Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
15
Next

Discussion	Started by	Last post	Replies
Cookie Consent Warning mandatory in Europe Locked	Rolf Cper 16 Dec 2014	Rolf Cper 18 Dec 2014	3
Fingerprint Scanner to Access Moodle Locked	Eddie Sargent 15 Dec 2014	Joseph Thibault 16 Dec 2014	1
MOODLE :: Security Single-SignOn Locked	Lavanya Manne 1 Dec 2014	Lavanya Manne 15 Dec 2014	3
My Moodle site infected with malware: how to fix it? Locked	Luca Oppizzi 30 Nov 2012	alice louis 6 Dec 2014	5
URL security testing- Any interest? Locked	david millians 1 Dec 2014	david millians 2 Dec 2014	2
Switch from https to http Locked	Joost Bosschert 1 Dec 2014	Dave Perry 1 Dec 2014	3
Tiny Flaw in Moodle/turnitin Link Locked	Sanjok Gurung 24 Nov 2014	Sanjok Gurung 26 Nov 2014	2
Preventing teachers from editing the general section of a course Locked	Narissa Tuawhiorangi 16 Jun 2014	Narissa Tuawhiorangi 24 Nov 2014	2
worms infect site Locked	Lázaro José Carneiro de Sousa 29 Sep 2014	François Lizotte 21 Nov 2014	16
Trusted Permission not working. Locked	Clarence Prudhoe 18 Nov 2014	François Lizotte 21 Nov 2014	3
Moodle ClamAV Scan Log? Locked	Sam Pearson 20 Nov 2014	Sam Pearson 20 Nov 2014	0
How to increase upload size file only in a specific course Locked	Miki Alliel 16 Nov 2014	Miki Alliel 17 Nov 2014	2
Assign roles in System Locked	Roseli Mat Nor 18 Feb 2011	reham ali 15 Nov 2014	10
Course Creator Locked	mohamed hammam 13 Nov 2014	mohamed hammam 13 Nov 2014	0
Security Question Locked	Mr. Marc 9 Nov 2014	Ken Task 10 Nov 2014	6
The path supplied to Clam is invalid Locked	Saeed Amiri 31 Oct 2014	Ken Task 8 Nov 2014	14
Should user profile images be exposed to shared proxies? Locked	Matteo Scaramuccia 7 Nov 2014	Matteo Scaramuccia 7 Nov 2014	0
Security Fixes / Weekly Builds Locked	Thomas College 27 Oct 2014	Thomas College 28 Oct 2014	4
My Site has been hacked. HELP Locked	Fergal McCann 18 Oct 2014	Guillermo Madero 21 Oct 2014	7
Need to block access to my Tags/search.php Locked	Yossi Koren 21 Oct 2014	Ken Task 21 Oct 2014	1
How to keep Moodle data safe from server admins? Locked	Ohto Nordberg 17 Oct 2014	Visvanath Ratnaweera 18 Oct 2014	3
Interests, profile picture, and Google image search? Locked	Michael Gerszewski 7 Oct 2014	Daniel Neis Araujo 14 Oct 2014	3
Easy authentication for children and adults? Locked	Brylie Oxley 10 Oct 2014	Brylie Oxley 10 Oct 2014	0
Moodle guest autologin redirect to login page Locked	Vincent Dewez 6 Oct 2014	Helen Foster 7 Oct 2014	1
Solution worms infect site Locked	Lázaro José Carneiro de Sousa 6 Oct 2014	Lázaro José Carneiro de Sousa 6 Oct 2014	0
http for login Locked	Pete Tyrer 5 Oct 2014	Pete Tyrer 5 Oct 2014	0
External database settings or example Locked	Henk Petter 2 Oct 2014	Henk Petter 2 Oct 2014	0
New Install: dataroot exposure to web, security issue Locked	Brad PIerce 27 Sep 2014	Brad PIerce 30 Sep 2014	3
Site Policy Acceptance Log Locked	James England 25 Sep 2014	James England 28 Sep 2014	2
thematoweb.com site Locked	Leta Rogers 23 Sep 2014	Richard Oelmann 23 Sep 2014	1
HTTPS login on and off campus Locked	Eric Albert 15 Sep 2014	Eric Albert 17 Sep 2014	2
Problem with spam: Clic to Continue > by Text-Enhance Locked	Álvaro López Rojas 4 Dec 2013	Raquel Sacristán P. 15 Sep 2014	6
Admin Notification for self registration users with their details Locked	Tom Farrow 12 Sep 2014	Tom Farrow 12 Sep 2014	0
EU cookies law and Moodle Locked	Gonzalo Castells Ortells 12 Sep 2014	Matt Bury 12 Sep 2014	4
Remove few links under site administration for manager Locked	Melvin Richard 10 Sep 2014	Melvin Richard 12 Sep 2014	2
Login errors form unknown users every 5-7 minutes? Locked	Tony Chilvers 12 Sep 2014	Tony Chilvers 12 Sep 2014	0
Single Sign On With Forefront Locked	Paul L 26 Jun 2014	Dave Perry 10 Sep 2014	7
Permissions in 2.7 for Plugin Installer Locked	Eric Albert 29 Aug 2014	Eric Albert 10 Sep 2014	4
Invalid Login all the time. Locked	alex crampton 20 Dec 2012	James Miller 8 Sep 2014	8
Deny access to/Hide participant listing when logged in - enrolled students Locked	s n 27 Jul 2009	Chuck Barry` 4 Sep 2014	22
Restricting Participants List Locked	Chuck Barry` 2 Sep 2014	Chuck Barry` 3 Sep 2014	2
Guest access who can only view certain uploaded assignments Locked	Rachel Chavez 2 Sep 2014	Rachel Chavez 2 Sep 2014	4
HP's fortify on demand security review: "Session Token Passed in Query String" Locked	Franco Pomidoro 1 Sep 2014	Franco Pomidoro 2 Sep 2014	4
"Site policy URL for guests" keeps getting auto filled Locked	Melissa Benson 8 Oct 2013	Daniel Thies 29 Aug 2014	7
Possible Hack? What to do next? Locked	Nic Ruley 31 Aug 2013	Tim Vaughn 25 Aug 2014	7
Uploading files to user profiles Locked	sherri g 11 Jun 2013	Jordi Fontseca 21 Aug 2014	3
Restore a course after deleting Locked	Olena Korol 31 Jul 2014	Catherine Pinnell 31 Jul 2014	1
Multiple users, same username and password Locked	Andrew Hayes 29 Jul 2014	Andrew Hayes 29 Jul 2014	2
300 login error Locked	m question 25 Jul 2014	m question 25 Jul 2014	0
Course Category acess through LDAP Locked	Catherine Pinnell 23 Jul 2014	Catherine Pinnell 23 Jul 2014	0
SSL, custom domains, general security and platform curiosities Locked	Chris Wagner 22 Jul 2014	Chris Wagner 22 Jul 2014	0
hacking of moodle learning platform Locked	henri pelissier 22 May 2011	Chris Pangelinan 21 Jul 2014	16
Checkpoint Firewall blocking Moodle Posts Locked	Sam McNeill 22 May 2012	Eric Katchan 18 Jul 2014	5
Allow Unauthenicated Users to View Gallery Locked	Matthew Dodds 16 Jul 2014	Matthew Dodds 17 Jul 2014	4
temporary/one-time-use password for user Locked	Kevin Puventhiranathan 24 Sep 2012	Nitin Agrawal 12 Jul 2014	3
Security for Online services Locked	sasa lk 10 Jul 2014	sasa lk 10 Jul 2014	0
SECURITY: Disable themes.googleusercontent and other cross-site linking Locked	Leon Franken 10 Jul 2014	Leon Franken 10 Jul 2014	0
Spammers Using Self Registration Locked	Mark Iannone 13 Feb 2013	Greg Padberg 9 Jul 2014	20
Prevent guests from viewing forums Locked	Ezequiel Uberti 11 Jun 2014	Catherine Pinnell 4 Jul 2014	1
Creating a non-gradeable student role - Audit. Locked	Jason Carson 27 Jun 2014	Jason Carson 27 Jun 2014	0
Enrolling Cohorts from Sub-Categories Locked	Brian Gaehring 11 Jun 2014	John Gifford 23 Jun 2014	2
Enroll Users Without Email Confirmation Locked	Kenton de Jong 21 Jun 2014	Kenton de Jong 21 Jun 2014	0
Using local login id Locked	chris stevens 18 Jun 2014	John Gifford 18 Jun 2014	1
IP Filter for a resource or an activity Locked	Trevor Li 28 Mar 2014	Marina Glancy 16 Jun 2014	2
Allow a moodle user to login only from a given IP or set of IP addresses Locked	Plecto Rincus 13 Jun 2014	Eder dos Santos 13 Jun 2014	1
How to make the entire Moodle website over https? Locked	Davi DePaula 12 Jun 2014	Davi DePaula 13 Jun 2014	6
Security "Forbidden" error Locked	Eder dos Santos 11 Jun 2014	Eder dos Santos 11 Jun 2014	0
Restricting category Admins from other cohorts Locked	Brian Gaehring 10 Jun 2014	Brian Gaehring 11 Jun 2014	2
Expanding logging (and events) coverage in 2.8 Locked	Marina Glancy 6 Jun 2014	Catherine Pinnell 10 Jun 2014	1
The guest role "guest" is incorrectly defined! Locked	Di Juwel 9 Jun 2014	Emma Richardson 9 Jun 2014	1
Do I need a secure https logon? Locked	Steven Fitzgerald 9 Jun 2014	Dave Perry 9 Jun 2014	1
Unsecured files in course with password-protected guest access Locked	Kuriko A 6 Jun 2014	Kuriko A 6 Jun 2014	0
ISO 27001: Input data validation and Control of internal processing Locked	Gael Lams 26 May 2014	Tim Hunt 6 Jun 2014	6
How do I prevent some users from enrolling themselves in some courses? Locked	Ted Osborne 4 Jun 2014	John Gifford 5 Jun 2014	6
Make MYSQL Database Anonymous Locked	Alan Cherwinski 3 Jun 2014	Alan Cherwinski 3 Jun 2014	3
moodle systematically remove users Locked	jose Campos 2 Jun 2014	jose Campos 2 Jun 2014	0
Download Protection Locked	Gul Leisberg 31 May 2014	Matt Bury 31 May 2014	3
A 15 year old student put Moodle down Locked	Bernat Martinez 23 May 2014	Dave Perry 30 May 2014	23
Moodle Site Redirecting to an unknown site Locked	deepika thakur 29 May 2014	Emma Richardson 29 May 2014	1
Email address change confirmation sent to wrong address? Locked	Dale Davies 29 May 2014	Dale Davies 29 May 2014	2
Hide All Email Addresses From Everyone Locked	Tom Wootton 29 May 2014	Guillermo Madero 29 May 2014	3
Authentication with captcha Locked	Irith Herman 28 May 2014	Irith Herman 28 May 2014	0
restricting usage of pdf file Locked	Jirka Hladis 17 May 2014	Guillermo Madero 21 May 2014	16
Moodle with Ms active directory(Lapd) single sign-in Locked	Spyros Savvanis 19 May 2014	Dave Perry 19 May 2014	3
Moodledata security check Locked	Filippo Carnevali 14 May 2014	Guillermo Madero 15 May 2014	1
moodledata security testing Locked	Filippo Carnevali 14 May 2014	Guillermo Madero 15 May 2014	1
Guest being able to enter a course (course frontpage) but not able to access resources Locked	Ezequiel Uberti 13 May 2014	Ezequiel Uberti 13 May 2014	0
How do I setup LDAP or Microsoft AD? Locked	Chris Smith 8 May 2014	Chris Smith 13 May 2014	3
View Permissions Locked	Sigal Rashba 11 May 2014	Nikki LM 12 May 2014	1
Dataroot permissions and contents changed... Locked	Aaron Batty 4 May 2014	Aaron Batty 4 May 2014	0
Allow user with specific email domain on moodle 2.6 Locked	Christine Mburu 2 May 2014	Christine Mburu 2 May 2014	0
students opening new internet windows on iPads during quizzes Locked	Rob Dahlin 11 Apr 2014	Ray Morris 1 May 2014	2
Anti-minimization ability Locked	Michael Spain 2 Apr 2014	Ray Morris 1 May 2014	1
Allow Teachers to reset password Locked	Stijn Kersten 29 Apr 2014	Stijn Kersten 30 Apr 2014	2
reCaptcha Preventing User Registration Locked	Fred Roller 24 Apr 2014	Jez H 29 Apr 2014	6
[URGENT] Heartbleed OpenSSL Vulnerability Locked	Matt Spurrier 11 Apr 2014	Matt Bury 17 Apr 2014	9
Authenticating Access to Large Amount of Static Data Locked	Warren Toomey 11 Apr 2014	Warren Toomey 12 Apr 2014	2
Ads displayed Moodle sites where none should be (a browser issue actually) Locked	Joseph Thibault 12 Apr 2014	Joseph Thibault 12 Apr 2014	0
changing multiple passwords at once Locked	Rob Dahlin 11 Apr 2014	Rob Dahlin 11 Apr 2014	0
password requirement too complex Locked	jenny clarke 10 Apr 2014	Guillermo Madero 11 Apr 2014	2

Previous
1
2
3
4
5
6
7 (current)
8
9
10
…
15
Next