Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next

Discussion	Started by	Last post	Replies
EU General Data Protection Regulation (GDPR) compliance	Martin Dougiamas 17 May 2017	Prince Namdev 9 Jul 2019	100
Moodle security concerns - where's the source of information? Locked	Cris Fuhrman 27 Aug 2004	Michael Penney 6 Feb 2005	4
Active Directory Security Locked	Neil Griffiths 15 Oct 2005	Neil Griffiths 15 Oct 2005	0
Security advice Locked	neil watson 26 Jun 2006	neil watson 26 Jun 2006	2
Apache Security - Moodle Locked	Kevin Whitney 28 Oct 2006	Kevin Whitney 28 Oct 2006	0
How to secure Moodle website from being hacked Locked	K.James Mathai 28 Mar 2008	Helen Foster 2 Apr 2008	6
privacy for students/users Locked	Nicole Marcisz 3 Apr 2008	Helen Foster 3 Apr 2008	1
Security Notification after upgrade from 1.8 to 1.9 Locked	Marcus Tremble 27 May 2008	Ken Wilson 27 May 2008	2
"Open to Google" question Locked	James Phillips 6 Jun 2008	James Phillips 6 Jun 2008	0
Keeping informed about security Locked	Alexandro Colorado 9 Sep 2008	Helen Foster 9 Sep 2008	1
How to subscribe to securityalerts mailing list? Locked	Mike Norton 16 Sep 2008	Mike Norton 17 Sep 2008	3
Unusual security setup help needed Locked	Scott Severn 8 Oct 2008	Scott Severn 8 Oct 2008	0
Malicious User Profile - How can I delete Locked	Debbie McDonald 1 Jul 2008	J B 13 Oct 2008	7
Windows XP Security Locked	Dave Rea 14 Oct 2008	Richard Enison 18 Oct 2008	5
reCAPTCHA page and security Locked	Jennie Lawrence 20 Oct 2008	ETH Zürich 23 Oct 2008	3
Windows Server 2003 & WAMP Production Level Security Locked	Gareth J Barnard 29 Oct 2008	Gareth J Barnard 29 Oct 2008	0
Add security mecanism SSL to handle user connection on Moodle/CIMA Locked	chhivhorng ly 6 Nov 2008	chhivhorng ly 25 Nov 2008	7
How to handle module vulnerabilities? Locked	Mauno Korpelainen 3 Dec 2008	Helen Foster 4 Dec 2008	8
Moodle Security Locked	Marc Grober 30 Oct 2008	Anthony Borrow 16 Dec 2008	74
What Am I Missing? Locked	Marc Grober 6 Feb 2009	Petr Skoda 6 Feb 2009	1
Forum rules proposal Locked	Petr Skoda 6 Feb 2009	Mauno Korpelainen 6 Feb 2009	1
251 Days and the Clock Stops ;-) Locked	Clock Stops 5 Feb 2009	Tim Hunt 6 Feb 2009	1
Hacking and security Locked	Robin Greaves 17 Aug 2007	Timothy Takemoto 8 Feb 2009	34
Login as a Guest not working Locked	Janice Calcei 6 Feb 2009	Janice Calcei 9 Feb 2009	3
Randomize Passwords Locked	J S 10 Feb 2009	Tim Hunt 10 Feb 2009	1
Offering the same courses to many enterprises (privacy concerns) Locked	Deleted user 10 Nov 2008	Helen Foster 11 Feb 2009	12
Spam hidden in front page div Locked	Colin Matheson 11 Feb 2009	Mauno Korpelainen 11 Feb 2009	2
Create User Locked	Gradus Kooistra 13 Feb 2009	Gradus Kooistra 13 Feb 2009	0
Locked out of my Moodle Locked	P Keyse 16 Feb 2009	Mauno Korpelainen 16 Feb 2009	1
Prevent profile spam on your Moodle site Locked	Martin Dougiamas 10 Feb 2009	Marcus Green 16 Feb 2009	4
logs Locked	Yanislav Galyov 17 Feb 2009	Tim Hunt 17 Feb 2009	3
Minimal update against MDL-17799? Locked	Thomas Robb 18 Feb 2009	Tim Hunt 19 Feb 2009	4
How can I configure restrictions to some file extensions uploads Locked	Walter Alrusso 19 Feb 2009	Walter Alrusso 19 Feb 2009	0
"Registered user role" and "Default course role (global)" in critical status Locked	Antonello Moneta 24 Feb 2009	Antonello Moneta 24 Feb 2009	0
Unable to login to Moodle - "Too many logins" Locked	HJWUCGA INC. 27 Feb 2009	HJWUCGA INC. 27 Feb 2009	0
Giving students limited version of course:manageactivities and/or course:managefiles? Locked	Mike Worth 4 Mar 2009	Mike Worth 4 Mar 2009	0
Moodle Profile privacy Locked	Milan _ 4 Mar 2009	Milan _ 6 Mar 2009	8
Can I disable the theme until the user is logged in? Locked	mathew wall 10 Mar 2009	Helen Foster 10 Mar 2009	2
Student can change another student's profile Locked	Misha Dubinskyy 12 Mar 2009	Misha Dubinskyy 12 Mar 2009	0
Strange IP address? in logging Locked	Hans B0s 13 Mar 2009	Hans B0s 19 Mar 2009	2
Hacking and security - what is the ultimate htaccess? Locked	Timothy Takemoto 8 Feb 2009	Bartosz Cisek 24 Mar 2009	16
Specifying authorization at Category Level Locked	Prakash Chittaranjan 25 Mar 2009	Prakash Chittaranjan 26 Mar 2009	2
RadarURL.com javascript widgit???? Locked	Harry Sweet 26 Mar 2009	Harry Sweet 26 Mar 2009	3
Saving Remote System Access Information Locked	Joe Favero 27 Mar 2009	Hans B0s 28 Mar 2009	1
Access privileges on front page Locked	neil hamilton 19 Feb 2009	E. L. Cooper 30 Mar 2009	3
Moodle Security - Set up basics - Help Locked	George Bradford 30 Mar 2009	George Bradford 30 Mar 2009	2
Proprietary material and data security handling Locked	anjana kasargod 31 Mar 2009	anjana kasargod 31 Mar 2009	2
How do I disable TeX and algebra filters completely? Locked	Erlyn Baack 2 Apr 2009	Helen Foster 2 Apr 2009	1
Is It possible to authenticate users by there certificate ? Locked	patrick badji 4 Apr 2009	patrick badji 4 Apr 2009	0
TeX-Filter updated - cvs listing ist shown in my site Locked	Jörg Höpfner 5 Apr 2009	Jörg Höpfner 6 Apr 2009	4
Password salting by default? Locked	Garret Gengler 31 Mar 2009	Garret Gengler 7 Apr 2009	7
How to stop my course files being copied Locked	Kevin Sowden 31 Mar 2009	rupert mackenzie 8 Apr 2009	11
Magic Quotes Locked	Paul Dragoonis 20 Apr 2009	Paul Dragoonis 21 Apr 2009	4
Offline Moodle (Poodle) file security Locked	Henry Happ 25 Apr 2009	Henry Happ 25 Apr 2009	0
Moodle Site Hacked Locked	Rishi VG 28 Apr 2009	Howard Miller 28 Apr 2009	1
Multiple LDAP/AD forest support Locked	S P 29 Apr 2009	S P 29 Apr 2009	0
Moodle security Locked	Tina Jones 29 Apr 2009	Frances Bell 1 May 2009	1
Caja - securing javascript/HTML content Locked	Matt Clarkson 4 May 2009	Matt Clarkson 4 May 2009	0
Integration with external system users? Locked	Aaron Zeckoski 1 May 2009	Hubert Chathi 9 May 2009	3
How to hide user profile in Google search engine? Locked	Hugo Domingos 11 May 2009	Hugo Domingos 11 May 2009	2
Force existing users to change password Locked	B. Durant 7 May 2009	Jordan Zebor 12 May 2009	1
Course editing by a non-creator Locked	John Kihoro 23 Apr 2009	Ray Lawrence 14 May 2009	4
Student Upload Virus in Excercise, How Can I Prevent sending EXE File Locked	Iman Muhammad 15 May 2009	Iman Muhammad 15 May 2009	0
Moodle data directory files being deleted Locked	michael mike 7 Mar 2009	Visvanath Ratnaweera 22 May 2009	1
Trojan:JS Type Obfuscation Exploits Locked	John Macklin 22 May 2009	Helen Foster 22 May 2009	1
Placing Config file outside for security reasons Locked	Mohan V 19 May 2009	Howard Miller 23 May 2009	3
Difference between _WEEKLY and _STABLE wrt security Locked	Faris Raouf 18 May 2009	Dan Poltawski 23 May 2009	1
How someone hacked a "course" listing that is porn Locked	Stuart Carduner 26 May 2009	Martin Dougiamas 28 May 2009	4
Security announcements policy Locked	Juan Segarra Montesinos 20 May 2009	Martin Dougiamas 28 May 2009	1
Running spamcleaner.php Locked	Jorge González Alonso 9 May 2009	Martin Dougiamas 28 May 2009	1
Hacked - where is this index.php Locked	Albert Dudley 30 May 2009	Mary Cooch 30 May 2009	3
Timelimit access to authorize portlal part Locked	Александр Александр 2 Jun 2009	Александр Александр 2 Jun 2009	0
Opt-in Student Privacy Locked	David Needham 3 Jun 2009	David Needham 3 Jun 2009	0
Moodle Porn Alert Locked	moodle porn alert 30 May 2009	Martin Dougiamas 4 Jun 2009	2
How to create role that able to view every course like admin? Locked	Nawaphon K.bawon 4 Jun 2009	Nawaphon K.bawon 4 Jun 2009	0
Forum posts appearing in Technorati - have I been hacked? Locked	Richard Miller 9 Jun 2009	Howard Miller 10 Jun 2009	10
Privacy of Participant Details across Teachers Locked	Val Evans 16 Jun 2009	Val Evans 16 Jun 2009	1
Trojan-Dropper.Win32.Peace.gk and FSecure antivirus Locked	Craig Grimmer 15 Jun 2009	Jérôme Mouneyrac 17 Jun 2009	3
random lines added to my main page: Hacked or not? Locked	Adam Turner 8 Jun 2009	cor kuijt 17 Jun 2009	5
Exporting all users with passwords? Locked	Libby Vicky 17 Jun 2009	Libby Vicky 17 Jun 2009	0
Ubuntu SSL Login Locked	Gareth Harle 18 Jun 2009	Gareth Harle 18 Jun 2009	0
Corrupted php files Locked	jlh 437 11 Feb 2009	jlh 437 19 Jun 2009	12
Site Hacked Locked	Seth Dickens 15 Jun 2009	Jon Witts 18 Jun 2009	17
Restricting Embedding to specific sites Locked	Angelo Pappano 23 Jun 2009	Angelo Pappano 23 Jun 2009	0
SECURITY WARNING! Locked	สมศักดิ์ เหมาะสมัย 3 Jul 2009	E. L. Cooper 3 Jul 2009	1
tracker "permission violation" and security patches Locked	Brian Jorgensen 4 Jul 2009	Petr Skoda 4 Jul 2009	1
When you install Moodle is the My SQL secure from being Hacked? Locked	Christopher Saunders 5 Jul 2009	Jon Witts 13 Jul 2009	6
using gnupg when sending emails Locked	Erik Diewald 16 Jul 2009	Dan Poltawski 16 Jul 2009	1
Accessing external http sites from an https moodle URL Locked	Richard Whitfield 16 Jul 2009	Richard Whitfield 16 Jul 2009	0
Stop simultaneous logins Locked	Ebenezer Le Page 17 Jul 2009	Howard Miller 17 Jul 2009	1
Locked myself out with permission change Locked	Barry Shamis 19 Jul 2009	Barry Shamis 20 Jul 2009	2
Log of changes on front page Locked	Paul Magnall 16 Jul 2009	Harvey Arkawy 22 Jul 2009	4
Disabling authenticated user ability to edit profile kills Moodle Locked	Anon User 23 Jul 2009	Howard Miller 23 Jul 2009	1
Moodle porn alert Locked	moodle bs 24 Jul 2009	Marcus Green 26 Jul 2009	6
.htaccess files hacked Locked	John Bonner 20 Jul 2009	John Bonner 27 Jul 2009	1
Report Access Locked	Jason Brandt 28 Jul 2009	Jason Brandt 28 Jul 2009	0
I think we're being attacked Locked	Harvey Arkawy 20 Jul 2009	Harvey Arkawy 29 Jul 2009	9
Recovery after being hacked. Locked	Stephen Lambert 30 Jul 2009	cor kuijt 3 Aug 2009	9
Log file question. Locked	Raul Rodriguez 31 Jul 2009	cor kuijt 3 Aug 2009	1
account setup Locked	ivan breziansky 3 Aug 2009	ivan breziansky 3 Aug 2009	8

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next