Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	user access Locked	ivan breziansky 4 Aug 2009	ivan breziansky 7 Aug 2009	13
	Critical: Keeping user data safe Locked	Olli Savolainen 10 Aug 2009	Olli Savolainen 10 Aug 2009	0
	How to Stop anyone from accessing web material uploaded in Moodle? Locked	Hiten Vyas 30 May 2009	Darcy Parker 11 Aug 2009	9
	config.php-cron Locked	ivan breziansky 11 Aug 2009	ivan breziansky 13 Aug 2009	2
	Site policy URL Locked	Chris Lee 19 Aug 2009	Chris Lee 20 Aug 2009	2
	Moodle and Google SSO Problem Locked	Trevor Fidler 21 Aug 2009	Trevor Fidler 21 Aug 2009	0
	Add new field form in ../user/policy.php Locked	Gisele Brugger 22 Aug 2009	Gisele Brugger 22 Aug 2009	0
	Automatic Enrollment? Locked	Amazing Sey 19 Aug 2009	Amazing Sey 22 Aug 2009	2
	SMTP Error with sending email Locked	Shin Okada 22 Aug 2009	Shin Okada 24 Aug 2009	1
	Front page Locked	carole gould 25 Aug 2009	carole gould 25 Aug 2009	0
	Front page Locked	carole gould 25 Aug 2009	Mary Cooch 25 Aug 2009	1
	Teacher's Intranet Locked	Travis Wilhelm 20 Aug 2009	Jon Witts 25 Aug 2009	6
	Moodle Porn Update Locked	Don Won 4 Sept 2009	Marcus Green 6 Sept 2009	6
	Not a vulnerability... not even Moodle's fault... but still annoying! What can we do? Locked	Dale Davies 15 Sept 2009	Dale Davies 15 Sept 2009	2
	CGIWrap Error: Execution of this script not permitted Locked	ansi anser 16 Sept 2009	Tim Hunt 16 Sept 2009	1
	https enabled in one of the settings Locked	Joe Bliton 14 Sept 2009	Jon Witts 19 Sept 2009	3
	Moodle fully over ssl (https) causes theme and functionality problems. Locked	P.P. Oldenzeel 27 Mar 2009	Marco Rojas 22 Sept 2009	3
	Moodle w/ SSL Locked	David Kennedy 9 Sept 2009	David Kennedy 23 Sept 2009	4
	admin shows in participants list but not on log Locked	Colleen McGuire 16 Sept 2009	Teresa Gibbison 24 Sept 2009	1
	New to Moodle, security issue? Can anyone advise please? Locked	Debbie Kay 23 Sept 2009	Debbie Kay 24 Sept 2009	3
	Is the Cron script a security threat? Locked	John Bonner 13 Sept 2009	John Bonner 26 Sept 2009	5
	Different keys to the same course Locked	Madde Alm 19 Aug 2009	jabera matogoro 30 Sept 2009	5
	Failed to login to my moodle Locked	jabera matogoro 30 Sept 2009	Howard Miller 30 Sept 2009	1
	Spam infected Moodle sites Locked	Frank Ralf 13 May 2009	Frank Ralf 6 Oct 2009	14
	Moodle Word and PDF documents opening with spam Locked	rui gomes 16 Oct 2009	Mauno Korpelainen 16 Oct 2009	1
	PHP Display Error Locked	Daniel Chuhta 16 Oct 2009	Daniel Chuhta 19 Oct 2009	3
	Securing my Moodle Locked	Jet Batung Bakal 19 Oct 2009	Jet Batung Bakal 21 Oct 2009	4
	Edit PHP warning Locked	Jet Batung Bakal 21 Oct 2009	M. N. 24 Oct 2009	1
	Hackers in my moodle Locked	Carlo Amore 27 Oct 2009	Howard Miller 27 Oct 2009	1
	Site Configuration not Secure Locked	Arlo Speer 27 Oct 2009	Jon Witts 27 Oct 2009	1
	About MSA-09-0019 Locked	Sebastien M. 27 Oct 2009	Howard Miller 28 Oct 2009	6
	Multiple session for same user. Locked	Ashwani Singh 2 Nov 2009	Ashwani Singh 2 Nov 2009	0
	Hide real name hide email Locked	Russ Titsworth 21 Oct 2009	Stephan Hahn 4 Nov 2009	1
	Format of the security coding guidelines Locked	Tim Hunt 6 Nov 2009	Martin Dougiamas 9 Nov 2009	2
	Enforcing password rules with manual account creation Locked	Tammy Ellis 19 June 2009	Rachel Cooper 10 Nov 2009	3
	Restrict Student Maessaging Locked	Grant Allison 10 Nov 2009	Bente Olsen 10 Nov 2009	1
	Security issue: source files hacked ("hackcheckstr") Locked	Christian Ebert 3 Feb 2009	Timothy Takemoto 12 Nov 2009	23
	Accidently took away all admin abilities- HELP Locked	Carolyn Minks 7 Nov 2009	Carolyn Minks 13 Nov 2009	8
	Flash Vulnerability - dealing with uploaded files Locked	Alistair Groves 13 Nov 2009	Mauno Korpelainen 14 Nov 2009	7
	phpMyAdmin vulnerability Locked	Clive Gould 16 Nov 2009	Petr Skoda 16 Nov 2009	1
	Limiting Incorrect Logins Locked	David Price 27 Oct 2009	Tim Hunt 17 Nov 2009	7
	Moodle and Encrypted Database Locked	Robert Saari 24 Oct 2009	Cliff Carpenter 18 Nov 2009	31
	LDAP allowing students teacher access with any password Locked	Tim Rolands 18 Nov 2009	Ger Tielemans 18 Nov 2009	2
	Moodle Salting Locked	ETH Zürich 14 Nov 2009	Ger Tielemans 21 Nov 2009	50
	course data directories Locked	Bill Weinheimer 22 Nov 2009	Ger Tielemans 24 Nov 2009	2
	Filters for discussions Locked	Carolyn Minks 24 Nov 2009	Helen Foster 24 Nov 2009	1
	Questionnaire module Locked	voodoo voodoo 25 Nov 2009	Mary Cooch 25 Nov 2009	3
	ANTI VIRUS for SECURITY "UPLOADING DATA" Locked	Jet Batung Bakal 19 Oct 2009	Jon Witts 25 Nov 2009	6
	Security Issue of Moodle Locked	Freddy Mok 24 Nov 2009	Marcus Green 26 Nov 2009	4
	Locked out by the SSL setting :( Locked	Youssef Akkari 26 Nov 2009	Youssef Akkari 26 Nov 2009	2
	GreenSQL database firewall? Locked	Dale Davies 30 Nov 2009	Dale Davies 30 Nov 2009	2
	SSL Entire Moodle Site Issues Locked	GFS Office of Technology Support 30 Nov 2009	GFS Office of Technology Support 1 Dec 2009	3
	Moodle Security holes detected by the IPS!!! Locked	A. H. 25 Nov 2009	A. H. 2 Dec 2009	4
	securityalerts list Locked	Deleted user 1 Dec 2009	Deleted user 3 Dec 2009	7
	Password reset options Locked	Jeremy Schweitzer 4 Dec 2009	Jeremy Schweitzer 4 Dec 2009	0
	keep track of assignments Locked	Grant Allison 9 Dec 2009	Grant Allison 9 Dec 2009	0
	Mixed Authentication Locked	Karl Goddard 11 Dec 2009	Karl Goddard 12 Dec 2009	4
	Change password for Admin account Locked	Stephen Bloomer 25 Nov 2009	Paul Fynn 14 Dec 2009	6
	LDAP Errors with Novell E-Directory Locked	Keith Giles 12 Dec 2009	Iñaki Arenaza 14 Dec 2009	1
	Entire Moodle website over https/SSL Locked	Ashley Sands 15 Dec 2009	Ashley Sands 15 Dec 2009	0
	Admin Access Level Issue Locked	Suhail Baloch 15 Dec 2009	Jon Witts 16 Dec 2009	1
	set of character allowed in the username field? Locked	D 2G 17 Dec 2009	D 2G 17 Dec 2009	0
	HTTP Authentication Locked	Gary Harris 16 Dec 2009	Ken Task 17 Dec 2009	2
	where to locate moodledata folder Locked	Stuart Whiting 16 Dec 2009	Jon Witts 17 Dec 2009	1
	index.php hacked into Locked	Rias Ahmed Abdul Basith 22 Dec 2009	Mauno Korpelainen 23 Dec 2009	3
	Admins Forced password change? moodle 1.9.7 Locked	Saujanya Patel 22 Dec 2009	Frank Ralf 29 Dec 2009	4
	mon mot de passe a disparu Locked	benedicte charles 29 Dec 2009	Deleted user 29 Dec 2009	1
	ADODB Error: Login failed for user 'abct'. Reason: The password of the account has expired. Locked	Aman Batra 7 Jan 2010	Aman Batra 7 Jan 2010	0
	Internet Explorer cannot load 'Edit Profile' page #MDL-10296 revisited. Locked	Worth Bishop 14 Jan 2010	Worth Bishop 15 Jan 2010	6
	Prevent upload of exe files? Locked	N Hansen 15 Jan 2010	N Hansen 15 Jan 2010	0
	Example of a intrusion into Moodle Locked	Stellan Kinberg 23 Sept 2009	Timothy Kane 20 Jan 2010	6
	Can't access php.ini file, don't know how to change display_errors setting Locked	Henry Foster 25 Jan 2010	Marc Grober 26 Jan 2010	1
	Accessing files in moodledata folder with out logging in Locked	Michael Rhodes 26 Jan 2010	Michael Rhodes 26 Jan 2010	0
	Problem using Passwort salting Locked	Andreas Derndler 29 Jan 2010	Andreas Derndler 29 Jan 2010	0
	How to make unaccesible the personal info of participants Locked	Pepe Madariaga 2 Feb 2010	Pepe Madariaga 2 Feb 2010	2
	Using EMBED and OBJECT Locked	Danny Yeshurun 3 Feb 2010	Danny Yeshurun 3 Feb 2010	0
	How to 'unlink' access to user info Locked	Allen Starowsky 4 Feb 2010	Frank Ralf 5 Feb 2010	3
	Is https for the login page necessary? Locked	Abel Cheng 5 Feb 2010	Jon Witts 6 Feb 2010	2
	Policy.php change script Locked	Geoff Goode 8 Feb 2010	Geoff Goode 8 Feb 2010	0
	Securing a directory Locked	Michael Black 14 Jan 2010	Joe Griffin 11 Feb 2010	13
	Secure cookies logging me out Locked	Chip Edwards 12 Feb 2010	Chip Edwards 12 Feb 2010	0
	Moodle and Digital Certificates Locked	Jesus Diaz Vico 14 Feb 2010	Jon Witts 16 Feb 2010	3
	Maintaining old moodle sites Locked	Deleted user 25 Jan 2010	Visvanath Ratnaweera 19 Feb 2010	4
	Login problem Locked	Nicolas Lejeune 22 Feb 2010	Nicolas Lejeune 22 Feb 2010	1
	'chmod(): Operation not permitted' in global search Locked	Dorel Manolescu 23 Feb 2010	Dorel Manolescu 23 Feb 2010	0
	Trojan found Locked	Seif Fateen 24 Feb 2010	Seif Fateen 25 Feb 2010	6
	How do I hide poples personal details in course participants section? Locked	karen lawrence 28 Feb 2010	Glenys Hanson 1 Mar 2010	4
	Moodle Administrator moving on - Securing moodle site Locked	Amelia Christensen 6 Mar 2010	Tim Hunt 8 Mar 2010	2
	Ads underneath course offerings Locked	Steve Waigand 3 Jan 2010	Chris Collman 8 Mar 2010	4
	how to diable copy&paste of a course Locked	Helen Du 9 Mar 2010	Mary Cooch 12 Mar 2010	5
	$dataroot ownership and permissions Locked	Liam O'Riordan 10 Feb 2010	Visvanath Ratnaweera 12 Mar 2010	1
	Security to moodledata folder Locked	Simon A 4 Jan 2010	Visvanath Ratnaweera 12 Mar 2010	1
	Found attack tries in my site Locked	pedro p 12 Mar 2010	Mauno Korpelainen 12 Mar 2010	5
	Restrict user access to courses Locked	Jason Yeung 22 Mar 2010	Chris Collman 23 Mar 2010	3
	Students are able to list user names of the whole system Locked	Klaus Kirchner 15 Mar 2010	Klaus Kirchner 29 Mar 2010	9
	Anyway to keep on using moodle-1.5.3 just for forum viewing purpose only Locked	Trizit Benjaboonyazit 28 Mar 2010	Frank Ralf 1 Apr 2010	5
	SQL Injection in Moodle = 1.9.5 Locked	Rodolfo Matos 25 June 2009	Pierre-Louis LAMBALLAIS 6 Apr 2010	8
	Basic user role setup Locked	Jan Malte Gerth 11 Apr 2010	Jan Malte Gerth 11 Apr 2010	0
	Dumb question about changing passwords Locked	Tom Connolly 14 Apr 2010	Chris Collman 14 Apr 2010	4
	ClamAV upgrade may be required Locked	Sean Farrell 12 Apr 2010	Jon Witts 20 Apr 2010	2