Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Company A can still see company B. Help needed. Locked	Alan Muscat 6 July 2011	Thibault Hermes 14 July 2011	1
	spam messages being sent through MOODLE Locked	Steve Gilmore 14 June 2011	Helen Foster 6 July 2011	3
	Restrict Access to Courses (Moodle 1.9) Locked	Stephen Martin 15 June 2011	Stephen Martin 5 July 2011	4
	CONTEXT_COURSE on web service Locked	Balaji Kutty 5 July 2011	Balaji Kutty 5 July 2011	0
	Nessus and PHP upgrade Locked	Deleted user 2 July 2011	Deleted user 2 July 2011	0
	Controlling what Guests see Locked	Alan Muscat 28 June 2011	Alan Muscat 28 June 2011	0
	Security of moodledata directory on linux server Locked	Marius S 23 June 2011	Deleted user 27 June 2011	4
	Moodle 2.0.3 with ClamAV - Detection Failure Locked	C Bartlett 21 June 2011	C Bartlett 25 June 2011	1
	Question about sanitizing inputs in Moodle Locked	Timothy Kaemmerer 25 June 2011	Timothy Kaemmerer 25 June 2011	2
	Hiding certain courses from guests Locked	Alan Muscat 24 June 2011	Alan Muscat 24 June 2011	0
	how to keep one user can only be a single login? Locked	Adi Prasetya 24 June 2011	Deleted user 24 June 2011	3
	Is this actually possible in Moodle 2.x? Locked	Alan Muscat 21 June 2011	Guillermo Madero 24 June 2011	6
	one user one login Locked	Adi Prasetya 23 June 2011	Adi Prasetya 23 June 2011	0
	Restricting Users without Enrolment Key Locked	Jerald Fernando 22 June 2011	Jerald Fernando 22 June 2011	0
	Cross-Moodle Logins Locked	Mario Stylianou 21 June 2011	Hubert Chathi 21 June 2011	3
	Help! Locked Out Of Moodle Due To SSL Error Locked	Scott Custer 10 June 2011	Guillermo Madero 21 June 2011	1
	Security check Locked	Eddy Belteu 10 June 2011	Eddy Belteu 13 June 2011	2
	SSL and Moodle Locked	Deleted user 27 Apr 2010	Hossam eldin Reda Ibrahim 12 June 2011	11
	Logs not displaying user name and information Locked	Sunitha Appikatla 28 Apr 2011	Guillermo Madero 10 June 2011	1
	Unidentified admin user / hacked admin user Locked	Marcel Mihulka 7 June 2011	Guillermo Madero 8 June 2011	1
	Downloading problems on windows Locked	angelo maclean 6 June 2011	Deleted user 6 June 2011	1
	Googlebot and security Locked	Clive Gould 6 June 2011	Lars-Olof Krause 6 June 2011	1
	LOCK OUT Locked	Anna Burnheim 7 Apr 2011	Guillermo Madero 6 June 2011	3
	open id plugin help Locked	Ilona El 23 May 2011	Hubert Chathi 3 June 2011	1
	Report on Forgot Password Locked	Nancy K Hoke 23 May 2011	Guillermo Madero 31 May 2011	1
	Invalid login, please try again using Live@edu plug-in Locked	Mark Smith 12 May 2011	Mark Smith 25 May 2011	1
	Facebook contacted me. I have 48hours to comply. What do I do? Locked	Frankie Kam 16 May 2011	Frankie Kam 20 May 2011	11
	approved by admin on membership Locked	Ruhi Beçenek 18 May 2011	Ruhi Beçenek 18 May 2011	0
	Time until security vulnerabilites are released Locked	Samuel Witzig 16 May 2011	Samuel Witzig 16 May 2011	0
	Some joker posted this in my shoutbox on my homepage. What's he trying to do??? Locked	Frankie Kam 10 May 2011	Frankie Kam 10 May 2011	2
	change admin username to prevent robot attacks? Locked	Carol Booth 8 Feb 2010	Deb Smith 10 May 2011	5
	Change an admin email address Locked	Michele Mason 2 May 2011	Michele Mason 5 May 2011	4
	Forcing password changes Locked	C. J. Turner 29 Apr 2011	Emanuel Delgado 29 Apr 2011	1
	Site policy not showing in IE Locked	Dusan Ristic 10 Dec 2010	Steve Evans 28 Apr 2011	5
	Configuring Moodle for HTTPS and Adding users manually Locked	Tracy Castleberry 3 Feb 2011	John Bonner 26 Apr 2011	4
	Restricting User Access Locked	Peter Dagnall 2 June 2010	Dean DiMonte 18 Apr 2011	7
	user can change password without permission Locked	hadi esmaeeli 18 Apr 2011	hadi esmaeeli 18 Apr 2011	0
	Disabling right-click Locked	g k 29 June 2010	Dusan Ristic 13 Apr 2011	4
	2.0.2: ClamAV Locked	Karsten Burger 12 Apr 2011	Karsten Burger 12 Apr 2011	0
	Improved SPAM detector (GSOC2009 proposal) Locked	Eloy Lafuente (stronk7) 24 Mar 2009	Priyanka M 4 Apr 2011	5
	Can Moodle 2 use a shared SSL certificate? Locked	John Bonner 21 Dec 2010	John Bonner 2 Apr 2011	8
	moodle 2.0 not userfriendly anymore Locked	Roseli Mat Nor 18 Feb 2011	Visvanath Ratnaweera 1 Apr 2011	1
	Moodle 1.9 folder and files permission Locked	Maciej smith 25 Mar 2011	Visvanath Ratnaweera 1 Apr 2011	1
	I may have locked myself out Locked	Anthony Rooney 30 Mar 2011	Anthony Rooney 31 Mar 2011	1
	Mysterious self-enrolled user Locked	David McAuley 23 Feb 2011	Guillermo Madero 31 Mar 2011	7
	Enrolment key - person assigned to provide information Locked	Fiona Watts 29 Mar 2011	Fiona Watts 29 Mar 2011	0
	SPAM KILLER -Improved Spam cleaner Locked	Ankit Agarwal 29 Mar 2011	Ankit Agarwal 29 Mar 2011	0
	Migrating mdl_user data Locked	Anthony Parcero 25 Mar 2011	Anthony Parcero 28 Mar 2011	2
	Antivirus problems Locked	Ricard Tuprima 24 Mar 2011	Ricard Tuprima 24 Mar 2011	0
	XAMPP w/ WebDav Locked	Mark Ward 23 Mar 2011	Mark Ward 23 Mar 2011	0
	($SESSION->session_test) value becomes null Locked	sujeet kumar 21 Mar 2011	sujeet kumar 21 Mar 2011	0
	Login Problem Locked	Tania Hackett 21 Mar 2011	Tania Hackett 21 Mar 2011	0
	"coursecontact" only after login? Locked	Uwe Klemm 20 Mar 2011	Uwe Klemm 20 Mar 2011	0
	New users - disable "required" fields Locked	Warren McCullough 20 Mar 2011	Mary Cooch 20 Mar 2011	1
	Default Account Settings / Hide email-adress Locked	Arne Petring 20 Mar 2011	Arne Petring 20 Mar 2011	0
	SSL Subdomain and Moodle Redirection Locked	Tom Reid 5 Nov 2010	John Bonner 18 Mar 2011	4
	In a hosted server, where should moodledata go Locked	Chris Collman 8 Mar 2010	nabil Lachheb 15 Mar 2011	6
	Using Windows Media Player to play offline videos: Security RISK? Locked	Frankie Kam 5 Mar 2011	Frankie Kam 15 Mar 2011	8
	where cookies stored in moodle Locked	raja shekhar 15 Mar 2011	raja shekhar 15 Mar 2011	0
	Someone tried to plant a backdoor trojan in my Moodle site Locked	Frankie Kam 12 Mar 2011	Frankie Kam 12 Mar 2011	0
	Is an SSL Certicate required for Moodle 2.0 Locked	Rich Brennan 5 Jan 2011	Ian Webb 12 Mar 2011	42
	htaccess issues Locked	Ryan Larkin-Smith 11 Mar 2011	Ryan Larkin-Smith 11 Mar 2011	0
	Error Changing Password Policy Locked	Ankit Jain 24 Feb 2011	Ankit Jain 7 Mar 2011	3
	Students changing their first and last name Locked	John Russo 3 Mar 2011	John Russo 3 Mar 2011	5
	my site hangs Locked	juan vi 2 Mar 2011	juan vi 2 Mar 2011	0
	Forgot Password Notification? Locked	I VALENZUELA I VALENZUELA 28 Feb 2011	Iñaki Arenaza 1 Mar 2011	1
	Restricting Locked	Ayuba Audu 19 Nov 2009	Kate Rhodes 26 Feb 2011	2
	Course Creator change password access Locked	uk nites 23 Feb 2011	Darko Miletić 24 Feb 2011	1
	LDAP Error Locked	suresh Sundaram 22 Feb 2011	Jason Adams 22 Feb 2011	1
	LDAP - 404 Locked	Jason Adams 22 Feb 2011	Jason Adams 22 Feb 2011	1
	Spamming from moodle site Locked	Raju S 20 Feb 2011	Mauno Korpelainen 20 Feb 2011	2
	Moodle illegal in Germany Locked	Richard Williamson 18 Feb 2011	Richard Williamson 20 Feb 2011	9
	Role that allow to manage users Locked	Jiri Princ 17 Feb 2011	Jiri Princ 17 Feb 2011	0
	Creating a Local Moodle Administrator Locked	Gregory Furtman 16 Feb 2011	Luis de Vasconcelos 16 Feb 2011	3
	Debian SSL Locked	LauriBeth Hull 15 Feb 2011	Deleted user 15 Feb 2011	1
	Help with AV installation Locked	Cecilia Cicolini 13 Feb 2011	Lars-Olof Krause 14 Feb 2011	1
	Could not find or create directory Locked	umesh chavan 12 Feb 2011	umesh chavan 12 Feb 2011	0
	Multiple AD fields at login with LDAP Locked	Jeffrey Jones 6 Feb 2011	David Tredinnick 11 Feb 2011	3
	Hide password in External database password field Locked	Michael Rhodes 11 Feb 2011	Michael Rhodes 11 Feb 2011	1
	Hide student email address from teachers? Locked	Jesse Bye 17 Nov 2010	Piotr Kowalski 10 Feb 2011	1
	How to remove the static http from the html code? 1.91 Locked	Volkan Senguel 6 Feb 2011	Volkan Senguel 7 Feb 2011	2
	student from Mumbia, India Locked	Doris Johnson 3 Feb 2011	Lars-Olof Krause 4 Feb 2011	1
	How do you password protect files and folders already uploaded on Moodle. Locked	Christopher Saunders 5 July 2009	Jeff Enders 3 Feb 2011	6
	Self Registration & Specific Access Locked	Paula Burke 3 Feb 2011	Paula Burke 3 Feb 2011	0
	DIfferent users see different courses in Moodle 2 Locked	Francis Vila 26 Jan 2011	Francis Vila 26 Jan 2011	0
	dataroot directory access Locked	Richard Austin 25 Jan 2011	Lars-Olof Krause 25 Jan 2011	1
	Teacher and Student name visibility Locked	Roger Clark 20 Jan 2011	Roger Clark 21 Jan 2011	2
	LDAP Locked	J R 13 Jan 2011	J R 13 Jan 2011	0
	Moodle 1.8 SMF 1.1.11 integration Locked	James Jackson 26 Jan 2010	stog muller 12 Jan 2011	3
	404 after 10 failed logins Locked	David Kennedy 2 Dec 2010	David Kennedy 7 Jan 2011	6
	Audit Features Locked	David Chau 5 Jan 2011	Tim Hunt 6 Jan 2011	1
	Directions for SSL Locked	Mr. Marc 30 Aug 2010	Waldemar Basista 4 Jan 2011	2
	Is LDAPS necessary when using https (ssl) login? Locked	elearning developer 22 Oct 2010	Waldemar Basista 4 Jan 2011	2
	Protected URLs for html content? Locked	Alejandro Lengua 1 Dec 2010	Waldemar Basista 4 Jan 2011	1
	our doamin says Reported Attack Page??? Locked	umesh chavan 3 Jan 2011	Clive Gould 3 Jan 2011	1
	block abusive user Locked	Baruch Sienna 3 Jan 2011	Helen Foster 3 Jan 2011	3
	Firesheep Locked	Mike Norton 3 Nov 2010	Petr Skoda 24 Dec 2010	22
	client block - mod_security Locked	Alfredo Pineiro 21 Dec 2010	Matteo Scaramuccia 21 Dec 2010	1
	Admin lost ability to assign roles Locked	Jonathan McKeever 11 Dec 2010	Mary Cooch 11 Dec 2010	9
	Who updated student profile Locked	Luis de Vasconcelos 19 Oct 2010	enric alegre 11 Dec 2010	2