Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
15
Next

List of discussions. Showing 100 of 1479 discussions
Discussion	Started by	Last post	Replies
Web API encryption to push/pull data Locked	Gordon McLeod 4 Jun 2015	Gordon McLeod 5 Jun 2015	3
Moodlebot...What is it!? Locked	Sherry Stafford 3 Jun 2015	Sherry Stafford 3 Jun 2015	2
Self Enrolment - enrolment key issue Locked	Katrina Nicholson 6 Mar 2015	Albert Ramsbottom 2 Jun 2015	6
setting the allowed mimetypes for file upload as a security measure Locked	Di Juwel 15 Jan 2015	Howard Miller 26 May 2015	2
Advice on Roles / Permissions for a hierarchichal structure Locked	Phil Carlson 21 May 2015	Phil Carlson 21 May 2015	0
Multiple login Locked	Suleiman Umar 13 May 2015	Suleiman Umar 18 May 2015	6
Sever Load and Crash Locked	Paul P. 14 May 2015	Stephen Bourget 15 May 2015	8
Browser blocks java script and css on https login page Locked	moodle learner 14 May 2015	James McLean 15 May 2015	1
SSO - Shared Cookie with Wordpress Locked	Don Schwartz 13 May 2015	Howard Miller 14 May 2015	1
Getting weird anonymous account created in one of our Moodle sites Locked	François Lizotte 12 Jun 2013	Silvia Camacho 13 May 2015	3
are security issues pathes already included in the next vessions of moodle? Locked	Di Juwel 6 May 2015	Richard Oelmann 12 May 2015	5
IP address Locked	heather brown 6 May 2015	Visvanath Ratnaweera 11 May 2015	7
Weak SSL Cipher Suites are Supported - Version-1.9.5 Locked	Vinod Kumar 27 Apr 2015	Vinod Kumar 10 May 2015	26
HTTP to HTTPS converter for external content Locked	John Okely 5 Aug 2014	John Okely 4 May 2015	14
Session Identifier Not Updated ?? Security Issue? Locked	Richard Wallace 4 Aug 2009	Howard Miller 3 May 2015	13
quiz records error? Locked	Tzafi Z 30 Apr 2015	Richard Oelmann 30 Apr 2015	1
Wanted: reference on stability/security of Moodle Locked	Derek Chirnside 24 Apr 2015	Derek Chirnside 24 Apr 2015	0
Appearance Tab access permission Locked	Hossam eldin Reda Ibrahim 20 Apr 2015	Hossam eldin Reda Ibrahim 20 Apr 2015	0
What are your major privacy concerns ? Locked	Ankit Agarwal 17 Apr 2015	Visvanath Ratnaweera 17 Apr 2015	1
2.7 brute force attack - how to stop Locked	Ian L 1 Dec 2014	Eduardo Kraus 12 Apr 2015	4
Student Privacy Locked	David Kirk 8 Apr 2015	Hartmut Scherer 8 Apr 2015	2
Everyone has full access to my site since a crash last week - permissions not respected Locked	Sébastien Petit 1 Apr 2015	Sébastien Petit 1 Apr 2015	1
Allowing students anonymous access to others work Locked	Velson Horie 1 Apr 2015	Velson Horie 1 Apr 2015	0
File type extensions Locked	Soha Gamal 26 Mar 2015	Soha Gamal 26 Mar 2015	0
Google reCaptcha not working Locked	Mark Whalley 26 Mar 2015	Mark Whalley 26 Mar 2015	0
How to protect copyright content (videos): your ideas? Locked	Chris Pekar 6 Mar 2015	Ray Morris 26 Mar 2015	1
Restrict usernames to be only numeric characters Locked	Tinashe Nyambudu 23 Mar 2015	Tinashe Nyambudu 24 Mar 2015	2
CAS and Login As Functionality Locked	Benjamin Derry 14 Nov 2014	Matt Rice 23 Mar 2015	1
API creation of users - need to force password change Locked	Christopher Molnar 20 Mar 2015	James McLean 20 Mar 2015	1
insert JavaScript via ATO Locked	Shimon Nagar 15 Mar 2015	Shimon Nagar 15 Mar 2015	0
Sharing RSS links Locked	mandy honeyman 27 Feb 2015	jason wilson 6 Mar 2015	1
Create a moodle failover system Locked	Chris Pekar 6 Mar 2015	Chris Pekar 6 Mar 2015	2
Best way of securely separating different clients Locked	Chris Webb 22 Oct 2014	Robin Woodley 2 Mar 2015	1
How to fix XSS trusted users problem Locked	Monico Briseño 7 Feb 2009	Tim Hunt 27 Feb 2015	11
Cross-Site Request Forgery (CSRF) in Moodle default pages - help Locked	Vincent Gullotta 21 Feb 2015	James McLean 25 Feb 2015	15
Setting up a consumer key on a moodle site Locked	David Price 22 Feb 2015	David Price 22 Feb 2015	0
security overview: default role for all users not change Locked	sonia sonia 8 Jan 2015	Mahmut TEKER 17 Feb 2015	1
Moodle URL Locked	Sara MAhmoud 16 Feb 2015	Sara MAhmoud 16 Feb 2015	2
cron url security Locked	H D 12 Feb 2015	Damyon Wiese 12 Feb 2015	1
If you believe technologies will protect your privacy, think twice! Locked	Visvanath Ratnaweera 10 Feb 2015	Visvanath Ratnaweera 12 Feb 2015	2
Moodle Security Plugin Locked	Erwin Ancheta 10 Feb 2015	Erwin Ancheta 11 Feb 2015	2
Cloudflare Locked	James Easton 27 Jan 2015	Visvanath Ratnaweera 10 Feb 2015	6
2.7.1 hacked Locked	Wendi Daniels 6 Feb 2015	Visvanath Ratnaweera 10 Feb 2015	12
2.7.1 .htaccess files Locked	Wendi Daniels 9 Feb 2015	Wendi Daniels 9 Feb 2015	0
2.7.1 Permissions Locked	Wendi Daniels 8 Feb 2015	Wendi Daniels 9 Feb 2015	1
Hide courses from groups of users Locked	Duanne Scheepers 2 Feb 2010	Rose Phoey 6 Feb 2015	4
Authentication Kerberos Locked	Marek Grolms 5 Feb 2015	Marek Grolms 6 Feb 2015	2
Moodle and SSL: full site SSL and registration form only SSL issues Locked	Marek Kancelarek 4 Feb 2015	Marek Kancelarek 4 Feb 2015	1
Re: Spammers Using Self Registration Locked	emmanuel oertle 25 Jan 2015	Chris Wharton 26 Jan 2015	4
Automatic https: redirection Locked	Sal Kaceli 24 Jan 2015	Bret Miller 24 Jan 2015	1
Moodle created passwords made easier Locked	Tom Wootton 17 Jan 2015	Tom Wootton 18 Jan 2015	2
Hide email address by default Locked	Martin O'Mahony 18 Feb 2010	Daniel meanock 17 Jan 2015	3
Some students unable to login. Error "...with ID2." Locked	Fred Frazelle 15 Jan 2015	Fred Frazelle 15 Jan 2015	2
Restricting login through portal only Locked	Joan Van Duzer 13 Jan 2015	Dave Perry 13 Jan 2015	1
Security recommendations - code directory permissions Locked	bruce chambr 12 Jan 2015	Tomasz Muras 12 Jan 2015	2
Auditing passwords Locked	Tomasz Muras 12 Jan 2015	Tomasz Muras 12 Jan 2015	0
Disabling Login HTTPS Locked	John Okely 20 Jun 2014	John Okely 5 Jan 2015	25
More info about security updates Locked	Tiffany Morgan 23 Dec 2014	Tiffany Morgan 29 Dec 2014	2
Disabling right-click Locked	James Brown 19 May 2014	Guilherme Garutti 22 Dec 2014	5
Cookie Consent Warning mandatory in Europe Locked	Rolf Cper 16 Dec 2014	Rolf Cper 18 Dec 2014	3
Fingerprint Scanner to Access Moodle Locked	Eddie Sargent 15 Dec 2014	Joseph Thibault 16 Dec 2014	1
MOODLE :: Security Single-SignOn Locked	Lavanya Manne 1 Dec 2014	Lavanya Manne 15 Dec 2014	3
My Moodle site infected with malware: how to fix it? Locked	Luca Oppizzi 30 Nov 2012	alice louis 6 Dec 2014	5
URL security testing- Any interest? Locked	david millians 1 Dec 2014	david millians 2 Dec 2014	2
Switch from https to http Locked	Joost Bosschert 1 Dec 2014	Dave Perry 1 Dec 2014	3
Tiny Flaw in Moodle/turnitin Link Locked	Sanjok Gurung 24 Nov 2014	Sanjok Gurung 26 Nov 2014	2
Preventing teachers from editing the general section of a course Locked	Narissa Tuawhiorangi 16 Jun 2014	Narissa Tuawhiorangi 24 Nov 2014	2
worms infect site Locked	Lázaro José Carneiro de Sousa 29 Sep 2014	François Lizotte 21 Nov 2014	16
Trusted Permission not working. Locked	Clarence Prudhoe 18 Nov 2014	François Lizotte 21 Nov 2014	3
Moodle ClamAV Scan Log? Locked	Sam Pearson 20 Nov 2014	Sam Pearson 20 Nov 2014	0
How to increase upload size file only in a specific course Locked	Miki Alliel 16 Nov 2014	Miki Alliel 17 Nov 2014	2
Assign roles in System Locked	Roseli Mat Nor 18 Feb 2011	reham ali 15 Nov 2014	10
Course Creator Locked	mohamed hammam 13 Nov 2014	mohamed hammam 13 Nov 2014	0
Security Question Locked	Mr. Marc 9 Nov 2014	Ken Task 10 Nov 2014	6
The path supplied to Clam is invalid Locked	Saeed Amiri 31 Oct 2014	Ken Task 8 Nov 2014	14
Should user profile images be exposed to shared proxies? Locked	Matteo Scaramuccia 7 Nov 2014	Matteo Scaramuccia 7 Nov 2014	0
Security Fixes / Weekly Builds Locked	Thomas College 27 Oct 2014	Thomas College 28 Oct 2014	4
My Site has been hacked. HELP Locked	Fergal McCann 18 Oct 2014	Guillermo Madero 21 Oct 2014	7
Need to block access to my Tags/search.php Locked	Yossi Koren 21 Oct 2014	Ken Task 21 Oct 2014	1
How to keep Moodle data safe from server admins? Locked	Ohto Nordberg 17 Oct 2014	Visvanath Ratnaweera 18 Oct 2014	3
Interests, profile picture, and Google image search? Locked	Michael Gerszewski 7 Oct 2014	Daniel Neis Araujo 14 Oct 2014	3
Easy authentication for children and adults? Locked	Brylie Oxley 10 Oct 2014	Brylie Oxley 10 Oct 2014	0
Moodle guest autologin redirect to login page Locked	Vincent Dewez 6 Oct 2014	Helen Foster 7 Oct 2014	1
Solution worms infect site Locked	Lázaro José Carneiro de Sousa 6 Oct 2014	Lázaro José Carneiro de Sousa 6 Oct 2014	0
http for login Locked	Pete Tyrer 5 Oct 2014	Pete Tyrer 5 Oct 2014	0
External database settings or example Locked	Henk Petter 2 Oct 2014	Henk Petter 2 Oct 2014	0
New Install: dataroot exposure to web, security issue Locked	Brad PIerce 27 Sep 2014	Brad PIerce 30 Sep 2014	3
Site Policy Acceptance Log Locked	James England 25 Sep 2014	James England 28 Sep 2014	2
thematoweb.com site Locked	Leta Rogers 23 Sep 2014	Richard Oelmann 23 Sep 2014	1
HTTPS login on and off campus Locked	Eric Albert 15 Sep 2014	Eric Albert 17 Sep 2014	2
Problem with spam: Clic to Continue > by Text-Enhance Locked	Álvaro López Rojas 4 Dec 2013	Raquel Sacristán P. 15 Sep 2014	6
Admin Notification for self registration users with their details Locked	Tom Farrow 12 Sep 2014	Tom Farrow 12 Sep 2014	0
EU cookies law and Moodle Locked	Gonzalo Castells Ortells 12 Sep 2014	Matt Bury 12 Sep 2014	4
Remove few links under site administration for manager Locked	Melvin Richard 10 Sep 2014	Melvin Richard 12 Sep 2014	2
Login errors form unknown users every 5-7 minutes? Locked	Tony Chilvers 12 Sep 2014	Tony Chilvers 12 Sep 2014	0
Single Sign On With Forefront Locked	Paul L 26 Jun 2014	Dave Perry 10 Sep 2014	7
Permissions in 2.7 for Plugin Installer Locked	Eric Albert 29 Aug 2014	Eric Albert 10 Sep 2014	4
Invalid Login all the time. Locked	alex crampton 20 Dec 2012	James Miller 8 Sep 2014	8
Deny access to/Hide participant listing when logged in - enrolled students Locked	s n 27 Jul 2009	Chuck Barry` 4 Sep 2014	22
Restricting Participants List Locked	Chuck Barry` 2 Sep 2014	Chuck Barry` 3 Sep 2014	2

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
15
Next