Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1584 discussions
Discussion	Started by	Last post	Replies
SSO Locked	Didier T. 18 Nov 2019	Didier T. 18 Nov 2019	0
Automated Security Testing Locked	John Papworth 13 Nov 2019	Michael Hawkins 14 Nov 2019	3
When QA testers test upcoming releases, do ... Locked	Ken Task 11 Nov 2019	AL Rachels 11 Nov 2019	4
Moodle.org tracker ... Locked	Ken Task 4 Nov 2019	Michael Hawkins 4 Nov 2019	1
Changing quiz password while quiz is underway Locked	Ranjith Kunnath 2 Nov 2019	Tim Hunt 2 Nov 2019	1
Is Moodle Adminer a security risk? Locked	Don Schwartz 2 Nov 2019	Ken Task 2 Nov 2019	2
moodle does not display the subscribe/creation date of account ? Locked	pierre REMY 31 Oct 2019	pierre REMY 31 Oct 2019	0
Automating GDPR Data Request approval Locked	Jeremy Virgo 30 Oct 2019	Michael Hawkins 30 Oct 2019	1
Corrections to the Moodle landscape as a result of the Facebook's breaches Locked	Visvanath Ratnaweera 27 Mar 2018	Visvanath Ratnaweera 25 Oct 2019	9
Security issue with email change Locked	François Lizotte 19 Oct 2019	François Lizotte 24 Oct 2019	2
Admin Log management Locked	ansg ar 18 Oct 2019	ansg ar 18 Oct 2019	0
Editing Profile email error Locked	Daniel Martins 3 Oct 2019	Daniel Martins 14 Oct 2019	2
Moodle does not work with WAF Locked	Maddy Fu 10 Oct 2019	Michael Hawkins 14 Oct 2019	2
Allow only one dynamic ip Locked	Adrián Fernández Martín 12 Oct 2019	Ken Task 14 Oct 2019	5
Port Scanning Alerts Locked	Naline Lawrence 11 Oct 2019	Mathew Gancarz 11 Oct 2019	5
target=_blank Locked	Lucien Stals 10 Oct 2019	Mathew Gancarz 11 Oct 2019	4
Authentification to download attachments Locked	Slaven Marsic 7 Oct 2019	Visvanath Ratnaweera 7 Oct 2019	3
log in issues Locked	Jude douglas 5 Oct 2019	Jude douglas 5 Oct 2019	0
LDAP server authentication Locked	Jorge G. C. 16 Sep 2019	Jon Bolton 3 Oct 2019	12
Outstanding Tracker Issue Locked	C Behan 24 Sep 2019	C Behan 25 Sep 2019	3
question type plugin specific feedback Locked	Karin Borm 12 Sep 2019	Tim Hunt 13 Sep 2019	3
User Profile Fields and guests Locked	Matthew Landseadel 5 Sep 2019	Randy Thornton 6 Sep 2019	1
is it possible to have username instead their ID in the logs or more details ? ? Locked	pierre REMY 26 Aug 2019	pierre REMY 26 Aug 2019	0
login to Moodle from a script/application Locked	Kris Van Gelder 25 Feb 2019	Martin Carruth 20 Aug 2019	4
Manager access at CATEGORY level? Locked	Eric Martin 17 Aug 2019	Eric Martin 17 Aug 2019	0
Read only Site Locked	Anze Pratnemer 30 Jul 2019	Andrew Lyons 31 Jul 2019	2
sitepolicynotagreed error appears on site policy page with bad format Locked	Roberto Cucco 24 Jul 2019	Sergio Rabellino 25 Jul 2019	3
Securing activity "files"? Locked	Jeff M 12 Jul 2019	Jeff M 14 Jul 2019	4
SMTP Email password viewing Locked	Chris Swinney 12 Jul 2019	Visvanath Ratnaweera 12 Jul 2019	3
Passwords and User Uploads Locked	Stephen Oxlade 12 Jul 2019	Stephen Oxlade 12 Jul 2019	0
EU General Data Protection Regulation (GDPR) compliance Locked	Martin Dougiamas 17 May 2017	Prince Namdev 9 Jul 2019	100
GDPR is a no go for now Locked	Ray Havlin 23 Jan 2019	Helen Foster 4 Jul 2019	5
ZAP Scanning Report - High Risk SQL Injection on Login Page Locked	Pradipta Suryadi 2 Jul 2019	Pradipta Suryadi 4 Jul 2019	3
how to display last ip address in column of user list ? Locked	pierre REMY 28 Jun 2019	AL Rachels 1 Jul 2019	3
how to restrict the accessibility or visibility of user profile fields ? Locked	pierre REMY 20 Jun 2019	pierre REMY 21 Jun 2019	5
can we make visible course only for an IP address ? Locked	pierre REMY 2 Mar 2019	Randy Thornton 21 Jun 2019	7
LTI Vulnerability Locked	Robert Kovacich 31 Mar 2019	Adam Jenkins 15 Jun 2019	5
Retention period. Locked	Henrik sune Pedersen 14 Jun 2019	Henrik sune Pedersen 14 Jun 2019	0
Account lockout threshold? Why is the default no? Locked	Billy Zwiener 30 May 2019	Billy Zwiener 2 Jun 2019	3
cannot delete some users Locked	stefan weber 20 May 2019	Luis de Vasconcelos 21 May 2019	4
Profile picture changes on specific user Locked	Joan Llimiñana 16 May 2019	Joan Llimiñana 21 May 2019	4
Lots of requests in access_log for outbound connections Locked	David White 16 May 2019	Evan Donovan 19 May 2019	15
What does your upgrade schedule look like to keep up with security? Locked	Rauhan Farrukh 10 May 2019	Rauhan Farrukh 17 May 2019	4
User deletion request for plugins - forum posts Locked	Vincent VEBER 17 May 2019	Vincent VEBER 17 May 2019	0
Useragent Locked	Robert Hegestedt 17 May 2019	Robert Hegestedt 17 May 2019	2
Course Categories Page Public Locked	Wolf Ventir 14 May 2019	Wolf Ventir 15 May 2019	4
SSL config on CentOS/Nginx Locked	Martin Williams 30 Apr 2019	Ken Task 4 May 2019	22
Firewall problem Locked	Robert Hegestedt 16 Apr 2019	Robert Hegestedt 3 May 2019	5
Is this possible? Policies and agreements view after login, not before... Locked	Oli G. 1 May 2019	Oli G. 1 May 2019	0
ssl problem Locked	FaRzad Shami 6 Mar 2019	Martin Williams 30 Apr 2019	1
Audit log of user activity Locked	Kate Dawson 15 Apr 2019	Randy Thornton 27 Apr 2019	6
Restricting site access Locked	Carl Byerley 22 Apr 2019	Ken Task 26 Apr 2019	3
Manual Login Locked	Syed Ali 24 Apr 2019	Ken Task 24 Apr 2019	5
How can I block cURLs to eliminate phony accounts? Locked	Deb Smith 18 Apr 2019	Ken Task 18 Apr 2019	1
Moodle reverse proxy and URL replace.php not working Locked	jitendra Phull 6 Apr 2019	Ken Task 17 Apr 2019	11
security problem with mod/scorm/datamodel.php Locked	Michał Boszke 17 Apr 2019	Dan Marsden 17 Apr 2019	1
LDAP Authantication Locked	Tumediso Sebonego 8 Apr 2019	Leon Stringer 15 Apr 2019	3
Password Issue with moodle 3.4.6 Locked	Tech Academy 13 Apr 2019	Tech Academy 13 Apr 2019	0
Secure MP4 videos Locked	Sa Ku 9 Apr 2019	Matt Bury 11 Apr 2019	5
Is Moodle OWASP compliant? Locked	Ivica Matotek 9 Apr 2019	Dan Marsden 11 Apr 2019	1
Is there a way to completely delete users including all their data? Locked	stefan weber 18 Sep 2018	stefan weber 5 Apr 2019	24
Confidentiality policy for forum / posts sent Locked	Francis Vendrell 4 Apr 2019	Francis Vendrell 4 Apr 2019	0
SSL installation Locked	Akhil Verma 4 Apr 2019	Jon Bolton 4 Apr 2019	1
Password Reset Process Locked	Pince AUS 1 Apr 2019	Pince AUS 1 Apr 2019	0
The Policy consent form for the teachers only? Locked	Antti Peltonen 27 Mar 2019	Emma Richardson 27 Mar 2019	1
Data export and GDPR comliance Locked	Flotter Totte 25 Mar 2019	Flotter Totte 26 Mar 2019	3
Activity completion and GDPR compliance Locked	Flotter Totte 25 Mar 2019	Flotter Totte 25 Mar 2019	2
Content lockdown Locked	Kenneth Hess 21 Mar 2019	Jon Bolton 24 Mar 2019	6
Anonymizing Data on Students Locked	Roger Domínguez Argemí 12 Mar 2019	Zoran Jancic 20 Mar 2019	5
Is thar any way to make Moodle site at least basicly GDPR compliant? Locked	Zoran Jancic 18 Mar 2019	Zoran Jancic 18 Mar 2019	0
Deleting old users Locked	Conn Warwicker 31 Jul 2018	Zoran Jancic 18 Mar 2019	2
Restricting Access by Cohort Locked	Elizabeth Ford 1 Mar 2019	Zoran Jancic 15 Mar 2019	1
Deleting user accounts for users that are not using the system anymore Locked	Zoran Jancic 15 Mar 2019	Zoran Jancic 15 Mar 2019	0
Any Idea on the Possibility of Hacking? Locked	Rafiq Muhammad 14 Mar 2019	Rafiq Muhammad 15 Mar 2019	2
defining admin/mamager role for specific course Locked	altan ahmet 8 Mar 2019	altan ahmet 9 Mar 2019	1
Testing Moodle security Locked	Luke P 8 Mar 2019	Tim Hunt 9 Mar 2019	1
Changes to Password Procedure Locked	Conor O'Neill 19 Feb 2019	Conor O'Neill 6 Mar 2019	3
adding additional admins & assigning specific roles Locked	altan ahmet 27 Feb 2019	altan ahmet 28 Feb 2019	3
Cohorts View hidden categories Locked	Matthew Landseadel 27 Feb 2019	Dave Perry 27 Feb 2019	1
Notifications regarding Data Privacy requests processing Locked	seaghan moriarty 27 Feb 2019	seaghan moriarty 27 Feb 2019	0
Removal of loginpasswordautocomplete Headaches Locked	Wolf Ventir 26 Feb 2019	Wolf Ventir 26 Feb 2019	0
Deleted users still show up in Forum thread overview Locked	stefan weber 22 Feb 2019	Alan Schrock 25 Feb 2019	5
Does Moodle log admin activity? Locked	Cathal O'Riordan 14 Feb 2019	Cathal O'Riordan 15 Feb 2019	2
Firewall Recommended Settings Locked	Ali Arekat 5 Feb 2019	Ali Arekat 6 Feb 2019	4
OSSEC blocks ajax call Locked	Venizia Venizia 2 Feb 2019	Venizia Venizia 2 Feb 2019	0
Moodle 3.6.1+ (20181210) issue with tool_policy Locked	Joost Elshoff 25 Jan 2019	Joost Elshoff 25 Jan 2019	2
dataprivacy tool blocking cron job from running Locked	stefan weber 24 Jan 2019	stefan weber 24 Jan 2019	0
Can't edit moodle's password policy Locked	Salome Tkhilaishvili 28 Dec 2018	Salome Tkhilaishvili 21 Jan 2019	2
Suppression of advice about php register_global at documentation Locked	Joan Cervan 18 Jan 2019	Joan Cervan 18 Jan 2019	0
User Policy and agrement Locked	Tone Engebretsen 6 Jan 2019	Ralf Hilgenstock 14 Jan 2019	1
Lots of invalid login token errors in the logs Locked	Diane Soini 9 Jan 2019	Diane Soini 12 Jan 2019	14
SSL connection to Moodle DB? Locked	Paul Martin 2 Oct 2018	Garrett Boone 11 Jan 2019	33
Plugin privacy registry error Locked	Henrik sune Pedersen 3 Jan 2019	Andrew Lyons 4 Jan 2019	2
How to Download my Personal Data or other's Data Locked	Alan Schrock 29 Nov 2018	Alan Schrock 4 Jan 2019	16
Host with LiquidWeb - mod_security rules Locked	Ken Task 25 Dec 2018	Ken Task 29 Dec 2018	2
ClamAV and Cwatch Locked	Wynand Louw 28 Dec 2018	Wynand Louw 29 Dec 2018	4
ClamAV server Locked	callum Wood 12 Dec 2018	Matteo Scaramuccia 21 Dec 2018	2
Restrict teacher's ability to backup courses including userdata? Locked	stefan weber 17 Dec 2018	stefan weber 18 Dec 2018	2
GuardianKey - A new plugin of Security Locked	Gesiel Bernardes 17 Dec 2018	Gesiel Bernardes 17 Dec 2018	0
IP blocker error when access via html script Locked	Karishma Tiwari 17 Dec 2018	Karishma Tiwari 17 Dec 2018	0