Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3 (current)
4
5
6
7
8
9
10
…
15
Next

Discussion	Started by	Last post	Replies
ClamAV and FastCGI Locked	callum Wood 2 Jul 2018	Matteo Scaramuccia 4 Jul 2018	4
User deletion not GDPR compliant : personal data not deleted (lastip) Locked	Dorel Manolescu 29 Jun 2018	Adrian Greeve 1 Jul 2018	3
Is Facebook review required for Facebook login? Locked	Claus Tøndering 30 Jun 2018	Claus Tøndering 30 Jun 2018	0
Fix Blind SQL Injection Locked	Ahmed Hamed 26 Jun 2018	Ken Task 29 Jun 2018	8
Some student is stealing other students passwords Locked	André Carvalho 20 Jun 2018	Conn Warwicker 21 Jun 2018	2
GDPR - How does retention period work? Locked	Howard Miller 6 Jun 2018	Richard van Iwaarden 21 Jun 2018	5
Disabled permission in admin Locked	Luis Flores 20 Jun 2018	Luis Flores 20 Jun 2018	0
SSL implementation on Moodle 2.7.x Locked	Steven Borch 18 Jun 2018	Steven Borch 19 Jun 2018	2
Policy type Locked	Jacques Barzic 14 Jun 2018	Sara Arjona Téllez 15 Jun 2018	1
User policies > Show user identity field ignored when exporting grades Locked	Eoin Campbell 7 Jun 2018	Eoin Campbell 7 Jun 2018	0
Multilang policies Locked	Andrzej Gal 7 Jun 2018	Andrzej Gal 7 Jun 2018	0
Invalid permissions detected in $CFG->dataroot directory, administrator has to fix permissions Locked	Jukka Kylliäinen 5 Jun 2018	Jukka Kylliäinen 5 Jun 2018	0
Is a logged action created when a user is deleted via a privacy data request? Locked	Mike Churchward 5 Jun 2018	Mike Churchward 5 Jun 2018	0
Password security options Locked	ayman cherrat 29 May 2018	Dave Perry 30 May 2018	2
Data registry - Data Requests when not using it, and 'Subject Scope' Locked	Mark Chaney 30 May 2018	Mark Chaney 30 May 2018	0
Create new User via Webservice Locked	Zadok Lindt 13 Feb 2018	Lê Tú 30 May 2018	6
were can I find exhaustive documentation on the GDPR data registry? Locked	stefan weber 25 May 2018	stefan weber 29 May 2018	2
Problem with "Force users to log in" option Locked	Zoran Jancic 24 May 2018	Zoran Jancic 28 May 2018	1
GPDR plugin for 2.X moodle Locked	María Sánchez 23 May 2018	koen roggemans 26 May 2018	3
GDPR - Manually trigger deletion requests Locked	Mark Chaney 23 May 2018	Jan Dageförde 25 May 2018	5
GDPR Course retention varies by qual type Locked	Alicia Wallace 4 May 2018	Mark Chaney 25 May 2018	15
GDPR and forum forced subscription Locked	Christos Savva 23 May 2018	Christos Savva 24 May 2018	4
Pollicies Locked	Andrzej Gal 23 May 2018	Andrzej Gal 23 May 2018	0
GDPR Privacy API for advanced grading methods Locked	Marcus Green 22 May 2018	Marcus Green 23 May 2018	2
How to assess a data breach Locked	Dom F 22 May 2018	Visvanath Ratnaweera 22 May 2018	5
GDPR plugins: display consent option on first screen? Locked	Stewart Carswell 22 May 2018	Stewart Carswell 22 May 2018	0
DSAR's and Redaction Locked	Tim Gildersleeve 18 May 2018	Tim Gildersleeve 21 May 2018	2
GDPR plugins Moodle 3.3 Locked	Ken Task 19 May 2018	Ken Task 20 May 2018	5
Plugin support for privacy API (split from EU General Data Protection Regulation (GDPR) compliance) Locked	Jean-Michel Védrine 20 May 2018	Jean-Michel Védrine 20 May 2018	3
External tool and CSRF Locked	Nicanor García 16 May 2018	Nicanor García 16 May 2018	0
Background info to / clarification on CVE-2017-7298? Locked	Temp Account 16 May 2018	Temp Account 16 May 2018	0
monitoring course changes Locked	Jennifer Meyer 15 May 2018	Jennifer Meyer 15 May 2018	3
monitoring course changes Locked	Jennifer Meyer 15 May 2018	Jennifer Meyer 15 May 2018	0
automated backups Locked	Dom F 12 May 2018	Paul Raper 14 May 2018	6
ClamAV - clamdscan Locked	callum Wood 2 May 2018	callum Wood 4 May 2018	3
GDPR Policies Plugin - Any facility for Optional? Locked	James Clarke 26 Apr 2018	Randy Thornton 2 May 2018	4
Migrating my Moodle Site From HTTP to HTTPS Locked	Jonathan Christoper Go 30 Apr 2018	callum Wood 2 May 2018	3
I think we were hacked Locked	mimi nom 30 Apr 2018	Ken Task 2 May 2018	8
https & sensitive info Locked	James Brown 27 Apr 2018	Visvanath Ratnaweera 2 May 2018	5
Moodle 'Site News' is public, it needs to be private. Help. Locked	roshan kolar 29 Apr 2018	roshan kolar 1 May 2018	2
GDPR: config settings as user preferences in blocks Locked	Mark Sharp 16 Apr 2018	Randy Thornton 1 May 2018	6
Policy & Privacy Plugin help Locked	Mark Lewis 1 Apr 2018	Mark Lewis 29 Apr 2018	3
GDPR and Custom Reports Locked	Lester Cunningham 20 Apr 2018	Randy Thornton 27 Apr 2018	2
Delete "graduated" students (GDPR) Locked	Alicia Wallace 24 Apr 2018	Randy Thornton 27 Apr 2018	1
Hiding Student Names from Graders Locked	Jennifer Holder 25 Apr 2018	John Provasnik 27 Apr 2018	1
Same moodle server to cater both Intranet & Internet Locked	Sreepathy T L 23 Apr 2018	Ken Task 25 Apr 2018	9
Erasing optional field data Locked	Dave Foord 23 Apr 2018	Alicia Wallace 24 Apr 2018	6
Bug bounty by Detectify Locked	George Mihailov 24 Apr 2018	Marina Glancy 24 Apr 2018	1
You are considered to be a digital minor Locked	Bente Olsen 21 Apr 2018	Bente Olsen 22 Apr 2018	4
saml - sso error Locked	oded blaum 18 Apr 2018	Ken Task 18 Apr 2018	1
GDPR plugins - Category & Purpose Locked	Mark Sharp 12 Apr 2018	Adrian Greeve 17 Apr 2018	6
Trusted content permission does not work for Teacher role, XSS vulnerable? Locked	Paul L 25 Oct 2017	Sascha Leblanc 17 Apr 2018	2
Report page visible to web Locked	Nick Gault 11 Apr 2018	Ken Task 14 Apr 2018	3
Privacy / Site / Cookie Policies (GDPR) Locked	Guildford College Group 6 Apr 2018	Gareth J Barnard 11 Apr 2018	2
pseudonymization/anonymization of deleted users Locked	Alexandra F 10 Apr 2018	Alexandra F 10 Apr 2018	2
user always online Locked	m question 2 Apr 2018	Visvanath Ratnaweera 6 Apr 2018	3
Security vulnerability Locked	İdiye ÖKTEN 3 Apr 2018	İdiye ÖKTEN 3 Apr 2018	0
Limit Course Access by Special LDAP Attribute Locked	Jeff Jones 31 Mar 2018	Jeff Jones 31 Mar 2018	0
Plugins DB and external services (GDPR related) Locked	Tomasz Muras 29 Mar 2018	Andrew Nicols 30 Mar 2018	1
Moodle security Locked	MoodleKittyCat . 28 Mar 2018	Mathew Gancarz 29 Mar 2018	6
Moodle blocked out after IP listing Locked	Anandarup Kar 17 Mar 2018	Visvanath Ratnaweera 28 Mar 2018	1
Ferpa and moodle Locked	curt bixel 23 Mar 2018	Rick Jerz 26 Mar 2018	20
Privacy issue: how to disable Analytics completely Locked	Randy Thornton 6 Mar 2018	Randy Thornton 21 Mar 2018	7
Database encryption Locked	Ted Long 18 Mar 2018	Mathew Gancarz 21 Mar 2018	1
Authentication Keys Plugin Needed Locked	Donna Betancourt 9 Mar 2018	Donna Betancourt 9 Mar 2018	0
Privacy concens regarding the mobile push notifications Locked	Beni Keller 23 Feb 2018	Beni Keller 5 Mar 2018	16
Hacked or some kind of update? Locked	Patrick Lawrence 28 Jan 2018	Moodle Admin 28 Feb 2018	1
Locking documents so that they can not be printed or downloaded directly? Locked	Lee Richards 26 Feb 2018	Randy Thornton 27 Feb 2018	5
SSL implementation on Moodle Locked	Syed Ali 20 Feb 2018	Syed Ali 22 Feb 2018	7
Add Custom Salt to Unique Salt for Better Hashed Password? Locked	Paul L 17 Feb 2018	Iñaki Arenaza 18 Feb 2018	2
File permissions on webroot vs installing plugins Locked	Tom Smith 6 Feb 2018	Ken Task 6 Feb 2018	1
Plugin to upload and secure external exam results? Locked	Ruth Horak 5 Feb 2018	Ruth Horak 5 Feb 2018	0
LDAP and non-LDAP? Locked	Mike Stewart 5 Feb 2018	Mike Stewart 5 Feb 2018	2
Virus detected on file download HELP! Locked	Irith Herman 28 Jan 2018	Ken Task 2 Feb 2018	7
ycfkurl reported Locked	Timothy Bolton Milhas 27 Jul 2017	Tristin Mock 31 Jan 2018	2
The Web Application Firewall Blocks Most of the Actions Locked	Ali Arekat 22 Jan 2018	Dan Marsden 22 Jan 2018	1
Deny access to/Hide participant listing when logged in Locked	Morag Hughson 14 Dec 2017	Randy Thornton 20 Jan 2018	4
Moodle Security Alerts - SPAM Locked	Joshua Hagan 15 Jan 2018	Ken Task 15 Jan 2018	1
Access to Moodle Locked	Lance Hinds 10 Jan 2018	Ray Lawrence 11 Jan 2018	5
About the OAuth 2 services Locked	Cheryl Tsai 31 Oct 2017	Cheryl Tsai 28 Dec 2017	2
Unauthorized person created an account Locked	Walter Byrd 15 Dec 2017	Walter Byrd 17 Dec 2017	4
Moodle SimpleSAML Error Locked	Dax Nac 15 Dec 2017	Leon Stringer 15 Dec 2017	1
Use Self-Signed Certificate Locked	mimi nom 7 Feb 2017	Harsh Patel 15 Dec 2017	6
SSL Cert on Content switch Locked	S Parker 24 Jul 2017	Harsh Patel 15 Dec 2017	3
Prevent seeing Permissions for others Locked	Andy Hill 11 Dec 2017	Andy Hill 15 Dec 2017	1
SSL setup issues on Moodle 3.2.3 Locked	Yogesh Nahar 7 Jun 2017	Harsh Patel 15 Dec 2017	4
Users can't see their own "full profile" Locked	Krisha Moeller 15 Dec 2017	Krisha Moeller 15 Dec 2017	0
ClamAV Locked	Pieter Portier 18 Jan 2017	Alain Raap 14 Dec 2017	1
Moodle Login Form Encryption Locked	Danielle Bryan Dizon 12 Dec 2017	James McLean 12 Dec 2017	2
Site policy acceptance logs Locked	Andreas Panagiotopoulos 8 Dec 2017	Eric Katchan 11 Dec 2017	3
Login and get someone else's account Locked	Rachel Whitton 7 Dec 2017	Rachel Whitton 8 Dec 2017	5
DRM and Course content protection. Locked	Deepak Tripathi 1 Dec 2017	Dave Perry 4 Dec 2017	1
Help with redirect from HTTP to HTTPS Locked	Carolyn McIntyre 8 Mar 2017	J Guzman 22 Nov 2017	14
a user with student privilege change another user's password Locked	esty wexler 27 Nov 2017	Mathew Gancarz 29 Nov 2017	1
Privacy concerns using the Google Document Converter (annotate a pdf) Locked	Eva E 7 Nov 2017	Sergio Rabellino 26 Nov 2017	4
API test for Moodle (v2.6) with Postman Locked	Shantanu Mitra 25 Nov 2017	Shantanu Mitra 25 Nov 2017	0
unclear CSS - attack Locked	Bjarne Oldsen 5 Nov 2017	Ralf Hilgenstock 25 Nov 2017	4
Falling out of supported releases? Locked	Wen Hao Chuang 22 Nov 2017	Mathew Gancarz 22 Nov 2017	1
HTTP to HTTPS but on Windows environment Locked	J Guzman 22 Nov 2017	J Guzman 22 Nov 2017	0
Reverse Proxy redirecting Locked	Helson C 21 Nov 2017	Helson C 21 Nov 2017	0

Previous
1
2
3 (current)
4
5
6
7
8
9
10
…
15
Next