Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1584 discussions
Discussion	Started by	Last post	Replies
Can't enable web services for authentication Locked	Brad Smith 1 Jun 2017	Dave Perry 20 Jul 2017	3
SQL-Injection Locked	Fabienne Neveu 14 Feb 2017	kim Rechter 19 Jul 2017	8
Default Password policies: Self enrolment vs group enrolment Locked	Deleted user 14 Jun 2017	Deleted user 10 Jul 2017	3
How do I remove "Forgotten your username or password?" in moodle 3.2 Locked	Obuntu Cracks 23 Apr 2017	Ambreen Kiran 7 Jul 2017	3
Moving to HTTPS everywhere Locked	Michael Aherne 16 May 2017	Susan Mangan 7 Jul 2017	6
is it possible that category administrator can upload new user and course Locked	rajani gupta 11 May 2017	Ambrish Tiwari 4 Jul 2017	2
Antivirus Locked	Ripa Desai 18 May 2017	Rahul Rai 3 Jul 2017	2
GeoLite Database Locked	Doug Moody 21 Jun 2017	Ken Task 21 Jun 2017	1
settings for multiple manager(admin) for each organization Locked	Anand Vadivelu 19 May 2017	gurpreet singh 20 Jun 2017	1
Moodle SSL Offloading Locked	Daniel Alves 9 Jun 2017	Daniel Alves 13 Jun 2017	5
create an option to prevent xss injection ? Locked	Julien Boulen 1 Jun 2017	Marina Glancy 6 Jun 2017	1
Security for SCORM files Locked	Peter Aherne 30 May 2017	Mathew Gancarz 31 May 2017	2
Security Issue in Moodle 3.2.2: Can you tell me what happened with my content as a Administrator ... Locked	Ricardo Rodriguez 17 May 2017	Emma Richardson 17 May 2017	1
Guide to ssl certificate https linux ubuntu apache Locked	Christian Kristiansen 1 May 2017	Ken Task 16 May 2017	10
Daniel Esterly - Is Moodle secure to use with Windows 10 Locked	Daniel Esterly 12 May 2017	John Okely 15 May 2017	1
settings required to do for running diff ministry sites on single moodle installation Locked	rajani gupta 10 May 2017	Emma Richardson 10 May 2017	1
Access to lesson activities Locked	Joe Chacha 6 May 2017	Joe Chacha 6 May 2017	0
Manager role with system role - only view site page forum, search for users too Locked	Usman Arshad 27 Apr 2017	Usman Arshad 27 Apr 2017	2
How to display home page for non-login user ? Locked	Imran Patel 17 Apr 2017	Jon Bolton 17 Apr 2017	2
Reviewing messages table for bullying incidents Locked	DR LMS 26 Mar 2017	Mike Hoddee 11 Apr 2017	1
security issue Locked	Anderson Hsu 28 Nov 2016	Mike Hoddee 11 Apr 2017	4
Site policy > empty frame Locked	Daniel S 9 Apr 2017	Ken Task 10 Apr 2017	4
Plugins security and privacy Locked	Thomas Barna 31 Mar 2017	Jon Bolton 31 Mar 2017	2
Recaptcha Locked	Miyone G 24 Feb 2017	Randy Thornton 28 Mar 2017	3
Applying patch to protect against CVE-2017-2641 Locked	B J 21 Mar 2017	Nadav Kavalerchik 25 Mar 2017	18
3.1.4 - new security Announcement: MDL-57597 and MDL-57596 competency Locked	Monica Franz 22 Mar 2017	Monica Franz 24 Mar 2017	7
What are the best practices to determine if site was affected by security vulnerability Locked	Rex Lorenzo 23 Mar 2017	Randy Thornton 24 Mar 2017	1
Folder Password in Moodle Locked	Yonten Jamtsho 17 Mar 2017	Mary Cooch 17 Mar 2017	1
Moodle not caching/Storing LDAP username and passwords Locked	RSA NOC 14 Mar 2017	RSA NOC 15 Mar 2017	7
Moodle acting as OAuth2 server Locked	Hille Hille 2 Mar 2017	Hille Hille 2 Mar 2017	0
Restrict Access to Categories By User Locked	William Workman 7 Jan 2016	John Provasnik 28 Feb 2017	5
Cloudflare Security Issue Locked	Matt Spurrier 25 Feb 2017	Randy Thornton 28 Feb 2017	1
How to restrict users who are not using office's computer? Locked	Fung Tony 10 Feb 2017	Jon Bolton 23 Feb 2017	3
Avoiding LDAP data in plain text when you check the source code from a browser Locked	Robespierre Galindo 16 Feb 2017	Randy Thornton 16 Feb 2017	3
task: download all submissions is possible even when you only are allowed to assess one Locked	Jeus Perez 9 Feb 2017	Dave Perry 13 Feb 2017	2
Redis Sessions Locked	John Rickard 10 Feb 2017	John Rickard 10 Feb 2017	0
Move to secure protocol (https) issues Locked	Wes Matchett 2 Feb 2017	Ken Task 8 Feb 2017	8
Can't change a password for the student Locked	Jesse Techno 3 Feb 2017	Jesse Techno 3 Feb 2017	2
PHPMailer vulnerability in no-reply address Locked	mimi nom 30 Jan 2017	mimi nom 31 Jan 2017	4
loginhttps true = too many redirects? Locked	Christos Savva 19 Jan 2017	Christos Savva 20 Jan 2017	8
[Security] How to protect source code and database from hosting company Locked	Hu La 9 Jan 2017	Dave Perry 16 Jan 2017	7
"Guest user has logged in" ? Locked	g k 7 Jul 2016	Ken Task 9 Jan 2017	2
[Security] Moodle showed all users to Sub Category Manager Locked	Hu La 7 Jan 2017	Emma Richardson 7 Jan 2017	1
Moodle 3.1.3: Website Adminstration Security Overview Locked	Monica Franz 5 Jan 2017	John Okely 6 Jan 2017	2
Fun times with Poisoned Cookies! Locked	Robin Stark 22 Dec 2016	Randy Thornton 23 Dec 2016	1
Limit number of ip adresses per user Locked	marwa bekrar 8 Dec 2016	Robin Stark 22 Dec 2016	4
SSL Proxy woes Locked	Ben Steeples 27 Jul 2012	Robin Stark 22 Dec 2016	20
Permissions Issues Locked	Aretha Etienne 17 Nov 2016	Randy Thornton 22 Dec 2016	4
Gravatar Advisory: How to Protect Your Email Address and Identity Locked	Nadav Kavalerchik 9 Dec 2016	Nadav Kavalerchik 9 Dec 2016	0
Caching Locked	Aretha Etienne 7 Dec 2016	Aretha Etienne 7 Dec 2016	0
How secure is using admin/tool/uploaduser/index.php Locked	callum Wood 5 Dec 2016	Matt Bury 6 Dec 2016	3
Hiding email addresses in Moodle 2.6 forums Locked	John Edmiston 9 Oct 2014	Randy Thornton 3 Dec 2016	3
Allow view-only access to user list Locked	Joe Behymer 15 Nov 2012	Randy Thornton 2 Dec 2016	5
"view courses without participation" - not wanted / and changed? Locked	Klaas Hobo 17 Nov 2016	Klaas Hobo 19 Nov 2016	5
help: how to get rid of these terrible infinite recaptcha loops Locked	Pieter van der Hijden 18 Nov 2016	Pieter van der Hijden 18 Nov 2016	0
Single sign in from a student registration portal Locked	Abdulrauf Yamta 17 Nov 2016	Christopher McCool 18 Nov 2016	1
Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 15 Nov 2016	10
Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 14 Nov 2016	2
Access to label's files prevented by user's rights? Locked	Philippe Decloitre 24 Jun 2015	T W 11 Nov 2016	2
I think our Moodle site just survived a serious HACK attempt Locked	RabNawaz Panhyar 20 Oct 2016	RabNawaz Panhyar 8 Nov 2016	8
MySQL / MariaDB / PerconaDB - Root Privilege Escalation Locked	Grant Mucha 4 Nov 2016	Grant Mucha 4 Nov 2016	0
How to make sure Accounts get not shared? Max 3 IPs for 1 user Locked	Sven Faltin 24 Oct 2016	James McLean 26 Oct 2016	1
Katharine Edson - How secure is to use Moodle? Locked	Katharine Edson 8 Oct 2016	Christopher McCool 22 Oct 2016	5
how to restrict domain Locked	m question 16 Oct 2016	Helen Foster 21 Oct 2016	3
Can I have moodle 2.9 onward function without a single cookie? Locked	Baljé Weber 17 Oct 2016	Baljé Weber 17 Oct 2016	0
Windows PowerShell of AD Users to JSON Endpoint Fails to Upload Data Locked	Tim West 17 Oct 2016	Tim West 17 Oct 2016	0
How to add/allow "unsecure" code examples as text in Moodle pages Locked	Til Edward 11 Oct 2016	Til Edward 15 Oct 2016	9
Moodle 2.9 apache can access moodle files Locked	Zola Anderson 15 Oct 2016	Tim Hunt 15 Oct 2016	1
Security Question Locked	Andrew Taylor 16 Jul 2014	Howard Miller 11 Oct 2016	20
Alternatives to reCaptcha Locked	Colin Fraser 21 Sep 2016	Rick Jerz 24 Sep 2016	3
How to fix a mix of secure and insecure content? Locked	Arturs Polis 6 Jun 2016	Luke Barone 24 Sep 2016	3
New Profile field not working as a course restriction Locked	Anne Sherman 14 Sep 2016	Helen Foster 15 Sep 2016	3
Hiding users in grade reports Locked	bart de bie 12 Sep 2016	Emma Richardson 13 Sep 2016	3
forgotten password stopped working with https Locked	Martin Millmore 13 Sep 2016	Martin Millmore 13 Sep 2016	2
My homepage (frontpage) before login is only showing the login module Locked	Stefan Stefansson 6 Sep 2016	Stefan Stefansson 6 Sep 2016	2
Secure Cookies Locked	Deleted user 1 Sep 2016	John Okely 2 Sep 2016	1
IP Blocker - help Locked	Paul Baumeister 20 Feb 2013	Ernani Veloso Freire 1 Sep 2016	16
dbuser hash for password in config.php? Locked	J C 19 Sep 2011	Wissam Nahas 31 Aug 2016	4
Autologin with the special account Locked	Grigorii Andreev 28 Aug 2016	Grigorii Andreev 28 Aug 2016	0
cross domain ajax in script Locked	Bradley Botkin 12 Aug 2016	Bradley Botkin 17 Aug 2016	5
Category Permissions and Restrictions Locked	David Van Thillo 17 Aug 2016	David Van Thillo 17 Aug 2016	0
Moodle should not force a password change Locked	Irma Boks - Eek 9 Aug 2016	Irma Boks - Eek 10 Aug 2016	6
Captcha alternatives? Locked	Tom Litchfield 24 Feb 2016	Visti Larsen 4 Aug 2016	7
Issues with a virus in Moodle 3.0.2+ Locked	Luis Pu 2 Aug 2016	Ken Task 3 Aug 2016	7
Read Only Site Locked	Kehinde Okesanjo 12 Sep 2011	Antonio Negro 30 Jul 2016	9
Httpoxy vulnerabilities in php addressed? Locked	Jerry Lau 28 Jul 2016	Ken Task 29 Jul 2016	1
Password Security in moodle 2.9 or greater Locked	Sanmeet Singh 19 Jul 2016	Sanmeet Singh 19 Jul 2016	4
SSL certificate issues Locked	raghav agarwal 30 Mar 2013	James McLean 19 Jul 2016	23
Restricting Access to URL in course Locked	philipp lesmana 14 Jul 2016	philipp lesmana 14 Jul 2016	0
Installing ssl certificates in moodle server Locked	Christine Mburu 4 Feb 2014	Linda Petty 13 Jul 2016	2
Server breached front-end - malicious files uploaded Locked	Michael Iscool 30 Jun 2016	Ken Task 8 Jul 2016	19
Should I use SSL for Login? Why not? Locked	Paul L 27 Jun 2014	Dave Perry 23 Jun 2016	8
Remove login link from pages or disable logging in for users Locked	Jordan Floyd 17 Mar 2011	Leticia Dark-rose 21 Jun 2016	4
setup https via F5 Locked	Jaifar Al Shizawi 13 Jun 2016	Bret Miller 13 Jun 2016	2
How to hide/disable courses and quiz? Locked	Lucilla Wang 31 May 2016	Lucilla Wang 6 Jun 2016	17
SECURITY WARNING! (moodledata) Locked	Can Yasa 2 Jun 2016	Can Yasa 2 Jun 2016	3
Making students invisible to each other. Locked	Shoned Jones 31 May 2016	Richard Oelmann 1 Jun 2016	2
Moodle Security Locked	Ben Keough 27 May 2016	James McLean 30 May 2016	5
Reset of admin password Locked	David Paige 2 Jun 2015	Ranil Peiris 26 May 2016	9
Google keyword in Japanese characters for my moodle site Locked	Milan Mihajlov 20 Apr 2016	Guillermo Madero 19 May 2016	11