Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
16
Next

List of discussions. Showing 100 of 1556 discussions
Discussion	Started by	Last post	Replies
Is Moodle ok on GitHub? Locked	Leticia Dark-rose 11 Feb 2016	Evan Donovan 20 Feb 2016	9
Database credentials can they be seen? Locked	Heather P 12 Feb 2016	Heather P 17 Feb 2016	4
Maximum Time per Day Locked	Seth Mengal 29 Jul 2013	Howard Miller 16 Feb 2016	12
IPV6 address in IP Blocker Locked	rabin sk 12 Feb 2016	rabin sk 12 Feb 2016	0
Move Moodle Config Outside of Web Root Locked	Lewis Hackfath 9 Feb 2016	James McLean 10 Feb 2016	12
moodle 2.4.3 : script injection in header Locked	razer raz 9 Feb 2016	razer raz 10 Feb 2016	8
MySQL SSL Connection? Locked	William Voyek 11 Aug 2009	Mohammed Mohammed 7 Feb 2016	4
Moodle SSO using LDAP Locked	Trayton Mitchell 5 Feb 2016	Visvanath Ratnaweera 6 Feb 2016	5
Blocking access to Users from outside the country Locked	david english 24 Jan 2016	Matt Bury 25 Jan 2016	12
Moodledata ... Moodle Code ... htaccess-dist.txt files Locked	Ken Task 25 Jan 2016	Ken Task 25 Jan 2016	0
Moodle not displaying errors Locked	Tyler Whiteley 15 Jan 2016	Richard Oelmann 24 Jan 2016	3
CSP Locked	Martin Greenaway 17 Jun 2015	Martin Greenaway 23 Jan 2016	2
How to force users password change weekly? Locked	Mario Gonzalez 7 Sep 2010	Clara MG 12 Jan 2016	5
Moodle platform and security. Making the move. Locked	Shane Mundee 6 Jan 2016	Bret Miller 12 Jan 2016	4
Advice please! Is Moodle safe? Locked	jesse magees 30 Apr 2015	Visvanath Ratnaweera 7 Jan 2016	16
Authentication problem Locked	eduardo moisa 7 Jan 2016	eduardo moisa 7 Jan 2016	1
prevent login from the same ip address for a time Locked	Mohammed awad 17 Dec 2015	Visvanath Ratnaweera 5 Jan 2016	13
About Drupal + Moodle integration Locked	Raviteja Yarlagadda 16 Dec 2015	Ken Task 16 Dec 2015	1
IP addresses used by Moodle's mail servers Locked	Dan OBrien 16 Dec 2015	Dan OBrien 16 Dec 2015	6
How to see who changed letter grades site-wide? Locked	Juan F 17 Nov 2015	John Provasnik 7 Dec 2015	3
Restricting guests from viewing the category structure and non guest-enabled courses Locked	Deleted user 4 Dec 2015	Deleted user 4 Dec 2015	0
Using "http head method" in Moodle Locked	Naaman Fallouh 2 Dec 2015	Naaman Fallouh 2 Dec 2015	0
Topic Hidden and activity show, feature or what? Locked	António Godinho 1 Dec 2015	António Godinho 2 Dec 2015	4
Spam Filter? Locked	Alex Vanden Bosch 30 Nov 2015	Marcus Green 1 Dec 2015	2
can my activity be seen? Locked	murdoc niccals 29 Nov 2015	Just H 29 Nov 2015	6
2.9+ moodle - recaptcha suddenly stopped working Locked	ajeet Singh 1 Nov 2015	John Okely 17 Nov 2015	8
Insecure dataroot (yet again) Locked	Visvanath Ratnaweera 14 Nov 2015	Visvanath Ratnaweera 15 Nov 2015	13
Warning about the config.php file Locked	mimi nom 9 Nov 2015	Visvanath Ratnaweera 14 Nov 2015	5
Moodle session tickets not expiring when closing the browser Locked	Shaun Conway 9 Oct 2015	Simon Rediss-Whitfield 3 Nov 2015	3
reCAPTCHA is not working Locked	Pablo Española 23 Jan 2014	ajeet Singh 2 Nov 2015	2
Security recovery plan Locked	dani dani 29 Oct 2015	Matt Bury 29 Oct 2015	2
Block Access to Courses list Locked	Andrew Milner 28 Oct 2015	Andrew Milner 28 Oct 2015	0
Moodle crashes when students press F5 (refresh) continuously Locked	Graciano Torrão 22 Oct 2015	Dan Marsden 28 Oct 2015	9
User database Locked	Pal Kerecsenyi 26 Oct 2015	Richard Oelmann 27 Oct 2015	3
How to check if a file was deleted and by whom? Locked	Miguel Da Silva 25 Oct 2015	Miguel Da Silva 26 Oct 2015	2
SMTP password encryption Locked	Refi Shahul 25 Oct 2015	Refi Shahul 25 Oct 2015	2
SSL causing Backup problem Locked	René Breedveld 12 Oct 2015	René Breedveld 20 Oct 2015	1
security test Locked	maggie jelli 19 Oct 2015	Simon Rediss-Whitfield 19 Oct 2015	1
accessing moodle from another site without logging in again Locked	tim lambert 15 Sep 2015	Jon Bolton 16 Oct 2015	1
all the site notes are visible for the teacher Locked	Isaac Marco Blancas 2 Oct 2015	Jon Bolton 16 Oct 2015	1
validation of username length Locked	Irith Herman 12 Oct 2015	Irith Herman 12 Oct 2015	0
login issue Locked	maggie jelli 5 Oct 2015	Just H 11 Oct 2015	10
Administrator Logging??? Locked	Vincent Gullotta 2 Oct 2015	Chris Wharton 5 Oct 2015	3
Redirect error after enforcing https Locked	Oliver W 4 Oct 2015	Oliver W 4 Oct 2015	0
Passwords Moodle v2.8 Locked	pat webber 2 Oct 2015	Helen Foster 2 Oct 2015	1
Getting user passwords Locked	Chardelle Busch 22 Aug 2015	Vicke Denniston 2 Oct 2015	3
Manager role not function as expected Locked	Trace James 24 Sep 2015	Trace James 29 Sep 2015	14
Preventing download of audio files Locked	Anand Anand 4 Sep 2012	Roxana Cabrera 25 Sep 2015	2
Access Moodle webservice using SAML Token Locked	Nitin Khubani 16 Sep 2015	Nitin Khubani 17 Sep 2015	1
Moving whole site from http to https on LAMP virtual host Locked	Peter DeBruyn 15 Sep 2015	Peter DeBruyn 17 Sep 2015	4
Open Access / Student User access Locked	Catherine Seeds 7 Sep 2015	Emma Richardson 7 Sep 2015	3
prevent guest from seeing course summary Locked	Scott Brim 7 Sep 2015	Scott Brim 7 Sep 2015	1
CSRF on moodle pages Locked	Naaman Fallouh 6 Sep 2015	Tim Hunt 7 Sep 2015	3
Pass through single-sigon authentication Locked	Bryan Ward 5 Sep 2015	Bryan Ward 5 Sep 2015	0
Removing the navigation block from Moodle 2.5? Locked	Andrew Leer 14 Aug 2015	Sam Alken 31 Aug 2015	1
Force Front page sign in Locked	Edwin Cruz 31 Jul 2015	Sam Alken 31 Aug 2015	2
registration approval Locked	Corey Whatever 13 Jul 2009	Michael Milette 26 Aug 2015	5
Pre-Req Course Restrictions - Possible? Locked	Beth Haggenjos 6 Aug 2015	Dave Perry 17 Aug 2015	5
Session and Cookie Locked	Vinod Kumar 7 May 2015	Daniel Paulo 4 Aug 2015	1
Maintenance Mode Locked	Zee Sef 3 Aug 2015	Ken Task 3 Aug 2015	1
SQL INJECTION javascript-static.js Locked	Daniel Bruno 16 Jul 2015	Tim Hunt 28 Jul 2015	1
Input Validation-File Upload vulnerability Locked	Rogelio Jr. Dela Cruz 3 Jul 2015	James McLean 23 Jul 2015	4
New User Email Address Message Locked	Lauren Ziegler 16 Jul 2015	Lauren Ziegler 16 Jul 2015	2
Admin has access to all passwords Help. Locked	Darrell Rea 2 Jul 2015	Lazy Django 13 Jul 2015	9
Adding SSL Certificate Seal in Moodle-URL Locked	Andre Ferreira 10 Jul 2015	Andre Ferreira 11 Jul 2015	2
How to download the course content using moodle web service Locked	Sameer Kshirsagar 10 Jul 2015	Sameer Kshirsagar 10 Jul 2015	0
No CAPTCHA reCAPTCHA Moodle Locked	Bruno Nogueira 2 Jul 2015	John Okely 7 Jul 2015	3
The Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext (BREACH) Locked	Joshua Devey 24 Jun 2015	Damyon Wiese 25 Jun 2015	2
Security Warnings! Locked	Eliecer Acevedo Patiño 23 Jun 2015	Eliecer Acevedo Patiño 23 Jun 2015	0
Is it safe to create system roles to restrict the access to blocks? Locked	Federica Marra 19 Jun 2015	Tim Hunt 19 Jun 2015	1
moodle 2.8 security Locked	myelearning system 19 Jun 2015	Tim Hunt 19 Jun 2015	1
Your thoughts on this hypothetical situation (how to prevent and identify) Locked	Joseph Thibault 20 Sep 2014	Dan Marsden 18 Jun 2015	8
users imort and export Locked	amit prajapati 15 Jun 2015	Emma Richardson 17 Jun 2015	5
Removing Timestamps in Tests and Assignments Locked	Sebastian H. 17 Jun 2015	Sebastian H. 17 Jun 2015	0
SSL is not ok with moodle Locked	stephane ngov 16 Jun 2015	Ken Task 16 Jun 2015	2
Keeping Members of Paid Courses from Sharing Login Credentials Locked	joseph zabrosky 11 Jun 2015	joseph zabrosky 13 Jun 2015	10
Multiple password for Quiz Locked	vancool black 7 Jun 2015	Rick Jerz 7 Jun 2015	1
Web API encryption to push/pull data Locked	Gordon McLeod 4 Jun 2015	Gordon McLeod 5 Jun 2015	3
Moodlebot...What is it!? Locked	Sherry Stafford 3 Jun 2015	Sherry Stafford 3 Jun 2015	2
Self Enrolment - enrolment key issue Locked	Katrina Nicholson 6 Mar 2015	Albert Ramsbottom 2 Jun 2015	6
setting the allowed mimetypes for file upload as a security measure Locked	Di Juwel 15 Jan 2015	Howard Miller 26 May 2015	2
Advice on Roles / Permissions for a hierarchichal structure Locked	Phil Carlson 21 May 2015	Phil Carlson 21 May 2015	0
Multiple login Locked	Suleiman Umar 13 May 2015	Suleiman Umar 18 May 2015	6
Sever Load and Crash Locked	Paul P. 14 May 2015	Stephen Bourget 15 May 2015	8
Browser blocks java script and css on https login page Locked	moodle learner 14 May 2015	James McLean 15 May 2015	1
SSO - Shared Cookie with Wordpress Locked	Don Schwartz 13 May 2015	Howard Miller 14 May 2015	1
Getting weird anonymous account created in one of our Moodle sites Locked	François Lizotte 12 Jun 2013	Silvia Camacho 13 May 2015	3
are security issues pathes already included in the next vessions of moodle? Locked	Di Juwel 6 May 2015	Richard Oelmann 12 May 2015	5
IP address Locked	heather brown 6 May 2015	Visvanath Ratnaweera 11 May 2015	7
Weak SSL Cipher Suites are Supported - Version-1.9.5 Locked	Vinod Kumar 27 Apr 2015	Vinod Kumar 10 May 2015	26
HTTP to HTTPS converter for external content Locked	John Okely 5 Aug 2014	John Okely 4 May 2015	14
Session Identifier Not Updated ?? Security Issue? Locked	Richard Wallace 4 Aug 2009	Howard Miller 3 May 2015	13
quiz records error? Locked	Tzafi Z 30 Apr 2015	Richard Oelmann 30 Apr 2015	1
Wanted: reference on stability/security of Moodle Locked	Derek Chirnside 24 Apr 2015	Derek Chirnside 24 Apr 2015	0
Appearance Tab access permission Locked	Hossam eldin Reda Ibrahim 20 Apr 2015	Hossam eldin Reda Ibrahim 20 Apr 2015	0
What are your major privacy concerns ? Locked	Ankit Agarwal 17 Apr 2015	Visvanath Ratnaweera 17 Apr 2015	1
2.7 brute force attack - how to stop Locked	Ian L 1 Dec 2014	Eduardo Kraus 12 Apr 2015	4
Student Privacy Locked	David Kirk 8 Apr 2015	Hartmut Scherer 8 Apr 2015	2
Everyone has full access to my site since a crash last week - permissions not respected Locked	Sébastien Petit 1 Apr 2015	Sébastien Petit 1 Apr 2015	1
Allowing students anonymous access to others work Locked	Velson Horie 1 Apr 2015	Velson Horie 1 Apr 2015	0

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
16
Next