Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3 (current)
4
5
6
7
8
9
10
…
15
Next

List of discussions. Showing 100 of 1489 discussions
Discussion	Started by	Last post	Replies
ClamAV and Cwatch Locked	Wynand Louw 28 Dec 2018	Wynand Louw 29 Dec 2018	4
ClamAV server Locked	callum Wood 12 Dec 2018	Matteo Scaramuccia 21 Dec 2018	2
Restrict teacher's ability to backup courses including userdata? Locked	stefan weber 17 Dec 2018	stefan weber 18 Dec 2018	2
GuardianKey - A new plugin of Security Locked	Gesiel Bernardes 17 Dec 2018	Gesiel Bernardes 17 Dec 2018	0
IP blocker error when access via html script Locked	Karishma Tiwari 17 Dec 2018	Karishma Tiwari 17 Dec 2018	0
How do I finetune Website Copier HTTrack or Cyotek WebCopy? Locked	Rolf Cper 12 Dec 2018	Rolf Cper 12 Dec 2018	0
disable video right click Locked	rasha fawzy 8 Dec 2018	Rick Jerz 9 Dec 2018	1
Cell-like groups possible? Locked	Sam Stevens 5 Dec 2018	Sam Stevens 5 Dec 2018	0
Quiz Answers "Keywords" Not Working Locked	deepak rs 4 Dec 2018	deepak rs 5 Dec 2018	3
User's Choice of Course Locked	deepak rs 4 Dec 2018	deepak rs 4 Dec 2018	0
adding a wildcard security ssl for a plugin Locked	Aretha Etienne 1 Dec 2018	Aretha Etienne 1 Dec 2018	0
Unable to Log In as admin - Moodle 3.5 Locked	Dave Emsley 30 Nov 2018	Emma Richardson 30 Nov 2018	1
Manual enrollment and obligate change password Locked	Reinier Batterink 30 Nov 2018	Reinier Batterink 30 Nov 2018	0
ClamAV Plugin Config Paths Locked	Wolf Ventir 21 Nov 2018	Wolf Ventir 28 Nov 2018	3
content protection method Locked	dave lewis 26 Nov 2018	dave lewis 27 Nov 2018	2
No checkboxes on Data Requests page Locked	Peter Diedrichs 22 Nov 2018	Alex Sandu 25 Nov 2018	2
HTTP to HTTPS Locked	LAVS EDUCATOR 25 Nov 2018	Ken Task 25 Nov 2018	1
data privacy plugin 3.3.5 hanging in cron Locked	Tim Gildersleeve 9 May 2018	John Packiaraj 21 Nov 2018	11
The perils of the BIG "helping" school IT Locked	Visvanath Ratnaweera 19 Nov 2018	Visvanath Ratnaweera 20 Nov 2018	1
Problem with HTTPS Locked	LAVS EDUCATOR 19 Nov 2018	AL Rachels 20 Nov 2018	1
Fast registration possible? Locked	Colin Peters 9 Nov 2018	Visvanath Ratnaweera 19 Nov 2018	6
looking for vulnerable (old) plugins for Moodle Locked	Jurgen Gaeremyn 19 Nov 2018	Dan Marsden 19 Nov 2018	1
Completely isolated courses Locked	Hannu Mattila 9 Nov 2018	Kerstin Namuth 16 Nov 2018	10
Privacy Policy - Different Languages Locked	Stephen Oxlade 19 Oct 2018	Ralf Hilgenstock 14 Nov 2018	5
email alert when new users are created Locked	Raman Joshi 9 Nov 2018	Raman Joshi 13 Nov 2018	2
Need Assistance on Installing SSL Wildcard Certificate Moodle3.2.4 Apache Locked	Aretha Etienne 12 Nov 2018	Aretha Etienne 12 Nov 2018	0
Mail bomb afther update 6-11-2018 Locked	Bas van Kollenburg 8 Nov 2018	Ralf Hilgenstock 12 Nov 2018	4
Password recovery from login page : a strange screen Locked	Niko Niko 7 Nov 2018	Emma Richardson 9 Nov 2018	1
Data requests retention period Locked	Leon Erasmus 9 Nov 2018	Leon Erasmus 9 Nov 2018	2
Building in SHA-256 hashing for javascript Locked	Garrett Boone 22 Oct 2018	Dan Marsden 25 Oct 2018	15
Can my instructor see my activities outside his course? Locked	Gulielmus Pius Robertus Winslowius 5 Nov 2018	Tim Hunt 5 Nov 2018	1
Secure coukies Locked	mimi nom 3 Nov 2018	mimi nom 3 Nov 2018	0
A required parameter token was missing Locked	Ross Quinnell 26 Oct 2018	Ross Quinnell 30 Oct 2018	2
Contacts tab in messaging provides list of all users (GDPR issue?) Locked	Craig Hunter 20 Sep 2018	Gemma Lesterhuis 23 Oct 2018	8
[3.5]Insecure files/folders Moodle? Locked	Richard van Iwaarden 18 Oct 2018	Richard van Iwaarden 19 Oct 2018	2
XSS Trusted Users list longer than it should be given our settings Locked	Janet Osborne 11 Aug 2018	Janet Osborne 19 Oct 2018	3
restrict guest access for courses in a specific category Locked	stefan weber 10 Aug 2017	Louise Hawkins 10 Oct 2018	6
Data registry and data deletion Locked	Tomasz Czernak 9 Oct 2018	Andrew Nicols 10 Oct 2018	1
When logging in, I'm getting a "logout/cancel" popup every time Locked	Jan Waginski 4 Oct 2018	Jan Waginski 8 Oct 2018	3
Deceptive site ahead - Phishing Locked	Nilesh Pathade 4 Oct 2018	Ken Task 5 Oct 2018	6
Securing the platform and databases best approach? Locked	Jerry Lau 23 Sep 2018	Jerry Lau 2 Oct 2018	7
User data in joint activities Locked	Kerstin Namuth 28 Sep 2018	Kerstin Namuth 28 Sep 2018	0
Is there a way to set manager role to be able to enroll student to certain Course categories only? Locked	Maddy Fu 26 Sep 2018	Maddy Fu 26 Sep 2018	0
Changing Content on Alternate login URL Locked	Jennifer Belisle 24 Sep 2018	Jennifer Belisle 24 Sep 2018	0
Incoming mail configuration with Google accounts detected as insecure Locked	Iñigo Zendegi Urzelai 5 Mar 2018	Iñigo Zendegi Urzelai 17 Sep 2018	12
How to prevent script tag in search URL Locked	Khant Kyaw 14 Sep 2018	Ruslan Kabalin 14 Sep 2018	1
Define roles by IP address Locked	Tamar Alania 14 Sep 2018	Tamar Alania 14 Sep 2018	0
Data privacy plugin and quizzes Locked	Jonas Asa. 13 Sep 2018	Jonas Asa. 14 Sep 2018	3
Students can see other students enrolled in a course Locked	Jacques Technologies 8 Dec 2017	Mohamed Gad 10 Sep 2018	1
Log in issue Locked	Pravin J 23 Aug 2018	Emma Richardson 31 Aug 2018	3
Security for docs and videos in moodle Locked	Jenn MapMaven 29 Aug 2018	Jenn MapMaven 29 Aug 2018	0
Could a quickly changing client IP upset the log in process? Locked	Visvanath Ratnaweera 22 Aug 2018	Visvanath Ratnaweera 24 Aug 2018	3
Backup policy Locked	Albert Ramsbottom 12 Jul 2018	Ken Task 22 Aug 2018	8
security Issue of Moodle Locked	Anderson Hsu 21 Aug 2018	Richard van Iwaarden 21 Aug 2018	3
Backup of user data Locked	Tobias Hänel 15 Aug 2018	Mary Cooch 17 Aug 2018	3
GDPR / data registry / data deletion plugins - questions, discussion and experiences Locked	stefan weber 7 Aug 2018	Howard Miller 7 Aug 2018	1
Access Reserved to Moodle Maintenance Mode Locked	Rui Costa 7 Aug 2018	Mary Cooch 7 Aug 2018	1
Found Code injection in moodle instance Locked	Prasanna H 7 Aug 2018	Prasanna H 7 Aug 2018	0
Force HTTPS Locked	Michel d. S. Mesquita 4 Jul 2018	Moodle Admin 5 Aug 2018	1
problem in securing the login page Locked	m question 25 Jul 2018	Moodle Admin 5 Aug 2018	2
using ClamAV to scan for malicious macros in office files Locked	Patrick Scott 31 Jul 2018	Moodle Admin 5 Aug 2018	1
SQL injection via Scorm package Locked	Paul D 23 Jul 2018	Matteo Scaramuccia 1 Aug 2018	7
Folder and file permissions for Moodledata and Moodle Locked	Albert Ramsbottom 26 Jul 2018	Matteo Scaramuccia 31 Jul 2018	8
How to disable 3.5.1 cookie policy popup? Locked	Randy Thornton 25 Jul 2018	Randy Thornton 25 Jul 2018	1
GDPR Plugins - some questions Locked	Kerry Watt 19 Apr 2018	Jun Pataleta 19 Jul 2018	32
Recommendations for the permissions on the server Locked	Franky Vallori 16 Jul 2018	Visvanath Ratnaweera 17 Jul 2018	1
Last login information on user profile Locked	Joost Elshoff 9 Jul 2018	Ray Lawrence 10 Jul 2018	1
Bugs: Code Injection in Moodle? Locked	Franky Vallori 10 Jul 2018	Tim Hunt 10 Jul 2018	1
Critical Security Warning - Guest role Locked	Michael Ko 2 Jul 2018	Emma Richardson 9 Jul 2018	2
Students contact details hiden from each other Locked	Selma Limbo 9 Jul 2018	Emma Richardson 9 Jul 2018	1
Verifying identity of students Locked	altan ahmet 4 Jul 2018	altan ahmet 5 Jul 2018	3
Random HTTP 403 Errors Locked	Raymond Frangie 2 Jul 2018	Raymond Frangie 4 Jul 2018	3
ClamAV and FastCGI Locked	callum Wood 2 Jul 2018	Matteo Scaramuccia 4 Jul 2018	4
User deletion not GDPR compliant : personal data not deleted (lastip) Locked	Dorel Manolescu 29 Jun 2018	Adrian Greeve 1 Jul 2018	3
Is Facebook review required for Facebook login? Locked	Claus Tøndering 30 Jun 2018	Claus Tøndering 30 Jun 2018	0
Fix Blind SQL Injection Locked	Ahmed Hamed 26 Jun 2018	Ken Task 29 Jun 2018	8
Some student is stealing other students passwords Locked	André Carvalho 20 Jun 2018	Conn Warwicker 21 Jun 2018	2
GDPR - How does retention period work? Locked	Howard Miller 6 Jun 2018	Richard van Iwaarden 21 Jun 2018	5
Disabled permission in admin Locked	Luis Flores 20 Jun 2018	Luis Flores 20 Jun 2018	0
SSL implementation on Moodle 2.7.x Locked	Steven Borch 18 Jun 2018	Steven Borch 19 Jun 2018	2
Policy type Locked	Jacques Barzic 14 Jun 2018	Sara Arjona Téllez 15 Jun 2018	1
User policies > Show user identity field ignored when exporting grades Locked	Eoin Campbell 7 Jun 2018	Eoin Campbell 7 Jun 2018	0
Multilang policies Locked	Andrzej Gal 7 Jun 2018	Andrzej Gal 7 Jun 2018	0
Invalid permissions detected in $CFG->dataroot directory, administrator has to fix permissions Locked	Jukka Kylliäinen 5 Jun 2018	Jukka Kylliäinen 5 Jun 2018	0
Is a logged action created when a user is deleted via a privacy data request? Locked	Mike Churchward 5 Jun 2018	Mike Churchward 5 Jun 2018	0
Password security options Locked	ayman cherrat 29 May 2018	Dave Perry 30 May 2018	2
Data registry - Data Requests when not using it, and 'Subject Scope' Locked	Deleted user 30 May 2018	Deleted user 30 May 2018	0
Create new User via Webservice Locked	Zadok Lindt 13 Feb 2018	Lê Tú 30 May 2018	6
were can I find exhaustive documentation on the GDPR data registry? Locked	stefan weber 25 May 2018	stefan weber 29 May 2018	2
Problem with "Force users to log in" option Locked	Zoran Jancic 24 May 2018	Zoran Jancic 28 May 2018	1
GPDR plugin for 2.X moodle Locked	María Sánchez 23 May 2018	koen roggemans 26 May 2018	3
GDPR - Manually trigger deletion requests Locked	Deleted user 23 May 2018	Jan Dageförde 25 May 2018	5
GDPR Course retention varies by qual type Locked	Alicia Wallace 4 May 2018	Deleted user 25 May 2018	15
GDPR and forum forced subscription Locked	Christos Savva 23 May 2018	Christos Savva 24 May 2018	4
Pollicies Locked	Andrzej Gal 23 May 2018	Andrzej Gal 23 May 2018	0
GDPR Privacy API for advanced grading methods Locked	Marcus Green 22 May 2018	Marcus Green 23 May 2018	2
How to assess a data breach Locked	Dom F 22 May 2018	Visvanath Ratnaweera 22 May 2018	5
GDPR plugins: display consent option on first screen? Locked	Stewart Carswell 22 May 2018	Stewart Carswell 22 May 2018	0
DSAR's and Redaction Locked	Tim Gildersleeve 18 May 2018	Tim Gildersleeve 21 May 2018	2
GDPR plugins Moodle 3.3 Locked	Ken Task 19 May 2018	Ken Task 20 May 2018	5

Previous
1
2
3 (current)
4
5
6
7
8
9
10
…
15
Next