Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	SQL INJECTION javascript-static.js Locked	Daniel Bruno 16 July 2015	Tim Hunt 28 July 2015	1
	Input Validation-File Upload vulnerability Locked	Rogelio Jr. Dela Cruz 3 July 2015	James McLean 23 July 2015	4
	New User Email Address Message Locked	Lauren Ziegler 16 July 2015	Lauren Ziegler 16 July 2015	2
	Admin has access to all passwords Help. Locked	Darrell Rea 2 July 2015	Lazy Django 13 July 2015	9
	Adding SSL Certificate Seal in Moodle-URL Locked	Andre Ferreira 10 July 2015	Andre Ferreira 11 July 2015	2
	How to download the course content using moodle web service Locked	Sameer Kshirsagar 10 July 2015	Sameer Kshirsagar 10 July 2015	0
	No CAPTCHA reCAPTCHA Moodle Locked	Bruno Nogueira 2 July 2015	John Okely 7 July 2015	3
	The Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext (BREACH) Locked	Joshua Devey 24 June 2015	Damyon Wiese 25 June 2015	2
	Security Warnings! Locked	Eliecer Acevedo Patiño 23 June 2015	Eliecer Acevedo Patiño 23 June 2015	0
	Is it safe to create system roles to restrict the access to blocks? Locked	Federica Marra 19 June 2015	Tim Hunt 19 June 2015	1
	moodle 2.8 security Locked	myelearning system 19 June 2015	Tim Hunt 19 June 2015	1
	Your thoughts on this hypothetical situation (how to prevent and identify) Locked	Joseph Thibault 20 Sept 2014	Dan Marsden 18 June 2015	8
	users imort and export Locked	amit prajapati 15 June 2015	Emma Richardson 17 June 2015	5
	Removing Timestamps in Tests and Assignments Locked	Sebastian H. 17 June 2015	Sebastian H. 17 June 2015	0
	SSL is not ok with moodle Locked	stephane ngov 16 June 2015	Ken Task 16 June 2015	2
	Keeping Members of Paid Courses from Sharing Login Credentials Locked	joseph zabrosky 11 June 2015	joseph zabrosky 13 June 2015	10
	Multiple password for Quiz Locked	vancool black 7 June 2015	Rick Jerz 7 June 2015	1
	Web API encryption to push/pull data Locked	Gordon McLeod 4 June 2015	Gordon McLeod 5 June 2015	3
	Moodlebot...What is it!? Locked	Sherry Stafford 3 June 2015	Sherry Stafford 3 June 2015	2
	Self Enrolment - enrolment key issue Locked	Katrina Nicholson 6 Mar 2015	Albert Ramsbottom 2 June 2015	6
	setting the allowed mimetypes for file upload as a security measure Locked	Di Juwel 15 Jan 2015	Howard Miller 26 May 2015	2
	Advice on Roles / Permissions for a hierarchichal structure Locked	Phil Carlson 21 May 2015	Phil Carlson 21 May 2015	0
	Multiple login Locked	Suleiman Umar 13 May 2015	Suleiman Umar 18 May 2015	6
	Sever Load and Crash Locked	Paul P. 14 May 2015	Stephen Bourget 15 May 2015	8
	Browser blocks java script and css on https login page Locked	moodle learner 14 May 2015	James McLean 15 May 2015	1
	SSO - Shared Cookie with Wordpress Locked	Don Schwartz 13 May 2015	Howard Miller 14 May 2015	1
	Getting weird anonymous account created in one of our Moodle sites Locked	François Lizotte 12 June 2013	Silvia Camacho 13 May 2015	3
	are security issues pathes already included in the next vessions of moodle? Locked	Di Juwel 6 May 2015	Richard Oelmann 12 May 2015	5
	IP address Locked	heather brown 6 May 2015	Visvanath Ratnaweera 11 May 2015	7
	Weak SSL Cipher Suites are Supported - Version-1.9.5 Locked	Vinod Kumar 27 Apr 2015	Vinod Kumar 10 May 2015	26
	HTTP to HTTPS converter for external content Locked	John Okely 5 Aug 2014	John Okely 4 May 2015	14
	Session Identifier Not Updated ?? Security Issue? Locked	Richard Wallace 4 Aug 2009	Howard Miller 3 May 2015	13
	quiz records error? Locked	Tzafi Z 30 Apr 2015	Richard Oelmann 30 Apr 2015	1
	Wanted: reference on stability/security of Moodle Locked	Derek Chirnside 24 Apr 2015	Derek Chirnside 24 Apr 2015	0
	Appearance Tab access permission Locked	Hossam eldin Reda Ibrahim 20 Apr 2015	Hossam eldin Reda Ibrahim 20 Apr 2015	0
	What are your major privacy concerns ? Locked	Ankit Agarwal 17 Apr 2015	Visvanath Ratnaweera 17 Apr 2015	1
	2.7 brute force attack - how to stop Locked	Ian L 1 Dec 2014	Eduardo Kraus 12 Apr 2015	4
	Student Privacy Locked	David Kirk 8 Apr 2015	Hartmut Scherer 8 Apr 2015	2
	Everyone has full access to my site since a crash last week - permissions not respected Locked	Sébastien Petit 1 Apr 2015	Sébastien Petit 1 Apr 2015	1
	Allowing students anonymous access to others work Locked	Velson Horie 1 Apr 2015	Velson Horie 1 Apr 2015	0
	File type extensions Locked	Soha Gamal 26 Mar 2015	Soha Gamal 26 Mar 2015	0
	Google reCaptcha not working Locked	Mark Whalley 26 Mar 2015	Mark Whalley 26 Mar 2015	0
	How to protect copyright content (videos): your ideas? Locked	Chris P. 6 Mar 2015	Ray Morris 26 Mar 2015	1
	Restrict usernames to be only numeric characters Locked	Tinashe Nyambudu 23 Mar 2015	Tinashe Nyambudu 24 Mar 2015	2
	CAS and Login As Functionality Locked	Benjamin Derry 14 Nov 2014	Matt Rice 23 Mar 2015	1
	API creation of users - need to force password change Locked	Christopher Molnar 20 Mar 2015	James McLean 20 Mar 2015	1
	insert JavaScript via ATO Locked	Shimon Nagar 15 Mar 2015	Shimon Nagar 15 Mar 2015	0
	Sharing RSS links Locked	mandy honeyman 27 Feb 2015	jason wilson 6 Mar 2015	1
	Create a moodle failover system Locked	Chris P. 6 Mar 2015	Chris P. 6 Mar 2015	2
	Best way of securely separating different clients Locked	Chris Webb 22 Oct 2014	Robin Woodley 2 Mar 2015	1
	How to fix XSS trusted users problem Locked	Monico Briseño 7 Feb 2009	Tim Hunt 27 Feb 2015	11
	Cross-Site Request Forgery (CSRF) in Moodle default pages - help Locked	Vincent Gullotta 21 Feb 2015	James McLean 25 Feb 2015	15
	Setting up a consumer key on a moodle site Locked	David Price 22 Feb 2015	David Price 22 Feb 2015	0
	security overview: default role for all users not change Locked	sonia sonia 8 Jan 2015	Mahmut TEKER 17 Feb 2015	1
	Moodle URL Locked	Sara MAhmoud 16 Feb 2015	Sara MAhmoud 16 Feb 2015	2
	cron url security Locked	H D 12 Feb 2015	Damyon Wiese 12 Feb 2015	1
	If you believe technologies will protect your privacy, think twice! Locked	Visvanath Ratnaweera 10 Feb 2015	Visvanath Ratnaweera 12 Feb 2015	2
	Moodle Security Plugin Locked	Erwin Ancheta 10 Feb 2015	Erwin Ancheta 11 Feb 2015	2
	Cloudflare Locked	James Easton 27 Jan 2015	Visvanath Ratnaweera 10 Feb 2015	6
	2.7.1 hacked Locked	Wendi Daniels 6 Feb 2015	Visvanath Ratnaweera 10 Feb 2015	12
	2.7.1 .htaccess files Locked	Wendi Daniels 9 Feb 2015	Wendi Daniels 9 Feb 2015	0
	2.7.1 Permissions Locked	Wendi Daniels 8 Feb 2015	Wendi Daniels 9 Feb 2015	1
	Hide courses from groups of users Locked	Duanne Scheepers 2 Feb 2010	Rose Phoey 6 Feb 2015	4
	Authentication Kerberos Locked	Marek Grolms 5 Feb 2015	Marek Grolms 6 Feb 2015	2
	Moodle and SSL: full site SSL and registration form only SSL issues Locked	Marek Kancelarek 4 Feb 2015	Marek Kancelarek 4 Feb 2015	1
	Re: Spammers Using Self Registration Locked	emmanuel oertle 25 Jan 2015	Chris Wharton 26 Jan 2015	4
	Automatic https: redirection Locked	Sali Kaceli 24 Jan 2015	Bret Miller 24 Jan 2015	1
	Moodle created passwords made easier Locked	Tom Wootton 17 Jan 2015	Tom Wootton 18 Jan 2015	2
	Hide email address by default Locked	Martin O'Mahony 18 Feb 2010	Daniel meanock 17 Jan 2015	3
	Some students unable to login. Error "...with ID2." Locked	Fred Frazelle 15 Jan 2015	Fred Frazelle 15 Jan 2015	2
	Restricting login through portal only Locked	Joan Van Duzer 13 Jan 2015	Dave Perry 13 Jan 2015	1
	Security recommendations - code directory permissions Locked	bruce chambr 12 Jan 2015	Tomasz Muras 12 Jan 2015	2
	Auditing passwords Locked	Tomasz Muras 12 Jan 2015	Tomasz Muras 12 Jan 2015	0
	Disabling Login HTTPS Locked	John Okely 20 June 2014	John Okely 5 Jan 2015	25
	More info about security updates Locked	Tiffany Morgan 23 Dec 2014	Tiffany Morgan 29 Dec 2014	2
	Disabling right-click Locked	James Brown 19 May 2014	Guilherme Garutti 22 Dec 2014	5
	Cookie Consent Warning mandatory in Europe Locked	Rolf Cper 16 Dec 2014	Rolf Cper 18 Dec 2014	3
	Fingerprint Scanner to Access Moodle Locked	Eddie Sargent 15 Dec 2014	Joseph Thibault 16 Dec 2014	1
	MOODLE :: Security Single-SignOn Locked	Lavanya Manne 1 Dec 2014	Lavanya Manne 15 Dec 2014	3
	My Moodle site infected with malware: how to fix it? Locked	Luca Oppizzi 30 Nov 2012	alice louis 6 Dec 2014	5
	URL security testing- Any interest? Locked	david millians 1 Dec 2014	david millians 2 Dec 2014	2
	Switch from https to http Locked	Joost Bosschert 1 Dec 2014	Dave Perry 1 Dec 2014	3
	Tiny Flaw in Moodle/turnitin Link Locked	Sanjok Gurung 24 Nov 2014	Sanjok Gurung 26 Nov 2014	2
	Preventing teachers from editing the general section of a course Locked	Narissa Tuawhiorangi 16 June 2014	Narissa Tuawhiorangi 24 Nov 2014	2
	worms infect site Locked	Lázaro José Carneiro de Sousa 29 Sept 2014	François Lizotte 21 Nov 2014	16
	Trusted Permission not working. Locked	Clarence Prudhoe 18 Nov 2014	François Lizotte 21 Nov 2014	3
	Moodle ClamAV Scan Log? Locked	Sam Pearson 20 Nov 2014	Sam Pearson 20 Nov 2014	0
	How to increase upload size file only in a specific course Locked	Miki Alliel 16 Nov 2014	Miki Alliel 17 Nov 2014	2
	Assign roles in System Locked	Roseli Mat Nor 18 Feb 2011	reham ali 15 Nov 2014	10
	Course Creator Locked	mohamed hammam 13 Nov 2014	mohamed hammam 13 Nov 2014	0
	Security Question Locked	Mr. Marc 9 Nov 2014	Ken Task 10 Nov 2014	6
	The path supplied to Clam is invalid Locked	Saeed Amiri 31 Oct 2014	Ken Task 8 Nov 2014	14
	Should user profile images be exposed to shared proxies? Locked	Matteo Scaramuccia 7 Nov 2014	Matteo Scaramuccia 7 Nov 2014	0
	Security Fixes / Weekly Builds Locked	Thomas College 27 Oct 2014	Thomas College 28 Oct 2014	4
	My Site has been hacked. HELP Locked	Fergal McCann 18 Oct 2014	Guillermo Madero 21 Oct 2014	7
	Need to block access to my Tags/search.php Locked	Yossi Koren 21 Oct 2014	Ken Task 21 Oct 2014	1
	How to keep Moodle data safe from server admins? Locked	Ohto Nordberg 17 Oct 2014	Visvanath Ratnaweera 18 Oct 2014	3
	Interests, profile picture, and Google image search? Locked	Michael Gerszewski 7 Oct 2014	Daniel Neis Araujo 14 Oct 2014	3
	Easy authentication for children and adults? Locked	Brylie Oxley 10 Oct 2014	Brylie Oxley 10 Oct 2014	0
	Moodle guest autologin redirect to login page Locked	Vincent Dewez 6 Oct 2014	Helen Foster 7 Oct 2014	1