Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Moodle Security holes detected by the IPS!!! Locked	A. H. 25 Nov 2009	A. H. 2 Dec 2009	4
	Integration with external system users? Locked	Aaron Zeckoski 1 May 2009	Hubert Chathi 9 May 2009	3
	MDL-24225 https redirection security concern Locked	Aaron Johnson 26 Oct 2010	Aaron Johnson 26 Oct 2010	0
	Dataroot permissions and contents changed... Locked	Aaron Batty 4 May 2014	Aaron Batty 4 May 2014	0
	Moodle hosted off Kuberate-What do I have to know? Locked	Aarthi Ramesh 10 Dec 2020	Ken Task 10 Dec 2020	1
	Block CLI login by Main Admin Locked	Abayomi Dipeolu 9 Sept 2020	Emma Richardson 9 Sept 2020	1
	Profile and link to policy and agreements. Locked	Abdelmalek Nezzal 14 Mar 2022	Abdelmalek Nezzal 15 Mar 2022	2
	Parent role access to profiles Locked	Abdulhadi Zakkour 8 Dec 2020	Mary Cooch 8 Dec 2020	1
	The default user role "Authenticated user" is incorrectly defined! Locked	Abdullah AlAbdullah 3 Oct 2022	Michael Hawkins 6 Oct 2022	1
	Single sign in from a student registration portal Locked	Abdulrauf Yamta 17 Nov 2016	Christopher McCool 18 Nov 2016	1
	Is https for the login page necessary? Locked	Abel Cheng 5 Feb 2010	Jon Witts 6 Feb 2010	2
	Email-based self-registration security without reCaptcha Locked	Abhas Abhinav 16 July 2020	Visvanath Ratnaweera 15 Mar 2021	5
	How to grant access to guest Locked	Abraham Zeyohannis 27 June 2012	Mary Cooch 16 Dec 2012	2
	random lines added to my main page: Hacked or not? Locked	Adam Turner 8 June 2009	cor kuijt 17 June 2009	5
	securityalerts list Locked	Deleted user 1 Dec 2009	Deleted user 3 Dec 2009	7
	Maintaining old moodle sites Locked	Deleted user 25 Jan 2010	Visvanath Ratnaweera 19 Feb 2010	4
	Moodle & PHPMotion login integration with LDAP Locked	Adam B 13 May 2011	Nadav Kavalerchik 15 Aug 2011	1
	Prevent sharing of usernames Locked	adam penner 7 Aug 2021	adam penner 7 Aug 2021	0
	Server Logs Locked	Adam Latrache 14 Jan 2022	Emma Richardson 14 Jan 2022	3
	one user one login Locked	Adi Prasetya 23 June 2011	Adi Prasetya 23 June 2011	0
	how to keep one user can only be a single login? Locked	Adi Prasetya 24 June 2011	Deleted user 24 June 2011	3
	Session token in URL Vulnerability Locked	Aditya Ravishankar 15 Oct 2021	Michael Hawkins 15 Oct 2021	1
	Restrict access to courses during a period of hours on a day Locked	Adolfo Franco 22 Apr 2020	Visvanath Ratnaweera 12 May 2020	3
	iptables firewall stops email messages to SMTP host Locked	Adrian Scarle 11 July 2013	Ken Task 13 July 2013	9
	Allow only one dynamic ip Locked	Adrián Fernández Martín 12 Oct 2019	Ken Task 14 Oct 2019	5
	How to check authentication? Locked	ahmad ajiloo 1 Aug 2010	Aaron Wells 2 Aug 2010	1
	Restrict site access	Ahmad MY 9 Sept 2022	Brett Dalton 4 Sept 2023	2
	Database crashed Locked	Ahmed Belhani 27 Mar 2014	Ahmed Belhani 29 Mar 2014	3
	Fix Blind SQL Injection Locked	Ahmed Hamed 26 June 2018	Ken Task 29 June 2018	8
	2.9+ moodle - recaptcha suddenly stopped working Locked	ajeet Singh 1 Nov 2015	John Okely 17 Nov 2015	8
	SSL installation Locked	Akhil Verma 4 Apr 2019	Jon Bolton 4 Apr 2019	1
	Is this actually possible in Moodle 2.x? Locked	Alan Muscat 21 June 2011	Guillermo Madero 24 June 2011	6
	Hiding certain courses from guests Locked	Alan Muscat 24 June 2011	Alan Muscat 24 June 2011	0
	Controlling what Guests see Locked	Alan Muscat 28 June 2011	Alan Muscat 28 June 2011	0
	Company A can still see company B. Help needed. Locked	Alan Muscat 6 July 2011	Thibault Hermes 14 July 2011	1
	Limited Web Access for Moodle only Locked	Deleted user 5 Mar 2012	Jon Witts 6 Mar 2012	1
	Login Attacks from various IPs Locked	Deleted user 16 May 2012	Visvanath Ratnaweera 12 June 2012	3
	Moodle 1.9.19+ spam accounts added inspite of CAPTCHA Locked	Deleted user 11 Oct 2012	Deleted user 11 Oct 2012	0
	SQL Injectable Sites listed! Locked	Deleted user 2 Feb 2013	Deleted user 4 Feb 2013	4
	redirect to new installation Locked	Deleted user 3 Mar 2013	Visvanath Ratnaweera 13 Mar 2013	2
	Ban certain e-mail addresses from account creation? Locked	Deleted user 24 Apr 2013	Greg Padberg 24 May 2013	6
	Stop bogus accounts with security question? Locked	Deleted user 1 May 2013	Ryan B 11 Sept 2013	4
	Make MYSQL Database Anonymous Locked	Alan Cherwinski 3 June 2014	Alan Cherwinski 3 June 2014	3
	Cookie Consent and Privacy Notice Popup Locked	Alan Christie 13 July 2018	Agnes Beleznai 13 Feb 2021	17
	How to Download my Personal Data or other's Data Locked	Alan Schrock 29 Nov 2018	Alan Schrock 4 Jan 2019	16
	Hacked - where is this index.php Locked	Albert Dudley 30 May 2009	Mary Cooch 30 May 2009	3
	Backup policy Locked	Albert Ramsbottom 12 July 2018	Ken Task 22 Aug 2018	8
	Folder and file permissions for Moodledata and Moodle Locked	Albert Ramsbottom 26 July 2018	Matteo Scaramuccia 31 July 2018	8
	Protected URLs for html content? Locked	Alejandro Lengua 1 Dec 2010	Waldemar Basista 4 Jan 2011	1
	Moodle and modsecurity rules Locked	Alejandro Lengua 4 Feb 2022	Tim Hunt 5 Feb 2022	1
	What kind of attack is this?	Alejandro Lengua 4 Apr 2024	Ken Task 5 Apr 2024	1
	Is it possible to have Moodle users using local autentication and other users authenticating with...	Alejandro Lengua 15 Apr 2024	Tim Hunt 15 Apr 2024	1
	Moodle security in 3.8.4 version Locked	Alessio Niespolo 16 Sept 2021	Tim Hunt 16 Sept 2021	1
	Disable Email Requirement PHP (Where to start) Locked	Alex Illsley 7 Sept 2011	Juan Rubio 12 Sept 2011	1
	Forgotten Admin Password Locked	Alex Li 22 Dec 2011	Alex Li 10 Jan 2012	1
	Exam Results on Moodle Locked	Alex 09 28 June 2012	Alex 09 28 June 2012	3
	Invalid Login all the time. Locked	alex crampton 20 Dec 2012	James Miller 8 Sept 2014	8
	Certificação SSL no Moodle Locked	Alex Menezes 22 Mar 2013	Iñaki Arenaza 2 Apr 2013	3
	How is it possible for users to show up in "Online users" block but not activity logs Locked	Alex Greene 26 July 2013	Doug Moody 26 July 2013	1
	Spam Filter? Locked	Alex Vanden Bosch 30 Nov 2015	Marcus Green 1 Dec 2015	2
	Possible Exploit - Accessing the Main Admins account through the CLI Locked	Alex Legg 13 Apr 2016	Alex Legg 13 Apr 2016	6
	HTTP to HTTPS Locked	Alex Vanden Bosch 23 Nov 2022	Le Minh Tuan 4 Feb 2023	4
	IP Blocker Issue - Urgent Locked	Alexa Lupenec 16 Jan 2020	Ken Task 16 Jan 2020	2
	Subscription to security mailinglist doesn't work Locked	Alexander Bias 28 July 2011	Alexander Bias 1 Aug 2011	2
	clamAV blocks all Uploads in Moodle 2.3.1 Locked	Deleted user 25 July 2012	Monica Florea 8 Nov 2012	4
	Edit SSL-secured login page to include site seal. Locked	Alexander Wiklund 26 July 2012	Deleted user 27 July 2012	3
	Export privacy data of users without sending them an e-mail with download link Locked	Alexander Lebeth 10 Jan 2022	Alexander Lebeth 10 Jan 2022	0
	pseudonymization/anonymization of deleted users Locked	Alexandra F 10 Apr 2018	Alexandra F 10 Apr 2018	2
	Keeping informed about security Locked	Alexandro Colorado 9 Sept 2008	Helen Foster 9 Sept 2008	1
	Adding Admin Roles/Capabilities to Manager Locked	Alfred Mutanga 12 Nov 2021	Alfred Mutanga 12 Nov 2021	0
	client block - mod_security Locked	Alfredo Pineiro 21 Dec 2010	Matteo Scaramuccia 21 Dec 2010	1
	accessing question bank Locked	Ali Rajabpour Sanati 26 June 2013	Ali Rajabpour Sanati 23 July 2013	5
	Security settings Locked	Ali Shettima 21 July 2017	John Okely 21 July 2017	1
	PHP.URI.Code.Injection Firewall Message Locked	Ali Arekat 24 Oct 2017	Tomasz Muras 24 Oct 2017	1
	The Web Application Firewall Blocks Most of the Actions Locked	Ali Arekat 22 Jan 2018	Dan Marsden 22 Jan 2018	1
	Firewall Recommended Settings Locked	Ali Arekat 5 Feb 2019	Ali Arekat 6 Feb 2019	4
	Security for self enrolment and enrolment keys Locked	Alice Constable 13 May 2016	Alice Constable 17 May 2016	2
	Delete "graduated" students (GDPR) Locked	Alicia Wallace 24 Apr 2018	Randy Thornton 27 Apr 2018	1
	GDPR Course retention varies by qual type Locked	Alicia Wallace 4 May 2018	Deleted user 25 May 2018	15
	Flash Vulnerability - dealing with uploaded files Locked	Alistair Groves 13 Nov 2009	Mauno Korpelainen 14 Nov 2009	7
	How to 'unlink' access to user info Locked	Allen Starowsky 4 Feb 2010	Frank Ralf 5 Feb 2010	3
	Verifying identity of students Locked	altan ahmet 4 July 2018	altan ahmet 5 July 2018	3
	adding additional admins & assigning specific roles Locked	altan ahmet 27 Feb 2019	altan ahmet 28 Feb 2019	3
	defining admin/mamager role for specific course Locked	altan ahmet 8 Mar 2019	altan ahmet 9 Mar 2019	1
	editing recent activity block Locked	altan ahmet 28 Feb 2020	altan ahmet 9 Mar 2020	2
	Problem: Access to moodle service from outside computers Locked	Álvaro López Rojas 19 Nov 2013	Emma Richardson 8 Dec 2013	4
	Problem with spam: Clic to Continue > by Text-Enhance Locked	Álvaro López Rojas 4 Dec 2013	Raquel Sacristán P. 15 Sept 2014	6
	ADODB Error: Login failed for user 'abct'. Reason: The password of the account has expired. Locked	Aman Batra 7 Jan 2010	Aman Batra 7 Jan 2010	0
	Automatic Enrollment? Locked	Amazing Sey 19 Aug 2009	Amazing Sey 22 Aug 2009	2
	Moodle Administrator moving on - Securing moodle site Locked	Amelia Christensen 6 Mar 2010	Tim Hunt 8 Mar 2010	2
	How to schedule moodle cron job to run every day at 12 am Locked	Amira Elsayed 11 Oct 2021	Visvanath Ratnaweera 13 Oct 2021	2
	moodle website crawled by hacker bot and get all content and send it to telegram channel Locked	Amira Elsayed 20 Apr 2022	Ken Task 21 Apr 2022	8
	users imort and export Locked	amit prajapati 15 June 2015	Emma Richardson 17 June 2015	5
	Moodle Security Vulnerabilities Locked	Amit Sharma 17 Nov 2021	Abdullah Zayed 25 Sept 2022	7
	User profile permissions Locked	Amy Severson 9 July 2011	Amy Severson 15 July 2011	4
	Preventing download of audio files Locked	Anand Anand 4 Sept 2012	Roxana Cabrera 25 Sept 2015	2
	settings for multiple manager(admin) for each organization Locked	Anand Vadivelu 19 May 2017	gurpreet singh 20 June 2017	1
	Code security certification Locked	Anand Rajendran 20 July 2017	Marcus Green 21 July 2017	2
	Moodle blocked out after IP listing Locked	Anandarup Kar 17 Mar 2018	Visvanath Ratnaweera 28 Mar 2018	1
	security issue Locked	Anderson Hsu 28 Nov 2016	Mike Hoddee 11 Apr 2017	4