Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3
4
5
6 (current)
7
8
9
10
…
16
Next

List of discussions. Showing 100 of 1534 discussions
Discussion	Started by	Last post	Replies
How secure is using admin/tool/uploaduser/index.php Locked	callum Wood 5 Dec 2016	Matt Bury 6 Dec 2016	3
Hiding email addresses in Moodle 2.6 forums Locked	John Edmiston 9 Oct 2014	Randy Thornton 3 Dec 2016	3
Allow view-only access to user list Locked	Joe Behymer 15 Nov 2012	Randy Thornton 2 Dec 2016	5
"view courses without participation" - not wanted / and changed? Locked	Klaas Hobo 17 Nov 2016	Klaas Hobo 19 Nov 2016	5
help: how to get rid of these terrible infinite recaptcha loops Locked	Pieter van der Hijden 18 Nov 2016	Pieter van der Hijden 18 Nov 2016	0
Single sign in from a student registration portal Locked	Abdulrauf Yamta 17 Nov 2016	Christopher McCool 18 Nov 2016	1
Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 15 Nov 2016	10
Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 14 Nov 2016	2
Access to label's files prevented by user's rights? Locked	Philippe Decloitre 24 Jun 2015	T W 11 Nov 2016	2
I think our Moodle site just survived a serious HACK attempt Locked	RabNawaz Panhyar 20 Oct 2016	RabNawaz Panhyar 8 Nov 2016	8
MySQL / MariaDB / PerconaDB - Root Privilege Escalation Locked	Grant Mucha 4 Nov 2016	Grant Mucha 4 Nov 2016	0
How to make sure Accounts get not shared? Max 3 IPs for 1 user Locked	Sven Faltin 24 Oct 2016	James McLean 26 Oct 2016	1
Katharine Edson - How secure is to use Moodle? Locked	Katharine Edson 8 Oct 2016	Christopher McCool 22 Oct 2016	5
how to restrict domain Locked	m question 16 Oct 2016	Helen Foster 21 Oct 2016	3
Can I have moodle 2.9 onward function without a single cookie? Locked	Baljé Weber 17 Oct 2016	Baljé Weber 17 Oct 2016	0
Windows PowerShell of AD Users to JSON Endpoint Fails to Upload Data Locked	Tim West 17 Oct 2016	Tim West 17 Oct 2016	0
How to add/allow "unsecure" code examples as text in Moodle pages Locked	Til Edward 11 Oct 2016	Til Edward 15 Oct 2016	9
Moodle 2.9 apache can access moodle files Locked	Zola Anderson 15 Oct 2016	Tim Hunt 15 Oct 2016	1
Security Question Locked	Andrew Taylor 16 Jul 2014	Howard Miller 11 Oct 2016	20
Alternatives to reCaptcha Locked	Colin Fraser 21 Sep 2016	Rick Jerz 24 Sep 2016	3
How to fix a mix of secure and insecure content? Locked	Arturs Polis 6 Jun 2016	Luke Barone 24 Sep 2016	3
New Profile field not working as a course restriction Locked	Anne Sherman 14 Sep 2016	Helen Foster 15 Sep 2016	3
Hiding users in grade reports Locked	bart de bie 12 Sep 2016	Emma Richardson 13 Sep 2016	3
forgotten password stopped working with https Locked	Martin Millmore 13 Sep 2016	Martin Millmore 13 Sep 2016	2
My homepage (frontpage) before login is only showing the login module Locked	Stefan Stefansson 6 Sep 2016	Stefan Stefansson 6 Sep 2016	2
Secure Cookies Locked	Deleted user 1 Sep 2016	John Okely 2 Sep 2016	1
IP Blocker - help Locked	Paul Baumeister 20 Feb 2013	Ernani Veloso Freire 1 Sep 2016	16
dbuser hash for password in config.php? Locked	J C 19 Sep 2011	Wissam Nahas 31 Aug 2016	4
Autologin with the special account Locked	Grigorii Andreev 28 Aug 2016	Grigorii Andreev 28 Aug 2016	0
cross domain ajax in script Locked	Bradley Botkin 12 Aug 2016	Bradley Botkin 17 Aug 2016	5
Category Permissions and Restrictions Locked	David Van Thillo 17 Aug 2016	David Van Thillo 17 Aug 2016	0
Moodle should not force a password change Locked	Irma Boks - Eek 9 Aug 2016	Irma Boks - Eek 10 Aug 2016	6
Captcha alternatives? Locked	Tom Litchfield 24 Feb 2016	Visti Larsen 4 Aug 2016	7
Issues with a virus in Moodle 3.0.2+ Locked	Luis Pu 2 Aug 2016	Ken Task 3 Aug 2016	7
Read Only Site Locked	Kehinde Okesanjo 12 Sep 2011	Antonio Negro 30 Jul 2016	9
Httpoxy vulnerabilities in php addressed? Locked	Jerry Lau 28 Jul 2016	Ken Task 29 Jul 2016	1
Password Security in moodle 2.9 or greater Locked	Sanmeet Singh 19 Jul 2016	Sanmeet Singh 19 Jul 2016	4
SSL certificate issues Locked	raghav agarwal 30 Mar 2013	James McLean 19 Jul 2016	23
Restricting Access to URL in course Locked	philipp lesmana 14 Jul 2016	philipp lesmana 14 Jul 2016	0
Installing ssl certificates in moodle server Locked	Christine Mburu 4 Feb 2014	Linda Petty 13 Jul 2016	2
Server breached front-end - malicious files uploaded Locked	Michael Iscool 30 Jun 2016	Ken Task 8 Jul 2016	19
Should I use SSL for Login? Why not? Locked	Paul L 27 Jun 2014	Dave Perry 23 Jun 2016	8
Remove login link from pages or disable logging in for users Locked	Jordan Floyd 17 Mar 2011	Leticia Dark-rose 21 Jun 2016	4
setup https via F5 Locked	Jaifar Al Shizawi 13 Jun 2016	Bret Miller 13 Jun 2016	2
How to hide/disable courses and quiz? Locked	Lucilla Wang 31 May 2016	Lucilla Wang 6 Jun 2016	17
SECURITY WARNING! (moodledata) Locked	Can Yasa 2 Jun 2016	Can Yasa 2 Jun 2016	3
Making students invisible to each other. Locked	Shoned Jones 31 May 2016	Richard Oelmann 1 Jun 2016	2
Moodle Security Locked	Ben Keough 27 May 2016	James McLean 30 May 2016	5
Reset of admin password Locked	David Paige 2 Jun 2015	Ranil Peiris 26 May 2016	9
Google keyword in Japanese characters for my moodle site Locked	Milan Mihajlov 20 Apr 2016	Guillermo Madero 19 May 2016	11
Security for self enrolment and enrolment keys Locked	Alice Constable 13 May 2016	Alice Constable 17 May 2016	2
Bots are knocking our guest door ? Locked	Antti Peltonen 17 May 2016	Antti Peltonen 17 May 2016	0
Assigning a password Locked	Íde O'Neill 14 May 2016	Emma Richardson 16 May 2016	2
Harold Nartey - Is Moodle Secure to Use? Locked	Harold Nartey 13 May 2016	Mike Churchward 13 May 2016	1
Virtual schools/courses hidden from other groups/cohorts? Locked	Dave S 12 May 2016	Dave S 12 May 2016	0
Limit the number of users into a group Locked	Paul Lemarchand 11 Apr 2016	Sebastian Wz 11 May 2016	1
Allow (Deny access) in Browse list of users Locked	Wes Sykes 13 Jul 2010	Blair F. 28 Apr 2016	4
After Upgrade to 3.0, SSL No Longer Working Locked	Greg Dietrich 27 Apr 2016	James McLean 27 Apr 2016	1
Secure PHP Configuration Settings for Moodle Locked	Calvin Bu 22 Apr 2016	Ken Task 26 Apr 2016	3
Comment request on vulnerability results Locked	Panagiotis Petasis 22 Apr 2016	Richard Oelmann 25 Apr 2016	7
Security overview, some questions and question on backup Locked	John Rambo 20 Apr 2016	Emma Richardson 20 Apr 2016	4
Customize user privacy - on user-level Locked	Marjan Milošević 24 Jul 2015	Devon Ritter 14 Apr 2016	1
Possible Exploit - Accessing the Main Admins account through the CLI Locked	Alex Legg 13 Apr 2016	Alex Legg 13 Apr 2016	6
Missing Secure Attribute in Encrypted Session (SSL) Cookie Locked	Vinod Kumar 13 Apr 2016	Vinod Kumar 13 Apr 2016	2
Additional security measures for Moodle Locked	John Rambo 1 Apr 2016	Matt Bury 13 Apr 2016	8
Visitors can access lesson video by copying link Locked	prashant gupta 8 Dec 2015	Guillermo Madero 12 Apr 2016	9
"Invalid Login" if country code is lowercase Locked	Derek Chaplin 9 Apr 2016	Derek Chaplin 9 Apr 2016	0
Is it possible to edit the Logs and specially the admin Logs Locked	Osama Hasan 6 Apr 2016	Richard Oelmann 7 Apr 2016	2
Moodle does not restrict file types for uploads??? Security Risk??? Locked	Rob Barnett 18 Sep 2009	javier D 30 Mar 2016	17
How do you secure email addresses? Locked	Paul Wakelam 10 Dec 2015	Richard Lisle 23 Mar 2016	10
Hide courses and categories to specific role Locked	Renato Marchesani 17 Mar 2016	Howard Miller 19 Mar 2016	3
access to server lost Locked	Hicham Doumali 9 Mar 2016	Hicham Doumali 18 Mar 2016	3
user id '0' is changing passwords Locked	heli g 8 Feb 2016	Emma Richardson 17 Mar 2016	2
Password Encryption MD5 plain text Locked	Rupesh Kumar 20 Nov 2015	Tim Hunt 11 Mar 2016	4
xss risks - Advice please Locked	Marie Waterhouse 4 Mar 2016	Helen Foster 10 Mar 2016	8
Log in location lock down Locked	Mitchell Gregory 23 Feb 2016	Mitchell Gregory 23 Feb 2016	5
Access Logs Locked	John Rebtho 1 Jun 2009	Sudeep Nayak 22 Feb 2016	3
Alias name - workaround Locked	Muse 79 20 Feb 2016	Just H 21 Feb 2016	3
Is Moodle ok on GitHub? Locked	Leticia Dark-rose 11 Feb 2016	Evan Donovan 20 Feb 2016	9
Database credentials can they be seen? Locked	Heather P 12 Feb 2016	Heather P 17 Feb 2016	4
Maximum Time per Day Locked	Seth Mengal 29 Jul 2013	Howard Miller 16 Feb 2016	12
IPV6 address in IP Blocker Locked	rabin sk 12 Feb 2016	rabin sk 12 Feb 2016	0
Move Moodle Config Outside of Web Root Locked	Lewis Hackfath 9 Feb 2016	James McLean 10 Feb 2016	12
moodle 2.4.3 : script injection in header Locked	razer raz 9 Feb 2016	razer raz 10 Feb 2016	8
MySQL SSL Connection? Locked	William Voyek 11 Aug 2009	Mohammed Mohammed 7 Feb 2016	4
Moodle SSO using LDAP Locked	Trayton Mitchell 5 Feb 2016	Visvanath Ratnaweera 6 Feb 2016	5
Blocking access to Users from outside the country Locked	david english 24 Jan 2016	Matt Bury 25 Jan 2016	12
Moodledata ... Moodle Code ... htaccess-dist.txt files Locked	Ken Task 25 Jan 2016	Ken Task 25 Jan 2016	0
Moodle not displaying errors Locked	Tyler Whiteley 15 Jan 2016	Richard Oelmann 24 Jan 2016	3
CSP Locked	Martin Greenaway 17 Jun 2015	Martin Greenaway 23 Jan 2016	2
How to force users password change weekly? Locked	Mario Gonzalez 7 Sep 2010	Clara MG 12 Jan 2016	5
Moodle platform and security. Making the move. Locked	Shane Mundee 6 Jan 2016	Bret Miller 12 Jan 2016	4
Advice please! Is Moodle safe? Locked	jesse magees 30 Apr 2015	Visvanath Ratnaweera 7 Jan 2016	16
Authentication problem Locked	eduardo moisa 7 Jan 2016	eduardo moisa 7 Jan 2016	1
prevent login from the same ip address for a time Locked	Mohammed awad 17 Dec 2015	Visvanath Ratnaweera 5 Jan 2016	13
About Drupal + Moodle integration Locked	Raviteja Yarlagadda 16 Dec 2015	Ken Task 16 Dec 2015	1
IP addresses used by Moodle's mail servers Locked	Dan OBrien 16 Dec 2015	Dan OBrien 16 Dec 2015	6
How to see who changed letter grades site-wide? Locked	Juan F 17 Nov 2015	John Provasnik 7 Dec 2015	3
Restricting guests from viewing the category structure and non guest-enabled courses Locked	Deleted user 4 Dec 2015	Deleted user 4 Dec 2015	0
Using "http head method" in Moodle Locked	Naaman Fallouh 2 Dec 2015	Naaman Fallouh 2 Dec 2015	0

Previous
1
2
3
4
5
6 (current)
7
8
9
10
…
16
Next