Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1534 discussions
Discussion	Started by	Last post	Replies
Anti-Virus Exceptions Locked	Phil B 17 Sep 2011	Phil B 23 Sep 2011	4
Anti-Virus in Moodle Locked	Sally Lacbay 22 Sep 2011	Sally Lacbay 23 Sep 2011	2
Hardening the password policy Locked	Carlos Eduardo Angarita Marquez 16 Sep 2011	Carlos Eduardo Angarita Marquez 16 Sep 2011	5
Disable Email Requirement PHP (Where to start) Locked	Alex Illsley 7 Sep 2011	Juan Rubio 12 Sep 2011	1
Moodle Security Mailing Lists Locked	C Bartlett 9 Sep 2011	C Bartlett 11 Sep 2011	2
LDAP Question Locked	Devin Roush 19 Aug 2011	Michael Woods 9 Sep 2011	3
Self enrolment Locked	Visi Alaminos 9 Sep 2011	Visi Alaminos 9 Sep 2011	3
Enable Moodle's mail-bounce policy to avoid spam-like behavior Locked	i idearius 6 Sep 2011	i idearius 6 Sep 2011	0
I want to run moodle for 150 people... (off my own server) Locked	hadyn ranson 3 Sep 2011	Visvanath Ratnaweera 6 Sep 2011	2
Permission Denied / Theme Upload Locked	Robert Lightburn 3 Sep 2011	Alex Walker 5 Sep 2011	1
IP Blocked Out of Moodle Locked	Steve Cook 31 Aug 2011	Deleted user 31 Aug 2011	1
Intermittent: This course does not allow public access Locked	Jonny Barnstorf 30 Aug 2011	Jonny Barnstorf 30 Aug 2011	0
Clamav test Locked	bahaa bacharouch 23 Aug 2011	bahaa bacharouch 25 Aug 2011	2
My site is listed as suspicious site !! help mee Locked	eda karacelebi 15 Aug 2011	Iñaki Arenaza 21 Aug 2011	6
Teachers unable to restore automated backup files (error/invalidrestorefile) Locked	Brian Bennett 20 Aug 2011	Brian Bennett 20 Aug 2011	0
Registration without email? Locked	chris justus 13 Aug 2011	Doug Moody 19 Aug 2011	2
Hiding IP Addresses in Reports Logs Locked	Karen Crumbley 18 Aug 2011	Howard Miller 18 Aug 2011	3
Moodle & PHPMotion login integration with LDAP Locked	Adam B 13 May 2011	Nadav Kavalerchik 15 Aug 2011	1
Limiting Incorrect Login Attempts Locked	David Price 28 Sep 2009	Alex Walker 12 Aug 2011	7
What is the root@localhost ? Locked	Ben Me 11 Aug 2011	Chris Collman 12 Aug 2011	9
Calendar in v2.1.0 Locked	Jason Cameron 12 Aug 2011	Dan Marsden 12 Aug 2011	1
Moodle -Admin Password reset Locked	Tobias Foppen 10 Aug 2011	Marcus Green 10 Aug 2011	1
Restricting access to only one course, whilst overcoming the e-mail based self registration hurdle Locked	Marcel Mihulka 9 Aug 2011	Marcel Mihulka 9 Aug 2011	0
Clamav and non standard modules Locked	Jukka Vähäaho 1 Aug 2011	Jukka Vähäaho 1 Aug 2011	0
Subscription to security mailinglist doesn't work Locked	Alexander Bias 28 Jul 2011	Alexander Bias 1 Aug 2011	2
Restricting access to administration Locked	Fouzi Sukhilala 28 Jul 2011	Fouzi Sukhilala 28 Jul 2011	0
Restricting file types Locked	C Bartlett 28 Jul 2011	C Bartlett 28 Jul 2011	0
Restricting Access to Moodle Uploaded files Locked	Nauman Nadeem 27 Jul 2011	Nauman Nadeem 27 Jul 2011	2
Useing HTTPS for logins Locked	Khaled Hamadmad 21 Jul 2011	Chad Outten 22 Jul 2011	2
Account on moodle.org got spam email Locked	Jerry Lau 22 Jul 2011	Helen Foster 22 Jul 2011	2
display php errors Locked	g k 20 Jul 2011	g k 22 Jul 2011	2
Forum hacked Locked	Higor Oliveira 7 Jun 2011	Higor Oliveira 20 Jul 2011	3
Reports > security overview question Locked	Jeff Wood 19 Jul 2011	Jeff Wood 19 Jul 2011	0
Single link Locked	Sir Leo 18 Jul 2011	Lars-Olof Krause 19 Jul 2011	2
LDAP Users Import Locked	Hossam eldin Reda Ibrahim 18 Jul 2011	Deleted user 18 Jul 2011	1
Problems with sessions (1.9.9 -> 1.9.12+) Locked	Jan Bartsch 15 Jul 2011	Jan Bartsch 15 Jul 2011	0
Hack Detection and Repair Locked	Avrila Klaus 14 Jul 2011	Timothy Kaemmerer 15 Jul 2011	1
User profile permissions Locked	Amy Severson 9 Jul 2011	Amy Severson 15 Jul 2011	4
Company A can still see company B. Help needed. Locked	Alan Muscat 6 Jul 2011	Thibault Hermes 14 Jul 2011	1
spam messages being sent through MOODLE Locked	Steve Gilmore 14 Jun 2011	Helen Foster 6 Jul 2011	3
Restrict Access to Courses (Moodle 1.9) Locked	Stephen Martin 15 Jun 2011	Stephen Martin 5 Jul 2011	4
CONTEXT_COURSE on web service Locked	Balaji Kutty 5 Jul 2011	Balaji Kutty 5 Jul 2011	0
Nessus and PHP upgrade Locked	Deleted user 2 Jul 2011	Deleted user 2 Jul 2011	0
Controlling what Guests see Locked	Alan Muscat 28 Jun 2011	Alan Muscat 28 Jun 2011	0
Security of moodledata directory on linux server Locked	Marius S 23 Jun 2011	Deleted user 27 Jun 2011	4
Moodle 2.0.3 with ClamAV - Detection Failure Locked	C Bartlett 21 Jun 2011	C Bartlett 25 Jun 2011	1
Question about sanitizing inputs in Moodle Locked	Timothy Kaemmerer 25 Jun 2011	Timothy Kaemmerer 25 Jun 2011	2
Hiding certain courses from guests Locked	Alan Muscat 24 Jun 2011	Alan Muscat 24 Jun 2011	0
how to keep one user can only be a single login? Locked	Adi Prasetya 24 Jun 2011	Deleted user 24 Jun 2011	3
Is this actually possible in Moodle 2.x? Locked	Alan Muscat 21 Jun 2011	Guillermo Madero 24 Jun 2011	6
one user one login Locked	Adi Prasetya 23 Jun 2011	Adi Prasetya 23 Jun 2011	0
Restricting Users without Enrolment Key Locked	Jerald Fernando 22 Jun 2011	Jerald Fernando 22 Jun 2011	0
Cross-Moodle Logins Locked	Mario Stylianou 21 Jun 2011	Hubert Chathi 21 Jun 2011	3
Help! Locked Out Of Moodle Due To SSL Error Locked	Scott Custer 10 Jun 2011	Guillermo Madero 21 Jun 2011	1
Security check Locked	Eddy Belteu 10 Jun 2011	Eddy Belteu 13 Jun 2011	2
SSL and Moodle Locked	April Cookson 27 Apr 2010	Hossam eldin Reda Ibrahim 12 Jun 2011	11
Logs not displaying user name and information Locked	Sunitha Appikatla 28 Apr 2011	Guillermo Madero 10 Jun 2011	1
Unidentified admin user / hacked admin user Locked	Marcel Mihulka 7 Jun 2011	Guillermo Madero 8 Jun 2011	1
Downloading problems on windows Locked	angelo maclean 6 Jun 2011	Deleted user 6 Jun 2011	1
Googlebot and security Locked	Clive Gould 6 Jun 2011	Lars-Olof Krause 6 Jun 2011	1
LOCK OUT Locked	Anna Burnheim 7 Apr 2011	Guillermo Madero 6 Jun 2011	3
open id plugin help Locked	Ilona El 23 May 2011	Hubert Chathi 3 Jun 2011	1
Report on Forgot Password Locked	Nancy K Hoke 23 May 2011	Guillermo Madero 31 May 2011	1
Invalid login, please try again using Live@edu plug-in Locked	Mark Smith 12 May 2011	Mark Smith 25 May 2011	1
Facebook contacted me. I have 48hours to comply. What do I do? Locked	Frankie Kam 16 May 2011	Frankie Kam 20 May 2011	11
approved by admin on membership Locked	Ruhi Beçenek 18 May 2011	Ruhi Beçenek 18 May 2011	0
Time until security vulnerabilites are released Locked	Samuel Witzig 16 May 2011	Samuel Witzig 16 May 2011	0
Some joker posted this in my shoutbox on my homepage. What's he trying to do??? Locked	Frankie Kam 10 May 2011	Frankie Kam 10 May 2011	2
change admin username to prevent robot attacks? Locked	Carol Booth 8 Feb 2010	Deb Smith 10 May 2011	5
Change an admin email address Locked	Michele Mason 2 May 2011	Michele Mason 5 May 2011	4
Forcing password changes Locked	C. J. Turner 29 Apr 2011	Emanuel Delgado 29 Apr 2011	1
Site policy not showing in IE Locked	Dusan Ristic 10 Dec 2010	Steve Evans 28 Apr 2011	5
Configuring Moodle for HTTPS and Adding users manually Locked	Tracy Castleberry 3 Feb 2011	John Bonner 26 Apr 2011	4
Restricting User Access Locked	Peter Dagnall 2 Jun 2010	Dean DiMonte 18 Apr 2011	7
user can change password without permission Locked	hadi esmaeeli 18 Apr 2011	hadi esmaeeli 18 Apr 2011	0
Disabling right-click Locked	g k 29 Jun 2010	Dusan Ristic 13 Apr 2011	4
2.0.2: ClamAV Locked	Karsten Burger 12 Apr 2011	Karsten Burger 12 Apr 2011	0
Improved SPAM detector (GSOC2009 proposal) Locked	Eloy Lafuente (stronk7) 24 Mar 2009	Priyanka M 4 Apr 2011	5
Can Moodle 2 use a shared SSL certificate? Locked	John Bonner 21 Dec 2010	John Bonner 2 Apr 2011	8
moodle 2.0 not userfriendly anymore Locked	Roseli Mat Nor 18 Feb 2011	Visvanath Ratnaweera 1 Apr 2011	1
Moodle 1.9 folder and files permission Locked	Maciej smith 25 Mar 2011	Visvanath Ratnaweera 1 Apr 2011	1
I may have locked myself out Locked	Anthony Rooney 30 Mar 2011	Anthony Rooney 31 Mar 2011	1
Mysterious self-enrolled user Locked	David McAuley 23 Feb 2011	Guillermo Madero 31 Mar 2011	7
Enrolment key - person assigned to provide information Locked	Fiona Watts 29 Mar 2011	Fiona Watts 29 Mar 2011	0
SPAM KILLER -Improved Spam cleaner Locked	Ankit Agarwal 29 Mar 2011	Ankit Agarwal 29 Mar 2011	0
Migrating mdl_user data Locked	Anthony Parcero 25 Mar 2011	Anthony Parcero 28 Mar 2011	2
Antivirus problems Locked	Ricard Tuprima 24 Mar 2011	Ricard Tuprima 24 Mar 2011	0
XAMPP w/ WebDav Locked	Mark Ward 23 Mar 2011	Mark Ward 23 Mar 2011	0
($SESSION->session_test) value becomes null Locked	sujeet kumar 21 Mar 2011	sujeet kumar 21 Mar 2011	0
Login Problem Locked	Tania Hackett 21 Mar 2011	Tania Hackett 21 Mar 2011	0
"coursecontact" only after login? Locked	Uwe Klemm 20 Mar 2011	Uwe Klemm 20 Mar 2011	0
New users - disable "required" fields Locked	Warren McCullough 20 Mar 2011	Mary Cooch 20 Mar 2011	1
Default Account Settings / Hide email-adress Locked	Arne Petring 20 Mar 2011	Arne Petring 20 Mar 2011	0
SSL Subdomain and Moodle Redirection Locked	Tom Reid 5 Nov 2010	John Bonner 18 Mar 2011	4
In a hosted server, where should moodledata go Locked	Chris Collman 8 Mar 2010	nabil Lachheb 15 Mar 2011	6
Using Windows Media Player to play offline videos: Security RISK? Locked	Frankie Kam 5 Mar 2011	Frankie Kam 15 Mar 2011	8
where cookies stored in moodle Locked	raja shekhar 15 Mar 2011	raja shekhar 15 Mar 2011	0
Someone tried to plant a backdoor trojan in my Moodle site Locked	Frankie Kam 12 Mar 2011	Frankie Kam 12 Mar 2011	0
Is an SSL Certicate required for Moodle 2.0 Locked	Rich Brennan 5 Jan 2011	Ian Webb 12 Mar 2011	42
htaccess issues Locked	Ryan Larkin-Smith 11 Mar 2011	Ryan Larkin-Smith 11 Mar 2011	0