Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
16
Next

List of discussions. Showing 100 of 1525 discussions
Discussion	Started by	Last post	Replies
Block Access to Courses list Locked	Andrew Milner 28 Oct 2015	Andrew Milner 28 Oct 2015	0
Moodle crashes when students press F5 (refresh) continuously Locked	Graciano Torrão 22 Oct 2015	Dan Marsden 28 Oct 2015	9
User database Locked	Pal Kerecsenyi 26 Oct 2015	Richard Oelmann 27 Oct 2015	3
How to check if a file was deleted and by whom? Locked	Miguel Da Silva 25 Oct 2015	Miguel Da Silva 26 Oct 2015	2
SMTP password encryption Locked	Refi Shahul 25 Oct 2015	Refi Shahul 25 Oct 2015	2
SSL causing Backup problem Locked	René Breedveld 12 Oct 2015	René Breedveld 20 Oct 2015	1
security test Locked	maggie jelli 19 Oct 2015	Simon Rediss-Whitfield 19 Oct 2015	1
accessing moodle from another site without logging in again Locked	tim lambert 15 Sep 2015	Jon Bolton 16 Oct 2015	1
all the site notes are visible for the teacher Locked	Isaac Marco Blancas 2 Oct 2015	Jon Bolton 16 Oct 2015	1
validation of username length Locked	Irith Herman 12 Oct 2015	Irith Herman 12 Oct 2015	0
login issue Locked	maggie jelli 5 Oct 2015	Just H 11 Oct 2015	10
Administrator Logging??? Locked	Vincent Gullotta 2 Oct 2015	Chris Wharton 5 Oct 2015	3
Redirect error after enforcing https Locked	Oliver W 4 Oct 2015	Oliver W 4 Oct 2015	0
Passwords Moodle v2.8 Locked	pat webber 2 Oct 2015	Helen Foster 2 Oct 2015	1
Getting user passwords Locked	Chardelle Busch 22 Aug 2015	Vicke Denniston 2 Oct 2015	3
Manager role not function as expected Locked	Trace James 24 Sep 2015	Trace James 29 Sep 2015	14
Preventing download of audio files Locked	Anand Anand 4 Sep 2012	Roxana Cabrera 25 Sep 2015	2
Access Moodle webservice using SAML Token Locked	Nitin Khubani 16 Sep 2015	Nitin Khubani 17 Sep 2015	1
Moving whole site from http to https on LAMP virtual host Locked	Peter DeBruyn 15 Sep 2015	Peter DeBruyn 17 Sep 2015	4
Open Access / Student User access Locked	Catherine Seeds 7 Sep 2015	Emma Richardson 7 Sep 2015	3
prevent guest from seeing course summary Locked	Scott Brim 7 Sep 2015	Scott Brim 7 Sep 2015	1
CSRF on moodle pages Locked	Naaman Fallouh 6 Sep 2015	Tim Hunt 7 Sep 2015	3
Pass through single-sigon authentication Locked	Bryan Ward 5 Sep 2015	Bryan Ward 5 Sep 2015	0
Removing the navigation block from Moodle 2.5? Locked	Andrew Leer 14 Aug 2015	Sam Alken 31 Aug 2015	1
Force Front page sign in Locked	Edwin Cruz 31 Jul 2015	Sam Alken 31 Aug 2015	2
registration approval Locked	Corey Whatever 13 Jul 2009	Michael Milette 26 Aug 2015	5
Pre-Req Course Restrictions - Possible? Locked	Beth Haggenjos 6 Aug 2015	Dave Perry 17 Aug 2015	5
Session and Cookie Locked	Vinod Kumar 7 May 2015	Daniel Paulo 4 Aug 2015	1
Maintenance Mode Locked	Zee Sef 3 Aug 2015	Ken Task 3 Aug 2015	1
SQL INJECTION javascript-static.js Locked	Daniel Bruno 16 Jul 2015	Tim Hunt 28 Jul 2015	1
Input Validation-File Upload vulnerability Locked	Rogelio Jr. Dela Cruz 3 Jul 2015	James McLean 23 Jul 2015	4
New User Email Address Message Locked	Lauren Ziegler 16 Jul 2015	Lauren Ziegler 16 Jul 2015	2
Admin has access to all passwords Help. Locked	Darrell Rea 2 Jul 2015	Lazy Django 13 Jul 2015	9
Adding SSL Certificate Seal in Moodle-URL Locked	Andre Ferreira 10 Jul 2015	Andre Ferreira 11 Jul 2015	2
How to download the course content using moodle web service Locked	Sameer Kshirsagar 10 Jul 2015	Sameer Kshirsagar 10 Jul 2015	0
No CAPTCHA reCAPTCHA Moodle Locked	Bruno Nogueira 2 Jul 2015	John Okely 7 Jul 2015	3
The Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext (BREACH) Locked	Joshua Devey 24 Jun 2015	Damyon Wiese 25 Jun 2015	2
Security Warnings! Locked	Eliecer Acevedo Patiño 23 Jun 2015	Eliecer Acevedo Patiño 23 Jun 2015	0
Is it safe to create system roles to restrict the access to blocks? Locked	Federica Marra 19 Jun 2015	Tim Hunt 19 Jun 2015	1
moodle 2.8 security Locked	myelearning system 19 Jun 2015	Tim Hunt 19 Jun 2015	1
Your thoughts on this hypothetical situation (how to prevent and identify) Locked	Joseph Thibault 20 Sep 2014	Dan Marsden 18 Jun 2015	8
users imort and export Locked	amit prajapati 15 Jun 2015	Emma Richardson 17 Jun 2015	5
Removing Timestamps in Tests and Assignments Locked	Sebastian H. 17 Jun 2015	Sebastian H. 17 Jun 2015	0
SSL is not ok with moodle Locked	stephane ngov 16 Jun 2015	Ken Task 16 Jun 2015	2
Keeping Members of Paid Courses from Sharing Login Credentials Locked	joseph zabrosky 11 Jun 2015	joseph zabrosky 13 Jun 2015	10
Multiple password for Quiz Locked	vancool black 7 Jun 2015	Rick Jerz 7 Jun 2015	1
Web API encryption to push/pull data Locked	Gordon McLeod 4 Jun 2015	Gordon McLeod 5 Jun 2015	3
Moodlebot...What is it!? Locked	Sherry Stafford 3 Jun 2015	Sherry Stafford 3 Jun 2015	2
Self Enrolment - enrolment key issue Locked	Katrina Nicholson 6 Mar 2015	Albert Ramsbottom 2 Jun 2015	6
setting the allowed mimetypes for file upload as a security measure Locked	Di Juwel 15 Jan 2015	Howard Miller 26 May 2015	2
Advice on Roles / Permissions for a hierarchichal structure Locked	Phil Carlson 21 May 2015	Phil Carlson 21 May 2015	0
Multiple login Locked	Suleiman Umar 13 May 2015	Suleiman Umar 18 May 2015	6
Sever Load and Crash Locked	Paul P. 14 May 2015	Stephen Bourget 15 May 2015	8
Browser blocks java script and css on https login page Locked	moodle learner 14 May 2015	James McLean 15 May 2015	1
SSO - Shared Cookie with Wordpress Locked	Don Schwartz 13 May 2015	Howard Miller 14 May 2015	1
Getting weird anonymous account created in one of our Moodle sites Locked	François Lizotte 12 Jun 2013	Silvia Camacho 13 May 2015	3
are security issues pathes already included in the next vessions of moodle? Locked	Di Juwel 6 May 2015	Richard Oelmann 12 May 2015	5
IP address Locked	heather brown 6 May 2015	Visvanath Ratnaweera 11 May 2015	7
Weak SSL Cipher Suites are Supported - Version-1.9.5 Locked	Vinod Kumar 27 Apr 2015	Vinod Kumar 10 May 2015	26
HTTP to HTTPS converter for external content Locked	John Okely 5 Aug 2014	John Okely 4 May 2015	14
Session Identifier Not Updated ?? Security Issue? Locked	Richard Wallace 4 Aug 2009	Howard Miller 3 May 2015	13
quiz records error? Locked	Tzafi Z 30 Apr 2015	Richard Oelmann 30 Apr 2015	1
Wanted: reference on stability/security of Moodle Locked	Derek Chirnside 24 Apr 2015	Derek Chirnside 24 Apr 2015	0
Appearance Tab access permission Locked	Hossam eldin Reda Ibrahim 20 Apr 2015	Hossam eldin Reda Ibrahim 20 Apr 2015	0
What are your major privacy concerns ? Locked	Ankit Agarwal 17 Apr 2015	Visvanath Ratnaweera 17 Apr 2015	1
2.7 brute force attack - how to stop Locked	Ian L 1 Dec 2014	Eduardo Kraus 12 Apr 2015	4
Student Privacy Locked	David Kirk 8 Apr 2015	Hartmut Scherer 8 Apr 2015	2
Everyone has full access to my site since a crash last week - permissions not respected Locked	Sébastien Petit 1 Apr 2015	Sébastien Petit 1 Apr 2015	1
Allowing students anonymous access to others work Locked	Velson Horie 1 Apr 2015	Velson Horie 1 Apr 2015	0
File type extensions Locked	Soha Gamal 26 Mar 2015	Soha Gamal 26 Mar 2015	0
Google reCaptcha not working Locked	Mark Whalley 26 Mar 2015	Mark Whalley 26 Mar 2015	0
How to protect copyright content (videos): your ideas? Locked	Chris Pekar 6 Mar 2015	Ray Morris 26 Mar 2015	1
Restrict usernames to be only numeric characters Locked	Tinashe Nyambudu 23 Mar 2015	Tinashe Nyambudu 24 Mar 2015	2
CAS and Login As Functionality Locked	Benjamin Derry 14 Nov 2014	Matt Rice 23 Mar 2015	1
API creation of users - need to force password change Locked	Christopher Molnar 20 Mar 2015	James McLean 20 Mar 2015	1
insert JavaScript via ATO Locked	Shimon Nagar 15 Mar 2015	Shimon Nagar 15 Mar 2015	0
Sharing RSS links Locked	mandy honeyman 27 Feb 2015	jason wilson 6 Mar 2015	1
Create a moodle failover system Locked	Chris Pekar 6 Mar 2015	Chris Pekar 6 Mar 2015	2
Best way of securely separating different clients Locked	Chris Webb 22 Oct 2014	Robin Woodley 2 Mar 2015	1
How to fix XSS trusted users problem Locked	Monico Briseño 7 Feb 2009	Tim Hunt 27 Feb 2015	11
Cross-Site Request Forgery (CSRF) in Moodle default pages - help Locked	Vincent Gullotta 21 Feb 2015	James McLean 25 Feb 2015	15
Setting up a consumer key on a moodle site Locked	David Price 22 Feb 2015	David Price 22 Feb 2015	0
security overview: default role for all users not change Locked	sonia sonia 8 Jan 2015	Mahmut TEKER 17 Feb 2015	1
Moodle URL Locked	Sara MAhmoud 16 Feb 2015	Sara MAhmoud 16 Feb 2015	2
cron url security Locked	H D 12 Feb 2015	Damyon Wiese 12 Feb 2015	1
If you believe technologies will protect your privacy, think twice! Locked	Visvanath Ratnaweera 10 Feb 2015	Visvanath Ratnaweera 12 Feb 2015	2
Moodle Security Plugin Locked	Erwin Ancheta 10 Feb 2015	Erwin Ancheta 11 Feb 2015	2
Cloudflare Locked	James Easton 27 Jan 2015	Visvanath Ratnaweera 10 Feb 2015	6
2.7.1 hacked Locked	Wendi Daniels 6 Feb 2015	Visvanath Ratnaweera 10 Feb 2015	12
2.7.1 .htaccess files Locked	Wendi Daniels 9 Feb 2015	Wendi Daniels 9 Feb 2015	0
2.7.1 Permissions Locked	Wendi Daniels 8 Feb 2015	Wendi Daniels 9 Feb 2015	1
Hide courses from groups of users Locked	Duanne Scheepers 2 Feb 2010	Rose Phoey 6 Feb 2015	4
Authentication Kerberos Locked	Marek Grolms 5 Feb 2015	Marek Grolms 6 Feb 2015	2
Moodle and SSL: full site SSL and registration form only SSL issues Locked	Marek Kancelarek 4 Feb 2015	Marek Kancelarek 4 Feb 2015	1
Re: Spammers Using Self Registration Locked	emmanuel oertle 25 Jan 2015	Chris Wharton 26 Jan 2015	4
Automatic https: redirection Locked	Sali Kaceli 24 Jan 2015	Bret Miller 24 Jan 2015	1
Moodle created passwords made easier Locked	Tom Wootton 17 Jan 2015	Tom Wootton 18 Jan 2015	2
Hide email address by default Locked	Martin O'Mahony 18 Feb 2010	Daniel meanock 17 Jan 2015	3
Some students unable to login. Error "...with ID2." Locked	Fred Frazelle 15 Jan 2015	Fred Frazelle 15 Jan 2015	2
Restricting login through portal only Locked	Joan Van Duzer 13 Jan 2015	Dave Perry 13 Jan 2015	1

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
16
Next