Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Blocking access to courses Locked	max was 10 Dec 2010	Mary Cooch 10 Dec 2010	1
	Stopping site downloaders Locked	Mahtab Hussain 4 Dec 2010	Howard Miller 5 Dec 2010	3
	XMAS and MADSHELL coming again Locked	Mauno Korpelainen 5 Dec 2009	Mauno Korpelainen 1 Dec 2010	4
	Concurrent Logins Locked	Rick Newton 29 Nov 2010	Rick Newton 29 Nov 2010	0
	Moodle dependancy on expose_php Locked	Luis de Vasconcelos 25 Nov 2010	Tim Hunt 26 Nov 2010	1
	Vulnerable software detected on your account Locked	Lhoussaine Moughli 23 Nov 2010	Lhoussaine Moughli 25 Nov 2010	11
	Topic based permission settings possible? Locked	yuki yuki 18 Oct 2010	Sean Farrell 24 Nov 2010	1
	Feeling safe about using Moodle Locked	Ian Thiele 22 Nov 2010	Chris Collman 23 Nov 2010	2
	Country field on Self Register Locked	james ashton 29 July 2010	Iñaki Arenaza 20 Nov 2010	4
	Login Problems Locked	Leon Pienaar 19 Nov 2010	Leon Pienaar 19 Nov 2010	0
	Exclude IP address Locked	Debbie McDonald 4 Nov 2010	Dale Davies 17 Nov 2010	2
	Giving a Select 'Site Config' options to Roles Locked	Deleted user 16 Nov 2010	Deleted user 16 Nov 2010	0
	Alternative to clear text password in Moodle configuration? Locked	Emre Sevinç 8 Nov 2010	Matteo Scaramuccia 11 Nov 2010	9
	Multiple authentication options. Locked	gunna hafta 11 Nov 2010	Aaron Johnson 11 Nov 2010	1
	Security Overview report not showing up at all Locked	Hartmut Scherer 27 Oct 2010	Hartmut Scherer 4 Nov 2010	3
	Password format Locked	pelleth thomas 1 Nov 2010	Stephen Bloomer 2 Nov 2010	3
	Is password salt needed with LDAP authentication? Locked	Stephen Bloomer 28 Oct 2010	Stephen Bloomer 29 Oct 2010	2
	yui library Locked	Emanuel Delgado 27 Oct 2010	Emanuel Delgado 27 Oct 2010	2
	MDL-24225 https redirection security concern Locked	Aaron Johnson 26 Oct 2010	Aaron Johnson 26 Oct 2010	0
	Images do not load. Has my site been compromised? Locked	Michael Wininger 4 May 2010	Alexandre Ubaldo 26 Oct 2010	5
	Fichero config.php Locked	Martin Guerra 21 Oct 2010	Iñaki Arenaza 24 Oct 2010	1
	Hacked site Locked	Jeffrey Kimoto 21 Oct 2010	Helen Foster 21 Oct 2010	1
	Changing an email address Locked	Endaf Edwards 20 Oct 2010	Endaf Edwards 20 Oct 2010	2
	Do not want to show all courses/course permission...please help Locked	yuki yuki 18 Oct 2010	sudha m 20 Oct 2010	2
	Default setting shows email addresses of students Locked	Mary James 29 Sept 2009	Andreas Gounaris 17 Oct 2010	9
	Cannot Login to Moodle Website Locked	Jan Combrink 27 May 2009	Ruwan Wickramarachchi 17 Oct 2010	10
	How much to lock down server ? Locked	Mr. Marc 14 Oct 2010	Deleted user 15 Oct 2010	3
	Force password change after period of time Locked	eraldo giraz 15 Oct 2010	eraldo giraz 15 Oct 2010	0
	Alternatives to enrolment keys? Locked	Endaf Edwards 13 Oct 2010	Tim Hunt 13 Oct 2010	2
	Admin user has only teacher permissions Locked	Srdan Dukic 12 Oct 2010	Emanuel Delgado 12 Oct 2010	1
	Admin Accidentally Locked Himself Out - Anybody here able to help? Locked	Mike Stapleton 7 Oct 2010	Mike Stapleton 7 Oct 2010	4
	Security Attack? Locked	Clive Gould 29 June 2010	Lars-Olof Krause 6 Oct 2010	3
	Session key in URLs? Locked	Dan Ballance 21 Apr 2010	Lars-Olof Krause 6 Oct 2010	5
	Encrypted Password Locked	Fifie Sha 24 Sept 2010	Thế Huân Đoàn 6 Oct 2010	3
	Disallow Student Uploads Locked	Ted Canji 6 Oct 2010	Ted Canji 6 Oct 2010	0
	Uninvited users Locked	Carol Ibanez 1 Oct 2010	Mary Cooch 2 Oct 2010	1
	ACCESS CONTROL IN MOODLE Locked	r ma 29 Sept 2010	Aaron Wells 1 Oct 2010	3
	Editing or turning off KSES Filtering Locked	d morte 27 Aug 2010	d morte 30 Sept 2010	5
	Pop-Up Box for Login Appearing?! Locked	Kerry Moralee 29 Sept 2010	Kerry Moralee 29 Sept 2010	0
	Minimal student data - help Locked	Rik Hall 21 Sept 2010	Tim Hunt 24 Sept 2010	7
	Preventing certain roles from seeing resources Locked	Tom S 31 Aug 2010	Colin Fraser 20 Sept 2010	1
	Logging profile activity Locked	Colin Webber 14 Sept 2010	Colin Webber 14 Sept 2010	2
	URGENT: Moodle login without https? Locked	Mike Brinkman 5 June 2010	Deleted user 1 Sept 2010	5
	How to find port scan coming from server Locked	Mr. Marc 11 Aug 2010	Visvanath Ratnaweera 26 Aug 2010	1
	Why do passwords have to be so difficult??? Locked	Jamie Smith 1 July 2010	Glenys Hanson 19 Aug 2010	16
	Passwords in clear text? Locked	Leslie Sandoval 4 June 2009	Gregg Ciabattoni 16 Aug 2010	2
	How to block access for CYVEILLANCE Locked	brian avery 12 Aug 2010	brian avery 12 Aug 2010	5
	Enrolment key does not work Locked	Chris Collman 11 Aug 2010	Chris Collman 11 Aug 2010	9
	How to set up best security from the outset - not later.. Locked	brian avery 5 Aug 2010	Chris Collman 11 Aug 2010	3
	Hiding courses list on profile Locked	David Price 12 Aug 2009	Teresa Gibbison 10 Aug 2010	4
	Hippa/Ferpa/intelectual property Locked	Bryan Hilton 5 Aug 2010	Bryan Hilton 5 Aug 2010	2
	How to check authentication? Locked	ahmad ajiloo 1 Aug 2010	Aaron Wells 2 Aug 2010	1
	Is this a VULNERABILITY? Locked	LauriBeth Hull 31 July 2010	LauriBeth Hull 31 July 2010	0
	Hide password config.php / Ocultación de contraseña config.php Locked	Francisco Bellas Aláez 29 July 2010	Francisco Bellas Aláez 30 July 2010	4
	HTTP Content on SLL access? Locked	Volkan Senguel 29 July 2010	Volkan Senguel 29 July 2010	0
	Secure cookies in Moodle Locked	Ryan Larkin-Smith 28 July 2010	Ryan Larkin-Smith 29 July 2010	2
	Security and Risk Assessment for Moodle Locked	CHENG Alan 21 July 2010	CHENG Alan 26 July 2010	2
	Legal issue Locked	Eder Fernandez 23 July 2010	Michael Hughes 23 July 2010	4
	moodle user login history? Locked	Paul Tibbitts 17 July 2010	Paul Tibbitts 18 July 2010	2
	Security issue help beofre login Locked	Stuart Milligan 7 July 2010	Stuart Milligan 7 July 2010	0
	Loading course : ERROR: Could not find or create a directory (/var/www/moodledata/x) Locked	Mireille Raad 12 May 2010	john baruha 1 July 2010	2
	Access to moodledata files Locked	elog wo surname 7 June 2010	Bartosz Cisek 30 June 2010	2
	[ERROR] Estado de la Copia de Seguridad programada Locked	Heike Ebelt 28 June 2010	Heike Ebelt 29 June 2010	3
	Rebuild from backup and now users cannot log in - salt issue? Locked	Martyn Thompson 24 June 2010	Martyn Thompson 28 June 2010	4
	virus troyano Locked	angel santillan 25 June 2010	Maryel Mendiola 25 June 2010	1
	Creating Compulsory Agreements Locked	Moodle Officer 28 May 2010	Moodle Officer 25 June 2010	5
	Security warning won't go away Locked	Henry Foster 28 Feb 2010	Aaron Wells 21 June 2010	3
	Hacked? (AddFreeStats link embedded on my front page) Locked	Jason Hollowell 13 June 2010	Howard Miller 18 June 2010	11
	Prevent Teacher Role from Downloading Backup Zip Files Locked	Blair F. 10 June 2010	Howard Miller 13 June 2010	3
	BP Uses Moodle and (unfortunately) expose themselves to an "XSS based iFrame injection"... Locked	Dale Davies 10 June 2010	Howard Miller 10 June 2010	3
	Government authentication requirement question Locked	Jake Atencio 24 Nov 2009	John Sanga 9 June 2010	2
	Creating Static Student Emails Locked	Kester David 1 June 2010	Jon Witts 9 June 2010	3
	password salt vs. password policy Locked	Guillermo Madero 6 June 2010	Guillermo Madero 7 June 2010	2
	Keep track of changes Locked	Vasilis F. 4 June 2010	Vasilis F. 4 June 2010	2
	Password salt - where do I put it? Locked	Pete Jones 21 May 2010	Pete Jones 28 May 2010	4
	config.php and .js files are hacked Locked	Jarek . 27 May 2010	Jarek . 28 May 2010	5
	Logging out of Moodle & Sesskey Locked	Justin Mastic 26 May 2010	Justin Mastic 26 May 2010	0
	Identifying users browser? Locked	John Stevens 25 May 2010	Howard Miller 26 May 2010	8
	Changing from http to https Locked	Angela Butterworth 28 July 2009	Deleted user 22 May 2010	2
	Passing credentials to Moodle Locked	Jason Brandt 20 May 2010	Jason Brandt 20 May 2010	0
	New user email regisration by group key Locked	Doug Stevens 20 May 2010	Doug Stevens 20 May 2010	0
	How to avoid accessing courses list as guest? Locked	Victoria Sanz 6 Apr 2010	Darko Miletić 19 May 2010	5
	Password Attempts Locked	Richard Hand 25 Mar 2010	Tim Hunt 15 May 2010	4
	Moodle security patching documentation Locked	John Grobler 6 May 2010	John Grobler 10 May 2010	3
	'send me details via email' Forgotten Password email address Locked	John Riley 8 May 2010	Worth Bishop 9 May 2010	1
	videos outside moodledata folder Locked	Nils Austa 31 Mar 2010	Ger Tielemans 6 May 2010	2
	Unable to allow students to leave courses Locked	Ray Perales 5 May 2010	Ray Perales 5 May 2010	2
	Changing EVERY Learner's Password in one action? Locked	Justin Bender 27 Apr 2010	Justin Bender 30 Apr 2010	7
	Compromised Moodle Clean Up... Locked	Andy McCall 28 Apr 2010	Andy McCall 28 Apr 2010	3
	How do I set up a course that I can't have access to ? Locked	Dale Bender 26 Apr 2010	Chris Collman 27 Apr 2010	6
	Moodle version Locked	Juanjo Florido 19 Apr 2010	Tim Hunt 26 Apr 2010	2
	Moodle with htaccess Locked	Garry Hill 24 Apr 2010	Garry Hill 24 Apr 2010	0
	IE7 XSS exploit in 1.9.8 on certain pages Locked	Dan Ballance 22 Apr 2010	Dan Ballance 22 Apr 2010	2
	Digital certificates Locked	Rob Cunniffe 20 Apr 2010	Rob Cunniffe 22 Apr 2010	1
	Registration Codes Locked	Roger Shindell 22 Apr 2010	Miguel Guhlin 22 Apr 2010	2
	Remeber me Locked	Danny Yeshurun 16 Apr 2010	Dale Davies 20 Apr 2010	5
	ClamAV upgrade may be required Locked	Sean Farrell 12 Apr 2010	Jon Witts 20 Apr 2010	2
	Dumb question about changing passwords Locked	Tom Connolly 14 Apr 2010	Chris Collman 14 Apr 2010	4
	Basic user role setup Locked	Jan Malte Gerth 11 Apr 2010	Jan Malte Gerth 11 Apr 2010	0
	SQL Injection in Moodle = 1.9.5 Locked	Rodolfo Matos 25 June 2009	Pierre-Louis LAMBALLAIS 6 Apr 2010	8