Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Concurrent Logins Locked	Rick Newton 29 Nov 2010	Rick Newton 29 Nov 2010	0
	Need to circumvent - "Dataroot location is not secure" issue Locked	Rick Morice 15 Dec 2010	Guillermo Madero 23 Apr 2012	5
	User role course subscriptions problem Locked	Rick Morice 27 Oct 2011	Rick Morice 27 Oct 2011	1
	course not visible using custom role Locked	Rick Koontz 4 Nov 2011	Rick Koontz 4 Nov 2011	0
	Denied email domains in Moodle 2.4 Locked	Rick Jerz 2 Feb 2013	Don Hazelwood 29 Aug 2013	1
	IP address being blocked by the server Locked	Rick Enderle, Jr. 25 July 2017	Just H 25 July 2017	1
	Secure cookies / http cookies only	Rick Sparrow 6 May 2023	Rick Sparrow 16 May 2023	2
	Minimal student data - help Locked	Rik Hall 21 Sept 2010	Tim Hunt 24 Sept 2010	7
	Antivirus Locked	Ripa Desai 18 May 2017	Rahul Rai 3 July 2017	2
	Moodle Site Hacked Locked	Rishi VG 28 Apr 2009	Howard Miller 28 Apr 2009	1
	Moodle does not restrict file types for uploads??? Security Risk??? Locked	Rob Barnett 18 Sept 2009	javier D 30 Mar 2016	17
	Digital certificates Locked	Rob Cunniffe 20 Apr 2010	Rob Cunniffe 22 Apr 2010	1
	How to authenticate w/ CAS but skip LDAP? Locked	Rob Byrd 9 Feb 2012	Rob Byrd 9 Feb 2012	0
	changing multiple passwords at once Locked	Rob Dahlin 11 Apr 2014	Rob Dahlin 11 Apr 2014	0
	students opening new internet windows on iPads during quizzes Locked	Rob Dahlin 11 Apr 2014	Ray Morris 1 May 2014	2
	Moodle and Encrypted Database Locked	Robert Saari 24 Oct 2009	Cliff Carpenter 18 Nov 2009	31
	Permission Denied / Theme Upload Locked	Robert Lightburn 3 Sept 2011	Alex Walker 5 Sept 2011	1
	I was hacked! Locked	Robert Leonard 11 May 2012	Helen Foster 14 May 2012	3
	Need security help with university examinations Locked	Robert Barone 13 Jan 2014	Tim Hunt 13 Jan 2014	1
	LTI Vulnerability Locked	Robert Kovacich 31 Mar 2019	Adam Jenkins 15 June 2019	5
	Firewall problem Locked	Robert Hegestedt 16 Apr 2019	Robert Hegestedt 3 May 2019	5
	Useragent Locked	Robert Hegestedt 17 May 2019	Robert Hegestedt 17 May 2019	2
	HTTPS Invalid Login	Robert Stones 12 June 2023	Shiva Naidu 29 Jan 2024	8
	sitepolicynotagreed error appears on site policy page with bad format Locked	Roberto Cucco 24 July 2019	Sergio Rabellino 25 July 2019	3
	WAF blocks service-nologin.php Locked	Roberto Sbravati 23 Aug 2021	Sergio Rabellino 25 Aug 2021	2
	Secure cookies error Locked	Roberto Catanuto 3 Sept 2021	Tradebloc Tim Clark 10 Sept 2021	1
	Privacy Policy on School Moodle Website Locked	Roberto Catanuto 26 Oct 2021	Roberto Catanuto 26 Oct 2021	0
	Critical error in "Authenticated user" role Locked	Roberto Catanuto 29 Mar 2022	Roberto Catanuto 30 May 2022	2
	Avoiding LDAP data in plain text when you check the source code from a browser Locked	Robespierre Galindo 16 Feb 2017	Randy Thornton 16 Feb 2017	3
	Hacking and security Locked	Robin Greaves 17 Aug 2007	Timothy Takemoto 8 Feb 2009	34
	Fun times with Poisoned Cookies! Locked	Robin Stark 22 Dec 2016	Randy Thornton 23 Dec 2016	1
	BURP scan: Session token in URL and Short Anti-CSRF token value detected Locked	Rod Spears 24 Sept 2020	Rod Spears 25 Sept 2020	5
	SQL Injection in Moodle = 1.9.5 Locked	Rodolfo Matos 25 June 2009	Pierre-Louis LAMBALLAIS 6 Apr 2010	8
	Input Validation-File Upload vulnerability Locked	Rogelio Jr. Dela Cruz 3 July 2015	James McLean 23 July 2015	4
	Registration Codes Locked	Roger Shindell 22 Apr 2010	Miguel Guhlin 22 Apr 2010	2
	Teacher and Student name visibility Locked	Roger Clark 20 Jan 2011	Roger Clark 21 Jan 2011	2
	SELinux is preventing httpd from using files /boot Locked	roger griffiths 14 Aug 2011	Ken Task 3 July 2012	3
	Anonymizing Data on Students Locked	Roger Domínguez Argemí 12 Mar 2019	Zoran Jančić 20 Mar 2019	5
	Compliance with GDPR: User data is not completely deleted but quiz statistics are affected.	Rok P 13 Sept 2023	Rok P 2 Nov 2023	1
	Cookie Consent Warning mandatory in Europe Locked	Rolf Cper 16 Dec 2014	Rolf Cper 18 Dec 2014	3
	How do I finetune Website Copier HTTrack or Cyotek WebCopy? Locked	Rolf Cper 12 Dec 2018	Rolf Cper 12 Dec 2018	0
	User input is being blocked by Azure WAF Locked	Roman Markin 26 Dec 2022	Roman Markin 16 Jan 2023	2
	Can't log in after restoring database on SQL server Locked	Ronald Vyhmeister 22 Mar 2023	Ronald Vyhmeister 22 Mar 2023	0
	Security Moodle Locked	Rondi Ariyanto 27 July 2017	Rondi Ariyanto 7 Aug 2017	13
	Assign roles in System Locked	Roseli Mat Nor 18 Feb 2011	reham ali 15 Nov 2014	10
	moodle 2.0 not userfriendly anymore Locked	Roseli Mat Nor 18 Feb 2011	Visvanath Ratnaweera 1 Apr 2011	1
	Students all see Question Bank Locked	Rosemary Camilleri 13 July 2022	Gemma Lesterhuis 15 July 2022	2
	Moodle 'Site News' is public, it needs to be private. Help. Locked	roshan kolar 29 Apr 2018	roshan kolar 1 May 2018	2
	A required parameter token was missing Locked	Ross Quinnell 26 Oct 2018	Ross Quinnell 30 Oct 2018	2
	Moodle not caching/Storing LDAP username and passwords Locked	RSA NOC 14 Mar 2017	RSA NOC 15 Mar 2017	7
	Request for password change to show on Logs Locked	Ruan Combrink 1 Mar 2022	Ruan Combrink 1 Mar 2022	0
	Vulnerable and Outdated Components- YUI 2.9.0	Ruchi Dixit 27 Dec 2023	Ruchi Dixit 1 Jan 2024	5
	approved by admin on membership Locked	Ruhi Beçenek 18 May 2011	Ruhi Beçenek 18 May 2011	0
	Moodle Word and PDF documents opening with spam Locked	rui gomes 16 Oct 2009	Mauno Korpelainen 16 Oct 2009	1
	Access Reserved to Moodle Maintenance Mode Locked	Rui Costa 7 Aug 2018	Mary Cooch 7 Aug 2018	1
	Security Process Locked	rupamoy bhattacharya 23 Jan 2013	Dan Poltawski 30 Jan 2013	1
	LDAP SSO on Windows Locked	rupamoy bhattacharya 1 Mar 2013	Iñaki Arenaza 2 Mar 2013	1
	SSO in Moodle with Oracle DB Locked	rupamoy bhattacharya 16 Dec 2013	Howard Miller 31 Dec 2013	1
	Password Encryption MD5 plain text Locked	Rupesh Kumar 20 Nov 2015	Tim Hunt 11 Mar 2016	4
	Hide real name hide email Locked	Russ Titsworth 21 Oct 2009	Stephan Hahn 4 Nov 2009	1
	Plugin to upload and secure external exam results? Locked	Ruth Horak 5 Feb 2018	Ruth Horak 5 Feb 2018	0
	Secure cookies in Moodle Locked	Ryan Larkin-Smith 28 July 2010	Ryan Larkin-Smith 29 July 2010	2
	htaccess issues Locked	Ryan Larkin-Smith 11 Mar 2011	Ryan Larkin-Smith 11 Mar 2011	0
	External Database authentication/enrollment secure communication on a remote server Locked	Ryan Foster 11 Jan 2014	Ryan Foster 13 Jan 2014	2
	Privacy Policy on Every Signon Locked	Ryan Campbell 21 July 2020	Ryan Campbell 21 July 2020	0
	[Dev] Is there a hook that will help me to secure (filter) User information.	Ryan Behague 10 Aug 2023	Ryan Behague 10 Aug 2023	0
	Disabling Moodle’s Site Support Request to Combat Spam: Seeking Advice	Ryan Manus 28 Mar 2024	Ryan Manus 28 Mar 2024	0
	Status Code 403 Locked	Ryan Christian Tabay 30 May 2022	Ken Task 30 May 2022	2
	Multiple LDAP/AD forest support Locked	S P 29 Apr 2009	S P 29 Apr 2009	0
	Deny access to/Hide participant listing when logged in - enrolled students Locked	s n 27 July 2009	Chuck Barry` 4 Sept 2014	22
	SSL Cert on Content switch Locked	S Parker 24 July 2017	Harsh Patel 15 Dec 2017	3
	'loglevel' cookie - what does it do?	S G 11 May 2023	S G 11 May 2023	0
	Security question about user created via API Locked	S. De Luca 5 May 2022	S. De Luca 5 May 2022	4
	Secure MP4 videos Locked	Sa Ku 9 Apr 2019	Matt Bury 11 Apr 2019	5
	The path supplied to Clam is invalid Locked	Saeed Amiri 31 Oct 2014	Ken Task 8 Nov 2014	14
	Database connection failed Locked	Safeen Shun 5 May 2020	koen roggemans 7 May 2020	9
	User Policy Locked	saif khan 21 Oct 2022	saif khan 21 Oct 2022	0
	Automatic https: redirection Locked	Sali Kaceli 24 Jan 2015	Bret Miller 24 Jan 2015	1
	Anti-Virus in Moodle Locked	Sally Lacbay 22 Sept 2011	Sally Lacbay 23 Sept 2011	2
	Can't edit moodle's password policy Locked	Salome Tkhilaishvili 28 Dec 2018	Salome Tkhilaishvili 21 Jan 2019	2
	Checkpoint Firewall blocking Moodle Posts Locked	Sam McNeill 22 May 2012	Eric Katchan 18 July 2014	5
	After Spam Account Protection, Current Students Cannot Log-in Locked	Sam Geppi 29 Apr 2013	Helen Foster 30 Apr 2013	7
	Moodle ClamAV Scan Log? Locked	Sam Pearson 20 Nov 2014	Sam Pearson 20 Nov 2014	0
	Cell-like groups possible? Locked	Sam Stevens 5 Dec 2018	Sam Stevens 5 Dec 2018	0
	Scorm opening in a new window Locked	Sam B 2 Sept 2021	Sam B 2 Sept 2021	0
	How to download the course content using moodle web service Locked	Sameer Kshirsagar 10 July 2015	Sameer Kshirsagar 10 July 2015	0
	Moodle security overview Locked	Sami Hwang 14 Mar 2013	Helen Foster 26 Mar 2013	3
	Time until security vulnerabilites are released Locked	Samuel Witzig 16 May 2011	Samuel Witzig 16 May 2011	0
	root@localhost Locked	Sandeep Prasad 17 June 2021	Randy Thornton 18 June 2021	1
	Maintenance cron; student email security Locked	Sandy Stockholm 20 Nov 2013	Guillermo Madero 20 Nov 2013	1
	Tiny Flaw in Moodle/turnitin Link Locked	Sanjok Gurung 24 Nov 2014	Sanjok Gurung 26 Nov 2014	2
	Password Security in moodle 2.9 or greater Locked	Sanmeet Singh 19 July 2016	Sanmeet Singh 19 July 2016	4
	Resetting forgot password without email Locked	Sanni Rinne 26 Sept 2017	Sanni Rinne 2 Oct 2017	4
	Moodle URL Locked	Sara MAhmoud 16 Feb 2015	Sara MAhmoud 16 Feb 2015	2
	admin password no longer works Locked	Sarah Swierk 28 Sept 2011	Mauno Korpelainen 28 Sept 2011	1
	non-downloadable content Locked	Sarah Knight 1 Mar 2012	Mary Cooch 1 Mar 2012	1
	Upgrading Apache, OpenSSH, and OpenSSL packages Locked	Sarath P 23 Nov 2022	Ken Task 23 Nov 2022	1
	SSL issue in moodle home page. Locked	sarendar vennapureddy 31 May 2019	Visvanath Ratnaweera 7 Feb 2020	8
	Security for Online services Locked	sasa lk 10 July 2014	sasa lk 10 July 2014	0
	Unexpected maintenance mode message may be hacked Locked	Satinderpal Singh 2 July 2021	Satinderpal Singh 2 July 2021	0