Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Moodle security concern	Karan Rawat 23 Jan 2024	Brendan Heywood 25 Jan 2024	5
	Security Concern	Karan Rawat 7 Mar 2024	Paul Holden 8 Mar 2024	1
	How do I hide poples personal details in course participants section? Locked	karen lawrence 28 Feb 2010	Glenys Hanson 1 Mar 2010	4
	Hiding IP Addresses in Reports Logs Locked	Karen Crumbley 18 Aug 2011	Howard Miller 18 Aug 2011	3
	Course visibility Locked	Karen Atkinson 2 Oct 2013	Karen Atkinson 17 Oct 2013	3
	question type plugin specific feedback Locked	Karin Borm 12 Sept 2019	Tim Hunt 13 Sept 2019	3
	Mixed Authentication Locked	Karl Goddard 11 Dec 2009	Karl Goddard 12 Dec 2009	4
	2.0.2: ClamAV Locked	Karsten Burger 12 Apr 2011	Karsten Burger 12 Apr 2011	0
	Arbitrary records injected to post table Locked	Kasım Burak Özdemir 31 May 2022	Kasım Burak Özdemir 31 May 2022	0
	Audit log of user activity Locked	Kate Dawson 15 Apr 2019	Randy Thornton 27 Apr 2019	6
	Sending anonymous email Locked	Kate Rhodes 10 July 2020	Kate Rhodes 16 July 2020	4
	Hide ip address from reports Locked	Kate James 12 Apr 2021	Kate James 12 Apr 2021	0
	Katharine Edson - How secure is to use Moodle? Locked	Katharine Edson 8 Oct 2016	Christopher McCool 22 Oct 2016	5
	Self Enrolment - enrolment key issue Locked	Katrina Nicholson 6 Mar 2015	Albert Ramsbottom 2 June 2015	6
	How to "Digital sign" the logs within the moodle Locked	kc yau 21 June 2012	Hubert Chathi 22 June 2012	3
	time-stamping and digital signature Locked	kc yau 3 July 2012	kc yau 3 July 2012	0
	Read Only Site Locked	Kehinde Okesanjo 12 Sept 2011	Antonio Negro 30 July 2016	9
	LDAP Errors with Novell E-Directory Locked	Keith Giles 12 Dec 2009	Iñaki Arenaza 14 Dec 2009	1
	Company demanding domain access - connect as Locked	Keith W 28 Oct 2012	Russell Waldron 21 Nov 2012	1
	Developer Admin Access Security Locked	Keith VW 15 Aug 2020	Keith VW 11 Sept 2020	2
	Added unique login plug-in normally installation,but not work Locked	Kelvin Cheung 23 Nov 2013	Kelvin Cheung 23 Nov 2013	0
	Moodledata ... Moodle Code ... htaccess-dist.txt files Locked	Ken Task 25 Jan 2016	Ken Task 25 Jan 2016	0
	GDPR plugins Moodle 3.3 Locked	Ken Task 19 May 2018	Ken Task 20 May 2018	5
	Host with LiquidWeb - mod_security rules Locked	Ken Task 25 Dec 2018	Ken Task 29 Dec 2018	2
	Moodle.org tracker ... Locked	Ken Task 4 Nov 2019	Michael Hawkins 4 Nov 2019	1
	When QA testers test upcoming releases, do ... Locked	Ken Task 11 Nov 2019	AL Rachels 11 Nov 2019	4
	Can WebServices calls or SCORMS circumvent? Locked	Ken Task 31 Jan 2020	Ken Task 31 Jan 2020	0
	mod_security rule to ignore a false positive ... assistance Locked	Ken Task 15 Nov 2021	Carlos del Río 7 June 2022	5
	Just a 'heads up' ... something you might want ot check ... depending. Locked	Ken Task 27 Mar 2023	Ken Task 27 Mar 2023	0
	Got a message from google: Changes to Restricted Scopes API Access	Ken Task 12 Sept 2023	Ken Task 12 Sept 2023	2
	How to hide bbb secret key on moodle? Locked	Kenan Babacic 25 Sept 2020	Tim Hunt 26 Sept 2020	1
	Content lockdown Locked	Kenneth Hess 21 Mar 2019	Jon Bolton 24 Mar 2019	6
	Your DMARC record failed for your last newsletter from hubspotemail	Kenny CALVAT 23 June 2023	Sebastian Simpson 27 June 2023	2
	Enroll Users Without Email Confirmation Locked	Kenton de Jong 21 June 2014	Kenton de Jong 21 June 2014	0
	Pop-Up Box for Login Appearing?! Locked	Kerry Moralee 29 Sept 2010	Kerry Moralee 29 Sept 2010	0
	GDPR Plugins - some questions Locked	Kerry Watt 19 Apr 2018	Jun Pataleta 19 July 2018	32
	User data in joint activities Locked	Kerstin Namuth 28 Sept 2018	Kerstin Namuth 28 Sept 2018	0
	Creating Static Student Emails Locked	Kester David 1 June 2010	Jon Witts 9 June 2010	3
	Apache Security - Moodle Locked	Kevin Whitney 28 Oct 2006	Kevin Whitney 28 Oct 2006	0
	How to stop my course files being copied Locked	Kevin Sowden 31 Mar 2009	rupert mackenzie 8 Apr 2009	11
	Securely setting up Moodle 1.9 for Membership requests Locked	Kevin Duggan 18 Oct 2013	Kevin Duggan 19 Oct 2013	7
	Login error? Locked	Kevin Burton 7 Dec 2013	Kevin Burton 7 Dec 2013	0
	Useing HTTPS for logins Locked	Khaled Hamadmad 21 July 2011	Chad Outten 22 July 2011	2
	How to prevent script tag in search URL Locked	Khant Kyaw 14 Sept 2018	Ruslan Kabalin 14 Sept 2018	1
	How to stop students seeing each other Locked	Kim Ellis 19 July 2022	Gemma Lesterhuis 19 July 2022	1
	Moodle Cyber Security Training Locked	Kit D 6 Feb 2023	Tim Hunt 8 Feb 2023	1
	Deleting user - anonymising data Locked	Kit D 22 Mar 2023	Gemma Lesterhuis 22 Mar 2023	2
	Teachers should only see theire own students/courses Locked	Klaas Hobo 21 Mar 2013	Tim Childe 9 Jan 2014	14
	"view courses without participation" - not wanted / and changed? Locked	Klaas Hobo 17 Nov 2016	Klaas Hobo 19 Nov 2016	5
	Students are able to list user names of the whole system Locked	Klaus Kirchner 15 Mar 2010	Klaus Kirchner 29 Mar 2010	9
	Role permittung access only to specified courses Locked	Klaus Westermann 4 Dec 2012	Klaus Westermann 4 Dec 2012	0
	login to Moodle from a script/application Locked	Kris Van Gelder 25 Feb 2019	Martin Carruth 20 Aug 2019	4
	Users can't see their own "full profile" Locked	Krisha Moeller 15 Dec 2017	Krisha Moeller 15 Dec 2017	0
	Unsecured files in course with password-protected guest access Locked	Kuriko A 6 June 2014	Kuriko A 6 June 2014	0
	Limiting the behavior of the "tags" page Locked	L Cramer 12 Jan 2012	L Cramer 12 Jan 2012	2
	User database table crashed Locked	Laine Phillips 28 June 2013	Ken Task 29 June 2013	4
	Restrict user to send JS code in messages	lalit Mittal 7 Nov 2023	lalit Mittal 10 Nov 2023	2
	Trying to see if I have been hacked! Locked	Lance Hinds 27 Apr 2013	Lance Hinds 1 May 2013	5
	Access to Moodle Locked	Lance Hinds 10 Jan 2018	Ray Lawrence 11 Jan 2018	5
	Moodle broke with switching to https Locked	Lance Hinds 24 Mar 2022	Ken Task 25 Mar 2022	6
	Students without email Locked	Larry Lueck 5 Sept 2013	Ken Task 5 Sept 2013	1
	New User Email Address Message Locked	Lauren Ziegler 16 July 2015	Lauren Ziegler 16 July 2015	2
	Is this a VULNERABILITY? Locked	LauriBeth Hull 31 July 2010	LauriBeth Hull 31 July 2010	0
	Debian SSL Locked	LauriBeth Hull 15 Feb 2011	Deleted user 15 Feb 2011	1
	MOODLE :: Security Single-SignOn Locked	Lavanya Manne 1 Dec 2014	Lavanya Manne 15 Dec 2014	3
	Problem with HTTPS Locked	LAVS EDUCATOR 19 Nov 2018	AL Rachels 20 Nov 2018	1
	HTTP to HTTPS Locked	LAVS EDUCATOR 25 Nov 2018	Ken Task 25 Nov 2018	1
	worms infect site Locked	Lázaro José Carneiro de Sousa 29 Sept 2014	François Lizotte 21 Nov 2014	16
	Solution worms infect site Locked	Lázaro José Carneiro de Sousa 6 Oct 2014	Lázaro José Carneiro de Sousa 6 Oct 2014	0
	Using Moodle to collect consent. Locked	Lazo Basic 23 Apr 2023	Mary Cooch 23 Apr 2023	1
	an error " Invalid Login Token" in log file Locked	Le Minh Tuan 28 Nov 2022	Le Minh Tuan 28 Nov 2022	0
	Privacy in courses Locked	Deleted user 7 Aug 2022	Deleted user 13 Aug 2022	6
	Locking documents so that they can not be printed or downloaded directly? Locked	Lee Richards 26 Feb 2018	Randy Thornton 27 Feb 2018	5
	Disable Password Expiry Locked	Lemmy Naught 19 July 2012	Guillermo Madero 20 July 2012	1
	Login Problems Locked	Leon Pienaar 19 Nov 2010	Leon Pienaar 19 Nov 2010	0
	SECURITY: Disable themes.googleusercontent and other cross-site linking Locked	Leon Franken 10 July 2014	Leon Franken 10 July 2014	0
	Data requests retention period Locked	Leon Erasmus 9 Nov 2018	Leon Erasmus 9 Nov 2018	2
	Messaging system only sitewide or restricatble? Locked	Leon van Lack 3 Feb 2022	Michael Hawkins 4 Feb 2022	2
	Details for MSA-21-0030 Insufficient escaping of users' names in account confirmation email? Locked	Leon Stringer 23 June 2022	Leon Stringer 24 June 2022	2
	Passwords in clear text? Locked	Leslie Sandoval 4 June 2009	Gregg Ciabattoni 16 Aug 2010	2
	GDPR and Custom Reports Locked	Lester Cunningham 20 Apr 2018	Randy Thornton 27 Apr 2018	2
	thematoweb.com site Locked	Leta Rogers 23 Sept 2014	Richard Oelmann 23 Sept 2014	1
	Is Moodle ok on GitHub? Locked	Leticia Dark-rose 11 Feb 2016	Evan Donovan 20 Feb 2016	9
	Move Moodle Config Outside of Web Root Locked	Lewis Hackfath 9 Feb 2016	James McLean 10 Feb 2016	12
	Disabling Cookies Locked	Lexi K 31 May 2022	Lexi K 12 July 2022	2
	Some of our users are doing horrible things with Javascript	Lexy Walker 8 Sept 2023	Howard Miller 3 Nov 2023	8
	Vulnerable software detected on your account Locked	Lhoussaine Moughli 23 Nov 2010	Lhoussaine Moughli 25 Nov 2010	11
	$dataroot ownership and permissions Locked	Liam O'Riordan 10 Feb 2010	Visvanath Ratnaweera 12 Mar 2010	1
	Exporting all users with passwords? Locked	Libby Vicky 17 June 2009	Libby Vicky 17 June 2009	0
	spam accounts	Lisa Hunt 28 July 2023	Lisa Hunt 28 July 2023	0
	CVE-2021-3943 Proof of Concept Locked	Lois R. McBee 22 Nov 2021	Andrew Lyons 6 Dec 2021	4
	Plugin privacy registry shows nothing Locked	Lorin Toews 15 Apr 2019	Peter Diedrichs 17 Feb 2020	3
	Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 15 Nov 2016	10
	Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 14 Nov 2016	2
	Help with groups/permissions etc. Locked	Luc Meredith 14 Jan 2014	Emma Richardson 14 Jan 2014	2
	My Moodle site infected with malware: how to fix it? Locked	Luca Oppizzi 30 Nov 2012	alice louis 6 Dec 2014	5
	how to set different views for a database activity for different users or groups Locked	Luca Tomsi 31 July 2017	AL Rachels 20 Aug 2017	8
	target=_blank Locked	Lucien Stals 10 Oct 2019	Mathew Gancarz 11 Oct 2019	4
	How to hide/disable courses and quiz? Locked	Lucilla Wang 31 May 2016	Lucilla Wang 6 June 2016	17
	Who updated student profile Locked	Luis de Vasconcelos 19 Oct 2010	enric alegre 11 Dec 2010	2