Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1584 discussions
Discussion	Started by	Last post	Replies
automated backups Locked	Dom F 12 May 2018	Paul Raper 14 May 2018	6
ClamAV - clamdscan Locked	callum Wood 2 May 2018	callum Wood 4 May 2018	3
GDPR Policies Plugin - Any facility for Optional? Locked	James Clarke 26 Apr 2018	Randy Thornton 2 May 2018	4
Migrating my Moodle Site From HTTP to HTTPS Locked	Jonathan Christoper Go 30 Apr 2018	callum Wood 2 May 2018	3
I think we were hacked Locked	mimi nom 30 Apr 2018	Ken Task 2 May 2018	8
https & sensitive info Locked	James Brown 27 Apr 2018	Visvanath Ratnaweera 2 May 2018	5
Moodle 'Site News' is public, it needs to be private. Help. Locked	roshan kolar 29 Apr 2018	roshan kolar 1 May 2018	2
GDPR: config settings as user preferences in blocks Locked	Mark Sharp 16 Apr 2018	Randy Thornton 1 May 2018	6
Policy & Privacy Plugin help Locked	Mark Lewis 1 Apr 2018	Mark Lewis 29 Apr 2018	3
GDPR and Custom Reports Locked	Lester Cunningham 20 Apr 2018	Randy Thornton 27 Apr 2018	2
Delete "graduated" students (GDPR) Locked	Alicia Wallace 24 Apr 2018	Randy Thornton 27 Apr 2018	1
Hiding Student Names from Graders Locked	Jennifer Holder 25 Apr 2018	John Provasnik 27 Apr 2018	1
Same moodle server to cater both Intranet & Internet Locked	Sreepathy T L 23 Apr 2018	Ken Task 25 Apr 2018	9
Erasing optional field data Locked	Dave Foord 23 Apr 2018	Alicia Wallace 24 Apr 2018	6
Bug bounty by Detectify Locked	George Mihailov 24 Apr 2018	Marina Glancy 24 Apr 2018	1
You are considered to be a digital minor Locked	Bente Olsen 21 Apr 2018	Bente Olsen 22 Apr 2018	4
saml - sso error Locked	oded blaum 18 Apr 2018	Ken Task 18 Apr 2018	1
GDPR plugins - Category & Purpose Locked	Mark Sharp 12 Apr 2018	Adrian Greeve 17 Apr 2018	6
Trusted content permission does not work for Teacher role, XSS vulnerable? Locked	Paul L 25 Oct 2017	Sascha Leblanc 17 Apr 2018	2
Report page visible to web Locked	Nick Gault 11 Apr 2018	Ken Task 14 Apr 2018	3
Privacy / Site / Cookie Policies (GDPR) Locked	Guildford College Group 6 Apr 2018	Gareth J Barnard 11 Apr 2018	2
pseudonymization/anonymization of deleted users Locked	Alexandra F 10 Apr 2018	Alexandra F 10 Apr 2018	2
user always online Locked	m question 2 Apr 2018	Visvanath Ratnaweera 6 Apr 2018	3
Security vulnerability Locked	İdiye ÖKTEN 3 Apr 2018	İdiye ÖKTEN 3 Apr 2018	0
Limit Course Access by Special LDAP Attribute Locked	Jeff Jones 31 Mar 2018	Jeff Jones 31 Mar 2018	0
Plugins DB and external services (GDPR related) Locked	Tomasz Muras 29 Mar 2018	Andrew Lyons 30 Mar 2018	1
Moodle security Locked	MoodleKittyCat . 28 Mar 2018	Mathew Gancarz 29 Mar 2018	6
Moodle blocked out after IP listing Locked	Anandarup Kar 17 Mar 2018	Visvanath Ratnaweera 28 Mar 2018	1
Ferpa and moodle Locked	curt bixel 23 Mar 2018	Rick Jerz 26 Mar 2018	20
Privacy issue: how to disable Analytics completely Locked	Randy Thornton 6 Mar 2018	Randy Thornton 21 Mar 2018	7
Database encryption Locked	Ted Long 18 Mar 2018	Mathew Gancarz 21 Mar 2018	1
Authentication Keys Plugin Needed Locked	Donna Betancourt 9 Mar 2018	Donna Betancourt 9 Mar 2018	0
Privacy concens regarding the mobile push notifications Locked	Beni Keller 23 Feb 2018	Beni Keller 5 Mar 2018	16
Hacked or some kind of update? Locked	Patrick Lawrence 28 Jan 2018	Moodle Admin 28 Feb 2018	1
Locking documents so that they can not be printed or downloaded directly? Locked	Lee Richards 26 Feb 2018	Randy Thornton 27 Feb 2018	5
SSL implementation on Moodle Locked	Syed Ali 20 Feb 2018	Syed Ali 22 Feb 2018	7
Add Custom Salt to Unique Salt for Better Hashed Password? Locked	Paul L 17 Feb 2018	Iñaki Arenaza 18 Feb 2018	2
File permissions on webroot vs installing plugins Locked	Tom Smith 6 Feb 2018	Ken Task 6 Feb 2018	1
Plugin to upload and secure external exam results? Locked	Ruth Horak 5 Feb 2018	Ruth Horak 5 Feb 2018	0
LDAP and non-LDAP? Locked	Mike Stewart 5 Feb 2018	Mike Stewart 5 Feb 2018	2
Virus detected on file download HELP! Locked	Irith Herman 28 Jan 2018	Ken Task 2 Feb 2018	7
ycfkurl reported Locked	Timothy Bolton Milhas 27 Jul 2017	Tristin Mock 31 Jan 2018	2
The Web Application Firewall Blocks Most of the Actions Locked	Ali Arekat 22 Jan 2018	Dan Marsden 22 Jan 2018	1
Deny access to/Hide participant listing when logged in Locked	Morag Hughson 14 Dec 2017	Randy Thornton 20 Jan 2018	4
Moodle Security Alerts - SPAM Locked	Joshua Hagan 15 Jan 2018	Ken Task 15 Jan 2018	1
Access to Moodle Locked	Lance Hinds 10 Jan 2018	Ray Lawrence 11 Jan 2018	5
About the OAuth 2 services Locked	Cheryl Tsai 31 Oct 2017	Cheryl Tsai 28 Dec 2017	2
Unauthorized person created an account Locked	Walter Byrd 15 Dec 2017	Walter Byrd 17 Dec 2017	4
Moodle SimpleSAML Error Locked	Dax Nac 15 Dec 2017	Leon Stringer 15 Dec 2017	1
Use Self-Signed Certificate Locked	mimi nom 7 Feb 2017	Harsh Patel 15 Dec 2017	6
SSL Cert on Content switch Locked	S Parker 24 Jul 2017	Harsh Patel 15 Dec 2017	3
Prevent seeing Permissions for others Locked	Andy Hill 11 Dec 2017	Andy Hill 15 Dec 2017	1
SSL setup issues on Moodle 3.2.3 Locked	Yogesh Nahar 7 Jun 2017	Harsh Patel 15 Dec 2017	4
Users can't see their own "full profile" Locked	Krisha Moeller 15 Dec 2017	Krisha Moeller 15 Dec 2017	0
ClamAV Locked	Pieter Portier 18 Jan 2017	Alain Raap 14 Dec 2017	1
Moodle Login Form Encryption Locked	Danielle Bryan Dizon 12 Dec 2017	James McLean 12 Dec 2017	2
Site policy acceptance logs Locked	Andreas Panagiotopoulos 8 Dec 2017	Eric Katchan 11 Dec 2017	3
Login and get someone else's account Locked	Rachel Whitton 7 Dec 2017	Rachel Whitton 8 Dec 2017	5
DRM and Course content protection. Locked	Deepak Tripathi 1 Dec 2017	Dave Perry 4 Dec 2017	1
Help with redirect from HTTP to HTTPS Locked	Carolyn McIntyre 8 Mar 2017	J Guzman 22 Nov 2017	14
a user with student privilege change another user's password Locked	esty wexler 27 Nov 2017	Mathew Gancarz 29 Nov 2017	1
Privacy concerns using the Google Document Converter (annotate a pdf) Locked	Eva E 7 Nov 2017	Sergio Rabellino 26 Nov 2017	4
API test for Moodle (v2.6) with Postman Locked	Shantanu Mitra 25 Nov 2017	Shantanu Mitra 25 Nov 2017	0
unclear CSS - attack Locked	Bjarne Oldsen 5 Nov 2017	Ralf Hilgenstock 25 Nov 2017	4
Falling out of supported releases? Locked	Wen Hao Chuang 22 Nov 2017	Mathew Gancarz 22 Nov 2017	1
HTTP to HTTPS but on Windows environment Locked	J Guzman 22 Nov 2017	J Guzman 22 Nov 2017	0
Reverse Proxy redirecting Locked	Helson C 21 Nov 2017	Helson C 21 Nov 2017	0
Moodle 3.4 improvements related to data protection/GDPR Locked	Joe Cape 17 Nov 2017	Joe Cape 17 Nov 2017	0
Server CPU performance overhead Locked	Shamal Sabah 12 Nov 2017	Dan Bennett 15 Nov 2017	4
Is the unoconv installation a security risk? Locked	Matthew Davidson 24 Jun 2016	Meg Goodine 10 Nov 2017	27
How to prevent multiple login with same ID with moodle 3 Locked	Vivian Bognini 7 Nov 2017	Vivian Bognini 7 Nov 2017	0
Assigning permissions to modify themes Locked	marisol castro 2 Nov 2017	Ken Task 2 Nov 2017	1
Maximum uploaded file size Locked	mozhgan shafiei 31 Oct 2017	mozhgan shafiei 31 Oct 2017	0
PHP.URI.Code.Injection Firewall Message Locked	Ali Arekat 24 Oct 2017	Tomasz Muras 24 Oct 2017	1
Model for managing institution groups Locked	David Humphreys 24 Oct 2017	David Humphreys 24 Oct 2017	0
Guest Access to Calendar Locked	Emma Richardson 29 Sep 2017	Dean Montgomery 14 Oct 2017	1
Why Does Moodle Have a Plugin Installer If It Is Considered Unsafe? Locked	Uwe Stange 9 Oct 2017	Uwe Stange 9 Oct 2017	0
Tab redirected Locked	randall jones 5 Oct 2017	randall jones 5 Oct 2017	1
SSL and Moodle on a Subdomain Locked	David Dinh 2 Oct 2017	David Dinh 3 Oct 2017	5
Resetting forgot password without email Locked	Sanni Rinne 26 Sep 2017	Sanni Rinne 2 Oct 2017	4
JS Injection Locked	Claudio Henrique 29 Sep 2017	David Mudrák 29 Sep 2017	1
Restrict access by enrolment method Locked	Dominique Bauer 24 Sep 2017	Randy Thornton 29 Sep 2017	5
SAML auth with users pulled via LDAP Locked	Joel Coehoorn 14 Dec 2016	Keiron Walsh 22 Sep 2017	1
security issue with the syslog for moodle Locked	Mahmood Naderan 14 Sep 2017	Mahmood Naderan 14 Sep 2017	3
Warning: Executable paths can be set in the Admin GUI. Locked	Jaifar Al Shizawi 11 Sep 2017	Jaifar Al Shizawi 12 Sep 2017	4
Discussing sensitive content in moodle Locked	James Brown 11 Sep 2017	Mathew Gancarz 11 Sep 2017	1
Restrictions Locked	Munna jk 9 Sep 2017	Munna jk 9 Sep 2017	0
Performance info only for admins? Locked	Christos Savva 7 Sep 2017	Christos Savva 8 Sep 2017	3
How to change admin password Locked	Mark Miller 5 Sep 2017	Emma Richardson 5 Sep 2017	1
NET::ERR_CERT_AUTHORITY_INVALID 3.2.2 Locked	David Robertson 2 May 2017	Amit Shingala 5 Sep 2017	9
Security issue - authentification Locked	Marta Mik 1 Aug 2017	Adam Jenkins 1 Sep 2017	1
uses moodle username and password for login on main site Locked	Muhammad Abdulhakeem 7 Aug 2017	Adam Jenkins 1 Sep 2017	1
how to set different views for a database activity for different users or groups Locked	Luca Tomsi 31 Jul 2017	AL Rachels 20 Aug 2017	8
Security Moodle Locked	Rondi Ariyanto 27 Jul 2017	Rondi Ariyanto 7 Aug 2017	13
Hide "Inactive for more than" and "User list" from students Locked	Christos Savva 31 Jul 2017	Emma Richardson 1 Aug 2017	3
with loginhttps the cookiesecure security check fails Locked	M. Schneider 27 Jul 2017	M. Schneider 31 Jul 2017	4
Is password policy change "retroactive"? Locked	Jacques LeCavalier 27 Jul 2017	Emma Richardson 28 Jul 2017	3
IP address being blocked by the server Locked	Rick Enderle, Jr. 25 Jul 2017	Just H 25 Jul 2017	1
Security settings Locked	Ali Shettima 21 Jul 2017	John Okely 21 Jul 2017	1
Code security certification Locked	Anand Rajendran 20 Jul 2017	Marcus Green 21 Jul 2017	2