Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3
4
5 (current)
6
7
8
9
10
…
16
Next

List of discussions. Showing 100 of 1534 discussions
Discussion	Started by	Last post	Replies
SSL Cert on Content switch Locked	S Parker 24 Jul 2017	Harsh Patel 15 Dec 2017	3
Prevent seeing Permissions for others Locked	Andy Hill 11 Dec 2017	Andy Hill 15 Dec 2017	1
SSL setup issues on Moodle 3.2.3 Locked	Yogesh Nahar 7 Jun 2017	Harsh Patel 15 Dec 2017	4
Users can't see their own "full profile" Locked	Krisha Moeller 15 Dec 2017	Krisha Moeller 15 Dec 2017	0
ClamAV Locked	Pieter Portier 18 Jan 2017	Alain Raap 14 Dec 2017	1
Moodle Login Form Encryption Locked	Danielle Bryan Dizon 12 Dec 2017	James McLean 12 Dec 2017	2
Site policy acceptance logs Locked	Andreas Panagiotopoulos 8 Dec 2017	Eric Katchan 11 Dec 2017	3
Login and get someone else's account Locked	Rachel Whitton 7 Dec 2017	Rachel Whitton 8 Dec 2017	5
DRM and Course content protection. Locked	Deepak Tripathi 1 Dec 2017	Dave Perry 4 Dec 2017	1
Help with redirect from HTTP to HTTPS Locked	Carolyn McIntyre 8 Mar 2017	J Guzman 22 Nov 2017	14
a user with student privilege change another user's password Locked	esty wexler 27 Nov 2017	Mathew Gancarz 29 Nov 2017	1
Privacy concerns using the Google Document Converter (annotate a pdf) Locked	Eva E 7 Nov 2017	Sergio Rabellino 26 Nov 2017	4
API test for Moodle (v2.6) with Postman Locked	Shantanu Mitra 25 Nov 2017	Shantanu Mitra 25 Nov 2017	0
unclear CSS - attack Locked	Bjarne Oldsen 5 Nov 2017	Ralf Hilgenstock 25 Nov 2017	4
Falling out of supported releases? Locked	Wen Hao Chuang 22 Nov 2017	Mathew Gancarz 22 Nov 2017	1
HTTP to HTTPS but on Windows environment Locked	J Guzman 22 Nov 2017	J Guzman 22 Nov 2017	0
Reverse Proxy redirecting Locked	Helson C 21 Nov 2017	Helson C 21 Nov 2017	0
Moodle 3.4 improvements related to data protection/GDPR Locked	Joe Cape 17 Nov 2017	Joe Cape 17 Nov 2017	0
Server CPU performance overhead Locked	Shamal Sabah 12 Nov 2017	Dan Bennett 15 Nov 2017	4
Is the unoconv installation a security risk? Locked	Matthew Davidson 24 Jun 2016	Meg Goodine 10 Nov 2017	27
How to prevent multiple login with same ID with moodle 3 Locked	Vivian Bognini 7 Nov 2017	Vivian Bognini 7 Nov 2017	0
Assigning permissions to modify themes Locked	marisol castro 2 Nov 2017	Ken Task 2 Nov 2017	1
Maximum uploaded file size Locked	mozhgan shafiei 31 Oct 2017	mozhgan shafiei 31 Oct 2017	0
PHP.URI.Code.Injection Firewall Message Locked	Ali Arekat 24 Oct 2017	Tomasz Muras 24 Oct 2017	1
Model for managing institution groups Locked	David Humphreys 24 Oct 2017	David Humphreys 24 Oct 2017	0
Guest Access to Calendar Locked	Emma Richardson 29 Sep 2017	Dean Montgomery 14 Oct 2017	1
Why Does Moodle Have a Plugin Installer If It Is Considered Unsafe? Locked	Uwe Stange 9 Oct 2017	Uwe Stange 9 Oct 2017	0
Tab redirected Locked	randall jones 5 Oct 2017	randall jones 5 Oct 2017	1
SSL and Moodle on a Subdomain Locked	David Dinh 2 Oct 2017	David Dinh 3 Oct 2017	5
Resetting forgot password without email Locked	Sanni Rinne 26 Sep 2017	Sanni Rinne 2 Oct 2017	4
JS Injection Locked	Claudio Henrique 29 Sep 2017	David Mudrák 29 Sep 2017	1
Restrict access by enrolment method Locked	Dominique Bauer 24 Sep 2017	Randy Thornton 29 Sep 2017	5
SAML auth with users pulled via LDAP Locked	Joel Coehoorn 14 Dec 2016	Keiron Walsh 22 Sep 2017	1
security issue with the syslog for moodle Locked	Mahmood Naderan 14 Sep 2017	Mahmood Naderan 14 Sep 2017	3
Warning: Executable paths can be set in the Admin GUI. Locked	Jaifar Al Shizawi 11 Sep 2017	Jaifar Al Shizawi 12 Sep 2017	4
Discussing sensitive content in moodle Locked	James Brown 11 Sep 2017	Mathew Gancarz 11 Sep 2017	1
Restrictions Locked	Munna jk 9 Sep 2017	Munna jk 9 Sep 2017	0
Performance info only for admins? Locked	Christos Savva 7 Sep 2017	Christos Savva 8 Sep 2017	3
How to change admin password Locked	Mark Miller 5 Sep 2017	Emma Richardson 5 Sep 2017	1
NET::ERR_CERT_AUTHORITY_INVALID 3.2.2 Locked	David Robertson 2 May 2017	Amit Shingala 5 Sep 2017	9
Security issue - authentification Locked	Marta Mik 1 Aug 2017	Adam Jenkins 1 Sep 2017	1
uses moodle username and password for login on main site Locked	Muhammad Abdulhakeem 7 Aug 2017	Adam Jenkins 1 Sep 2017	1
how to set different views for a database activity for different users or groups Locked	Luca Tomsi 31 Jul 2017	AL Rachels 20 Aug 2017	8
Security Moodle Locked	Rondi Ariyanto 27 Jul 2017	Rondi Ariyanto 7 Aug 2017	13
Hide "Inactive for more than" and "User list" from students Locked	Christos Savva 31 Jul 2017	Emma Richardson 1 Aug 2017	3
with loginhttps the cookiesecure security check fails Locked	M. Schneider 27 Jul 2017	M. Schneider 31 Jul 2017	4
Is password policy change "retroactive"? Locked	Jacques LeCavalier 27 Jul 2017	Emma Richardson 28 Jul 2017	3
IP address being blocked by the server Locked	Rick Enderle, Jr. 25 Jul 2017	Just H 25 Jul 2017	1
Security settings Locked	Ali Shettima 21 Jul 2017	John Okely 21 Jul 2017	1
Code security certification Locked	Anand Rajendran 20 Jul 2017	Marcus Green 21 Jul 2017	2
Can't enable web services for authentication Locked	Brad Smith 1 Jun 2017	Dave Perry 20 Jul 2017	3
SQL-Injection Locked	Fabienne Neveu 14 Feb 2017	kim Rechter 19 Jul 2017	8
Default Password policies: Self enrolment vs group enrolment Locked	Deleted user 14 Jun 2017	Deleted user 10 Jul 2017	3
How do I remove "Forgotten your username or password?" in moodle 3.2 Locked	Obuntu Cracks 23 Apr 2017	Ambreen Kiran 7 Jul 2017	3
Moving to HTTPS everywhere Locked	Michael Aherne 16 May 2017	Susan Mangan 7 Jul 2017	6
is it possible that category administrator can upload new user and course Locked	rajani gupta 11 May 2017	Ambrish Tiwari 4 Jul 2017	2
Antivirus Locked	Ripa Desai 18 May 2017	Rahul Rai 3 Jul 2017	2
GeoLite Database Locked	Doug Moody 21 Jun 2017	Ken Task 21 Jun 2017	1
settings for multiple manager(admin) for each organization Locked	Anand Vadivelu 19 May 2017	gurpreet singh 20 Jun 2017	1
Moodle SSL Offloading Locked	Daniel Alves 9 Jun 2017	Daniel Alves 13 Jun 2017	5
create an option to prevent xss injection ? Locked	Julien Boulen 1 Jun 2017	Marina Glancy 6 Jun 2017	1
Security for SCORM files Locked	Peter Aherne 30 May 2017	Mathew Gancarz 31 May 2017	2
Security Issue in Moodle 3.2.2: Can you tell me what happened with my content as a Administrator ... Locked	Ricardo Rodriguez 17 May 2017	Emma Richardson 17 May 2017	1
Guide to ssl certificate https linux ubuntu apache Locked	Christian Kristiansen 1 May 2017	Ken Task 16 May 2017	10
Daniel Esterly - Is Moodle secure to use with Windows 10 Locked	Daniel Esterly 12 May 2017	John Okely 15 May 2017	1
settings required to do for running diff ministry sites on single moodle installation Locked	rajani gupta 10 May 2017	Emma Richardson 10 May 2017	1
Access to lesson activities Locked	Joe Chacha 6 May 2017	Joe Chacha 6 May 2017	0
Manager role with system role - only view site page forum, search for users too Locked	Usman Arshad 27 Apr 2017	Usman Arshad 27 Apr 2017	2
How to display home page for non-login user ? Locked	Imran Patel 17 Apr 2017	Jon Bolton 17 Apr 2017	2
Reviewing messages table for bullying incidents Locked	DR LMS 26 Mar 2017	Mike Hoddee 11 Apr 2017	1
security issue Locked	Anderson Hsu 28 Nov 2016	Mike Hoddee 11 Apr 2017	4
Site policy > empty frame Locked	Daniel S 9 Apr 2017	Ken Task 10 Apr 2017	4
Plugins security and privacy Locked	Thomas Barna 31 Mar 2017	Jon Bolton 31 Mar 2017	2
Recaptcha Locked	Miyone G 24 Feb 2017	Randy Thornton 28 Mar 2017	3
Applying patch to protect against CVE-2017-2641 Locked	B J 21 Mar 2017	Nadav Kavalerchik 25 Mar 2017	18
3.1.4 - new security Announcement: MDL-57597 and MDL-57596 competency Locked	Monica Franz 22 Mar 2017	Monica Franz 24 Mar 2017	7
What are the best practices to determine if site was affected by security vulnerability Locked	Rex Lorenzo 23 Mar 2017	Randy Thornton 24 Mar 2017	1
Folder Password in Moodle Locked	Yonten Jamtsho 17 Mar 2017	Mary Cooch 17 Mar 2017	1
Moodle not caching/Storing LDAP username and passwords Locked	RSA NOC 14 Mar 2017	RSA NOC 15 Mar 2017	7
Moodle acting as OAuth2 server Locked	Hille Hille 2 Mar 2017	Hille Hille 2 Mar 2017	0
Restrict Access to Categories By User Locked	William Workman 7 Jan 2016	John Provasnik 28 Feb 2017	5
Cloudflare Security Issue Locked	Matt Spurrier 25 Feb 2017	Randy Thornton 28 Feb 2017	1
How to restrict users who are not using office's computer? Locked	Fung Tony 10 Feb 2017	Jon Bolton 23 Feb 2017	3
Avoiding LDAP data in plain text when you check the source code from a browser Locked	Robespierre Galindo 16 Feb 2017	Randy Thornton 16 Feb 2017	3
task: download all submissions is possible even when you only are allowed to assess one Locked	Jeus Perez 9 Feb 2017	Dave Perry 13 Feb 2017	2
Redis Sessions Locked	John Rickard 10 Feb 2017	John Rickard 10 Feb 2017	0
Move to secure protocol (https) issues Locked	Wes Matchett 2 Feb 2017	Ken Task 8 Feb 2017	8
Can't change a password for the student Locked	Jesse Techno 3 Feb 2017	Jesse Techno 3 Feb 2017	2
PHPMailer vulnerability in no-reply address Locked	mimi nom 30 Jan 2017	mimi nom 31 Jan 2017	4
loginhttps true = too many redirects? Locked	Christos Savva 19 Jan 2017	Christos Savva 20 Jan 2017	8
[Security] How to protect source code and database from hosting company Locked	Huy Lam 9 Jan 2017	Dave Perry 16 Jan 2017	7
"Guest user has logged in" ? Locked	g k 7 Jul 2016	Ken Task 9 Jan 2017	2
[Security] Moodle showed all users to Sub Category Manager Locked	Huy Lam 7 Jan 2017	Emma Richardson 7 Jan 2017	1
Moodle 3.1.3: Website Adminstration Security Overview Locked	Monica Franz 5 Jan 2017	John Okely 6 Jan 2017	2
Fun times with Poisoned Cookies! Locked	Robin Stark 22 Dec 2016	Randy Thornton 23 Dec 2016	1
Limit number of ip adresses per user Locked	marwa bekrar 8 Dec 2016	Robin Stark 22 Dec 2016	4
SSL Proxy woes Locked	Ben Steeples 27 Jul 2012	Robin Stark 22 Dec 2016	20
Permissions Issues Locked	Aretha Etienne 17 Nov 2016	Randy Thornton 22 Dec 2016	4
Gravatar Advisory: How to Protect Your Email Address and Identity Locked	Nadav Kavalerchik 9 Dec 2016	Nadav Kavalerchik 9 Dec 2016	0
Caching Locked	Aretha Etienne 7 Dec 2016	Aretha Etienne 7 Dec 2016	0

Previous
1
2
3
4
5 (current)
6
7
8
9
10
…
16
Next