Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	URL security testing- Any interest? Locked	david millians 1 Dec 2014	david millians 2 Dec 2014	2
	Setting up a consumer key on a moodle site Locked	David Price 22 Feb 2015	David Price 22 Feb 2015	0
	Student Privacy Locked	David Kirk 8 Apr 2015	Hartmut Scherer 8 Apr 2015	2
	Reset of admin password Locked	David Paige 2 June 2015	Ranil Peiris 26 May 2016	9
	Blocking access to Users from outside the country Locked	david english 24 Jan 2016	Matt Bury 25 Jan 2016	12
	Category Permissions and Restrictions Locked	David Van Thillo 17 Aug 2016	David Van Thillo 17 Aug 2016	0
	NET::ERR_CERT_AUTHORITY_INVALID 3.2.2 Locked	David Robertson 2 May 2017	Amit Shingala 5 Sept 2017	9
	SSL and Moodle on a Subdomain Locked	David Dinh 2 Oct 2017	David Dinh 3 Oct 2017	5
	Model for managing institution groups Locked	David Humphreys 24 Oct 2017	David Humphreys 24 Oct 2017	0
	Lots of requests in access_log for outbound connections Locked	David White 16 May 2019	Evan Donovan 19 May 2019	15
	private connection Locked	David Owens 23 Aug 2022	Ken Task 23 Aug 2022	1
	smtpauthtype has no XOAUTH2 option	David Topps 30 Mar 2023	Jerry Lau 19 Jan 2024	5
	An option for bulk clearing data privacy requests from the list?	David Lyall 16 Apr 2024	David Lyall 16 Apr 2024	0
	Getting ClamAV Daemon working in Ubuntu 20.04 Locked	Davide Longo 11 Oct 2020	Tim Hunt 13 Oct 2020	1
	Making embedded content visible for roles other than Admin Locked	DaVinci Menno 22 May 2020	DaVinci Menno 22 May 2020	0
	Moodle SimpleSAML Error Locked	Dax Nac 15 Dec 2017	Leon Stringer 15 Dec 2017	1
	URGENT HELP!! ADMIN ACCOUNT HACKED Locked	Deb Smith 3 May 2011	George Henley 14 Apr 2012	18
	How can I block cURLs to eliminate phony accounts? Locked	Deb Smith 18 Apr 2019	Ken Task 18 Apr 2019	1
	Malicious User Profile - How can I delete Locked	Debbie McDonald 1 July 2008	J B 13 Oct 2008	7
	New to Moodle, security issue? Can anyone advise please? Locked	Debbie Kay 23 Sept 2009	Debbie Kay 24 Sept 2009	3
	Exclude IP address Locked	Debbie McDonald 4 Nov 2010	Dale Davies 17 Nov 2010	2
	How to force clear session cookie on logout for all resources Locked	Debbie Kay 6 Dec 2019	Debbie Kay 6 Dec 2019	0
	DRM and Course content protection. Locked	Deepak Tripathi 1 Dec 2017	Dave Perry 4 Dec 2017	1
	User's Choice of Course Locked	deepak rs 4 Dec 2018	deepak rs 4 Dec 2018	0
	Quiz Answers "Keywords" Not Working Locked	deepak rs 4 Dec 2018	deepak rs 5 Dec 2018	3
	Moodle Site Redirecting to an unknown site Locked	deepika thakur 29 May 2014	Emma Richardson 29 May 2014	1
	Guest login Suddenly stopped Working Locked	Deepika Sahu 15 Oct 2020	Deepika Sahu 15 Oct 2020	0
	Moodle data locking Locked	Denis Boroja 19 July 2013	Visvanath Ratnaweera 26 July 2013	2
	Wanted: reference on stability/security of Moodle Locked	Derek Chirnside 24 Apr 2015	Derek Chirnside 24 Apr 2015	0
	"Invalid Login" if country code is lowercase Locked	Derek Chaplin 9 Apr 2016	Derek Chaplin 9 Apr 2016	0
	Contact Site Support - Ransomware Threat Locked	Deryck Walker 25 Jan 2023	Deryck Walker 27 Feb 2023	9
	LDAP Question Locked	Devin Roush 19 Aug 2011	Michael Woods 9 Sept 2011	3
	My moodle site is infected with malware, how to fix?	dharmik dharmik 25 July 2023	Ken Task 27 July 2023	11
	The guest role "guest" is incorrectly defined! Locked	Di Juwel 9 June 2014	Emma Richardson 9 June 2014	1
	setting the allowed mimetypes for file upload as a security measure Locked	Di Juwel 15 Jan 2015	Howard Miller 26 May 2015	2
	are security issues pathes already included in the next vessions of moodle? Locked	Di Juwel 6 May 2015	Richard Oelmann 12 May 2015	5
	can a user steal another user's session by stealing it's session cookie? Locked	Di Juwel 12 May 2020	Michael Hawkins 14 May 2020	3
	Lots of invalid login token errors in the logs Locked	Diane Soini 9 Jan 2019	Diane Soini 12 Jan 2019	14
	SSO Locked	Didier T. 18 Nov 2019	Didier T. 18 Nov 2019	0
	How to allow guests to view the MRBS calendar? Locked	Dieter D. 14 Feb 2013	Dieter D. 14 Feb 2013	0
	How to assign roles to guests? Locked	Dieter D. 25 Feb 2013	Mary Cooch 25 Feb 2013	1
	Custom Css Locked	Deleted user 4 Oct 2011	Deleted user 4 Oct 2011	0
	Disable password Unmask option Locked	Dimitris Chatzipanagiotidis 17 Jan 2013	Dimitris Chatzipanagiotidis 21 Jan 2013	4
	website hack Locked	dina patil 28 May 2013	Mary Cooch 28 May 2013	1
	detailed log of admins/teacher FOR admin	Direktorat Digitalisasi Pembelajaran 2 Aug 2023	Direktorat Digitalisasi Pembelajaran 22 Aug 2023	3
	Securing moodle courses / intellectual property Locked	DJSH H 2 May 2020	DJSH H 2 May 2020	2
	moodlesession value security issue Locked	Dnyaneshwar K 21 Apr 2021	Sergio Rabellino 21 Apr 2021	3
	automated backups Locked	Dom F 12 May 2018	Paul Raper 14 May 2018	6
	How to assess a data breach Locked	Dom F 22 May 2018	Visvanath Ratnaweera 22 May 2018	5
	Restrict access by enrolment method Locked	Dominique Bauer 24 Sept 2017	Randy Thornton 29 Sept 2017	5
	Moodle Porn Update Locked	Don Won 4 Sept 2009	Marcus Green 6 Sept 2009	6
	SSO - Shared Cookie with Wordpress Locked	Don Schwartz 13 May 2015	Howard Miller 14 May 2015	1
	Is Moodle Adminer a security risk? Locked	Don Schwartz 2 Nov 2019	Ken Task 2 Nov 2019	2
	Authentication Keys Plugin Needed Locked	Donna Betancourt 9 Mar 2018	Donna Betancourt 9 Mar 2018	0
	'chmod(): Operation not permitted' in global search Locked	Dorel Manolescu 23 Feb 2010	Dorel Manolescu 23 Feb 2010	0
	User deletion not GDPR compliant : personal data not deleted (lastip) Locked	Dorel Manolescu 29 June 2018	Adrian Greeve 1 July 2018	3
	student from Mumbia, India Locked	Doris Johnson 3 Feb 2011	Lars-Olof Krause 4 Feb 2011	1
	New user email regisration by group key Locked	Doug Stevens 20 May 2010	Doug Stevens 20 May 2010	0
	Need ideas. Unique issue Locked	Doug Moody 19 Aug 2011	Jonathan Newman 2 Nov 2011	4
	Parents shouldn't know things Locked	Doug Moody 26 Sept 2011	Mary Cooch 27 Sept 2011	3
	IP Blocker question Locked	Doug McGlathery 23 Mar 2013	Klaas Hobo 23 Mar 2013	2
	Can't get this permission to work Locked	Doug Moody 30 May 2013	Mary Cooch 31 May 2013	10
	SSL Certificate Locked	Doug Bell 8 Oct 2013	Jerry West 17 Oct 2013	2
	GeoLite Database Locked	Doug Moody 21 June 2017	Ken Task 21 June 2017	1
	Disable some right click options? Locked	Doug E. Wray 12 Nov 2022	Sergio Rabellino 14 Nov 2022	3
	Reviewing messages table for bullying incidents Locked	DR LMS 26 Mar 2017	Mike Hoddee 11 Apr 2017	1
	Site Policy not updating- help!	Dr Melody Smith 6 Apr 2024	Dr Melody Smith 6 Apr 2024	0
	Site stopped due to HTML/Dloader.AA18!tr trojan Locked	Dr. B. Gültekin Çetiner 18 Jan 2022	Michael Hawkins 27 Jan 2022	1
	Hide courses from groups of users Locked	Duanne Scheepers 2 Feb 2010	Rose Phoey 6 Feb 2015	4
	User Audit in Prison Environement Locked	Duncan Blake 19 July 2020	Visvanath Ratnaweera 22 July 2020	5
	receive SMS Locked	Duncan Duccatti 13 July 2022	Duncan Duccatti 13 July 2022	0
	Site policy not showing in IE Locked	Dusan Ristic 10 Dec 2010	Steve Evans 28 Apr 2011	5
	Viruses in moodledata found Locked	Dzevad Turcalo 11 July 2022	Ken Task 12 July 2022	9
	Manager access at CATEGORY level? Locked	E Martin 17 Aug 2019	E Martin 17 Aug 2019	0
	Guest user Locked	E HP 19 July 2020	E HP 21 July 2020	3
	Stop simultaneous logins Locked	Ebenezer Le Page 17 July 2009	Howard Miller 17 July 2009	1
	Microsoft Streams and 3rd party cookies Locked	Ecole Mosaic 14 Apr 2020	Ecole Mosaic 14 Apr 2020	0
	My site is listed as suspicious site !! help mee Locked	eda karacelebi 15 Aug 2011	Iñaki Arenaza 21 Aug 2011	6
	Fingerprint Scanner to Access Moodle Locked	Eddie Sargent 15 Dec 2014	Joseph Thibault 16 Dec 2014	1
	Security check Locked	Eddy Belteu 10 June 2011	Eddy Belteu 13 June 2011	2
	Legal issue Locked	Eder Fernandez 23 July 2010	Michael Hughes 23 July 2010	4
	Security "Forbidden" error Locked	Eder dos Santos 11 June 2014	Eder dos Santos 11 June 2014	0
	Authentication problem Locked	eduardo moisa 7 Jan 2016	eduardo moisa 7 Jan 2016	1
	Moodle data folder permissons Locked	Eduardo Aspe 29 May 2020	Visvanath Ratnaweera 1 June 2020	10
	Added security maybe along the lines of side certificates Locked	Edward Murray 18 Oct 2012	Edward Murray 18 Oct 2012	0
	Insecure Dataroot Locked	Edward Shaw 28 Feb 2013	Ken Task 28 Feb 2013	1
	Set flag to force user to change password Locked	Edward Wahnström 13 Nov 2020	Randy Thornton 14 Nov 2020	2
	OpenID Connect/Microsoft 365 Integration Locked	Edward West 21 June 2021	Edward West 21 June 2021	0
	Force Front page sign in Locked	Edwin Cruz 31 July 2015	Sam Alken 31 Aug 2015	2
	Auto login a user in Moodle Locked	Egidijus E 27 May 2022	Egidijus E 27 May 2022	0
	Windows Server 2019 ADFS SSO miniOrange Locked	Egidijus E 9 July 2022	Egidijus E 9 July 2022	0
	Integrating Hall Pass Systems with Moodle for K-12 Schools	ehall pass 1 Mar 2024	Ken Task 1 Mar 2024	1
	Vulnerability assessment check on Moodle Locked	Ejiro Ekpogbe 9 May 2022	Ejiro Ekpogbe 10 May 2022	9
	Deleted users anonymization Locked	eldoom 7 16 Nov 2020	Randy Thornton 26 Nov 2020	3
	Is LDAPS necessary when using https (ssl) login? Locked	elearning developer 22 Oct 2010	Waldemar Basista 4 Jan 2011	2
	Security Warnings! Locked	Eliecer Acevedo Patiño 23 June 2015	Eliecer Acevedo Patiño 23 June 2015	0
	Restricting Access by Cohort Locked	Elizabeth Ford 1 Mar 2019	Zoran Jančić 15 Mar 2019	1
	Access to moodledata files Locked	elog wo surname 7 June 2010	Bartosz Cisek 30 June 2010	2
	Improved SPAM detector (GSOC2009 proposal) Locked	Eloy Lafuente (stronk7) 24 Mar 2009	Priyanka M 4 Apr 2011	5
	yui library Locked	Emanuel Delgado 27 Oct 2010	Emanuel Delgado 27 Oct 2010	2