunt 2 Nov 2019	1
Is Moodle Adminer a security risk?	Don Schwartz 2 Nov 2019	Ken Task 2 Nov 2019	2
moodle does not display the subscribe/creation date of account ?	pierre REMY 31 Oct 2019	pierre REMY 31 Oct 2019	0
Automating GDPR Data Request approval	Jeremy Virgo 30 Oct 2019	Michael Hawkins 30 Oct 2019	1
Corrections to the Moodle landscape as a result of the Facebook's breaches	Visvanath Ratnaweera 27 Mar 2018	Visvanath Ratnaweera 25 Oct 2019	9
Security issue with email change	François Lizotte 19 Oct 2019	François Lizotte 24 Oct 2019	2
Admin Log management	ansg ar 18 Oct 2019	ansg ar 18 Oct 2019	0
data request tasks failing	Mark Kinoshita 12 Oct 2019	Mark Kinoshita 18 Oct 2019	7
Editing Profile email error	Daniel Martins 3 Oct 2019	Daniel Martins 14 Oct 2019	2
Moodle does not work with WAF	Maddy Fu 10 Oct 2019	Michael Hawkins 14 Oct 2019	2
Allow only one dynamic ip	Adrián Fernández Martín 12 Oct 2019	Ken Task 14 Oct 2019	5
Port Scanning Alerts	Naline Lawrence 11 Oct 2019	Mathew Gancarz 11 Oct 2019	5
target=_blank	Lucien Stals 10 Oct 2019	Mathew Gancarz 11 Oct 2019	4
Authentification to download attachments	Slaven Marsic 7 Oct 2019	Visvanath Ratnaweera 7 Oct 2019	3
Cookie Consent and Privacy Notice Popup	Alan Christie 13 Jul 2018	Gary Payne 7 Oct 2019	13
log in issues	Jude douglas 5 Oct 2019	Jude douglas 5 Oct 2019	0
LDAP server authentication	Jorge G. C. 16 Sep 2019	Jon Bolton 3 Oct 2019	12
Outstanding Tracker Issue	C Behan 24 Sep 2019	C Behan 25 Sep 2019	3
question type plugin specific feedback	Karin Borm 12 Sep 2019	Tim Hunt 13 Sep 2019	3
User Profile Fields and guests	Matthew Landseadel 5 Sep 2019	Randy Thornton 6 Sep 2019	1
Getting ClamAV Daemon working in Ubuntu 18.04	Mark Sharp 19 Oct 2018	Alan Hefner 28 Aug 2019	2
is it possible to have username instead their ID in the logs or more details ? ?	pierre REMY 26 Aug 2019	pierre REMY 26 Aug 2019	0
login to Moodle from a script/application	Kris Van Gelder 25 Feb 2019	Martin Carruth 20 Aug 2019	4
Manager access at CATEGORY level?	Eric Martin 17 Aug 2019	Eric Martin 17 Aug 2019	0
Read only Site	Anze Pratnemer 30 Jul 2019	Andrew Nicols 31 Jul 2019	2
sitepolicynotagreed error appears on site policy page with bad format	Roberto Cucco 24 Jul 2019	Sergio Rabellino 25 Jul 2019	3
Securing activity "files"?	Jeff M 12 Jul 2019	Jeff M 14 Jul 2019	4
SMTP Email password viewing	Chris Swinney 12 Jul 2019	Visvanath Ratnaweera 12 Jul 2019	3
Passwords and User Uploads	Stephen Oxlade 12 Jul 2019	Stephen Oxlade 12 Jul 2019	0
GDPR is a no go for now	Ray Havlin 23 Jan 2019	Helen Foster 4 Jul 2019	5
ZAP Scanning Report - High Risk SQL Injection on Login Page	Pradipta Suryadi 2 Jul 2019	Pradipta Suryadi 4 Jul 2019	3
how to display last ip address in column of user list ?	pierre REMY 28 Jun 2019	AL Rachels 1 Jul 2019	3
how to restrict the accessibility or visibility of user profile fields ?	pierre REMY 20 Jun 2019	pierre REMY 21 Jun 2019	5
can we make visible course only for an IP address ?	pierre REMY 2 Mar 2019	Randy Thornton 21 Jun 2019	7
LTI Vulnerability	Robert Kovacich 31 Mar 2019	Adam Jenkins 15 Jun 2019	5
Retention period.	Henrik sune Pedersen 14 Jun 2019	Henrik sune Pedersen 14 Jun 2019	0
Account lockout threshold? Why is the default no?	Billy Zwiener 30 May 2019	Billy Zwiener 2 Jun 2019	3
cannot delete some users	stefan weber 20 May 2019	Luis de Vasconcelos 21 May 2019	4
Profile picture changes on specific user	Joan Llimiñana 16 May 2019	Joan Llimiñana 21 May 2019	4
Lots of requests in access_log for outbound connections	David White 16 May 2019	Evan Donovan 19 May 2019	15
What does your upgrade schedule look like to keep up with security?	Rauhan Farrukh 10 May 2019	Rauhan Farrukh 17 May 2019	4
User deletion request for plugins - forum posts	Vincent VEBER 17 May 2019	Vincent VEBER 17 May 2019	0
Useragent	Robert Hegestedt 17 May 2019	Robert Hegestedt 17 May 2019	2
Course Categories Page Public	Wolf Ventir 14 May 2019	Wolf Ventir 15 May 2019	4
SSL config on CentOS/Nginx	Martin Williams 30 Apr 2019	Ken Task 4 May 2019	22
Firewall problem	Robert Hegestedt 16 Apr 2019	Robert Hegestedt 3 May 2019	5
Is this possible? Policies and agreements view after login, not before...	Oli G. 1 May 2019	Oli G. 1 May 2019	0
ssl problem	FaRzad Shami 6 Mar 2019	Martin Williams 30 Apr 2019	1
Audit log of user activity	Kate Dawson 15 Apr 2019	Randy Thornton 27 Apr 2019	6
Restricting site access	Carl Byerley 22 Apr 2019	Ken Task 26 Apr 2019	3
Manual Login	Syed Ali 24 Apr 2019	Ken Task 24 Apr 2019	5

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next