Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	security issue with the syslog for moodle Locked	Mahmood Naderan 14 Sept 2017	Mahmood Naderan 14 Sept 2017	3
	SAML auth with users pulled via LDAP Locked	Joel Coehoorn 14 Dec 2016	Keiron Walsh 22 Sept 2017	1
	Restrict access by enrolment method Locked	Dominique Bauer 24 Sept 2017	Randy Thornton 29 Sept 2017	5
	JS Injection Locked	Claudio Henrique 29 Sept 2017	David Mudrák 29 Sept 2017	1
	Resetting forgot password without email Locked	Sanni Rinne 26 Sept 2017	Sanni Rinne 2 Oct 2017	4
	SSL and Moodle on a Subdomain Locked	David Dinh 2 Oct 2017	David Dinh 3 Oct 2017	5
	Tab redirected Locked	randall jones 5 Oct 2017	randall jones 5 Oct 2017	1
	Why Does Moodle Have a Plugin Installer If It Is Considered Unsafe? Locked	Uwe Stange 9 Oct 2017	Uwe Stange 9 Oct 2017	0
	Guest Access to Calendar Locked	Emma Richardson 29 Sept 2017	Dean Montgomery 14 Oct 2017	1
	Model for managing institution groups Locked	David Humphreys 24 Oct 2017	David Humphreys 24 Oct 2017	0
	PHP.URI.Code.Injection Firewall Message Locked	Ali Arekat 24 Oct 2017	Tomasz Muras 24 Oct 2017	1
	Maximum uploaded file size Locked	mozhgan shafiei 31 Oct 2017	mozhgan shafiei 31 Oct 2017	0
	Assigning permissions to modify themes Locked	marisol castro 2 Nov 2017	Ken Task 2 Nov 2017	1
	How to prevent multiple login with same ID with moodle 3 Locked	Vivian Bognini 7 Nov 2017	Vivian Bognini 7 Nov 2017	0
	Is the unoconv installation a security risk? Locked	Matthew Davidson 24 June 2016	Meg Goodine 10 Nov 2017	27
	Server CPU performance overhead Locked	Shamal Sabah 12 Nov 2017	Dan Bennett 15 Nov 2017	4
	Moodle 3.4 improvements related to data protection/GDPR Locked	Joe Cape 17 Nov 2017	Joe Cape 17 Nov 2017	0
	Reverse Proxy redirecting Locked	Helson C 21 Nov 2017	Helson C 21 Nov 2017	0
	HTTP to HTTPS but on Windows environment Locked	J Guzman 22 Nov 2017	J Guzman 22 Nov 2017	0
	Falling out of supported releases? Locked	Wen Hao Chuang 22 Nov 2017	Mathew Gancarz 22 Nov 2017	1
	unclear CSS - attack Locked	Bjarne Oldsen 5 Nov 2017	Ralf Hilgenstock 25 Nov 2017	4
	API test for Moodle (v2.6) with Postman Locked	Shantanu Mitra 25 Nov 2017	Shantanu Mitra 25 Nov 2017	0
	Privacy concerns using the Google Document Converter (annotate a pdf) Locked	Eva E 7 Nov 2017	Sergio Rabellino 26 Nov 2017	4
	a user with student privilege change another user's password Locked	esty wexler 27 Nov 2017	Mathew Gancarz 29 Nov 2017	1
	Help with redirect from HTTP to HTTPS Locked	Carolyn McIntyre 8 Mar 2017	J Guzman 22 Nov 2017	14
	DRM and Course content protection. Locked	Deepak Tripathi 1 Dec 2017	Dave Perry 4 Dec 2017	1
	Login and get someone else's account Locked	Rachel Whitton 7 Dec 2017	Rachel Whitton 8 Dec 2017	5
	Site policy acceptance logs Locked	Andreas Panagiotopoulos 8 Dec 2017	Eric Katchan 11 Dec 2017	3
	Moodle Login Form Encryption Locked	Danielle Bryan Dizon 12 Dec 2017	James McLean 12 Dec 2017	2
	ClamAV Locked	Pieter Portier 18 Jan 2017	Alain Raap 14 Dec 2017	1
	Users can't see their own "full profile" Locked	Krisha Moeller 15 Dec 2017	Krisha Moeller 15 Dec 2017	0
	SSL setup issues on Moodle 3.2.3 Locked	Yogesh Nahar 7 June 2017	Harsh Patel 15 Dec 2017	4
	Prevent seeing Permissions for others Locked	Andy Hill 11 Dec 2017	Andy Hill 15 Dec 2017	1
	SSL Cert on Content switch Locked	S Parker 24 July 2017	Harsh Patel 15 Dec 2017	3
	Use Self-Signed Certificate Locked	mimi nom 7 Feb 2017	Harsh Patel 15 Dec 2017	6
	Moodle SimpleSAML Error Locked	Dax Nac 15 Dec 2017	Leon Stringer 15 Dec 2017	1
	Unauthorized person created an account Locked	Walter Byrd 15 Dec 2017	Walter Byrd 17 Dec 2017	4
	About the OAuth 2 services Locked	Cheryl Tsai 31 Oct 2017	Cheryl Tsai 28 Dec 2017	2
	Access to Moodle Locked	Lance Hinds 10 Jan 2018	Ray Lawrence 11 Jan 2018	5
	Moodle Security Alerts - SPAM Locked	Joshua Hagan 15 Jan 2018	Ken Task 15 Jan 2018	1
	Deny access to/Hide participant listing when logged in Locked	Morag Hughson 14 Dec 2017	Randy Thornton 20 Jan 2018	4
	The Web Application Firewall Blocks Most of the Actions Locked	Ali Arekat 22 Jan 2018	Dan Marsden 22 Jan 2018	1
	ycfkurl reported Locked	Timothy Bolton Milhas 27 July 2017	Tristin Mock 31 Jan 2018	2
	Virus detected on file download HELP! Locked	Irith Herman 28 Jan 2018	Ken Task 2 Feb 2018	7
	LDAP and non-LDAP? Locked	Mike Stewart 5 Feb 2018	Mike Stewart 5 Feb 2018	2
	Plugin to upload and secure external exam results? Locked	Ruth Horak 5 Feb 2018	Ruth Horak 5 Feb 2018	0
	File permissions on webroot vs installing plugins Locked	Tom Smith 6 Feb 2018	Ken Task 6 Feb 2018	1
	Add Custom Salt to Unique Salt for Better Hashed Password? Locked	Paul Lindgreen 17 Feb 2018	Iñaki Arenaza 18 Feb 2018	2
	SSL implementation on Moodle Locked	Syed Ali 20 Feb 2018	Syed Ali 22 Feb 2018	7
	Locking documents so that they can not be printed or downloaded directly? Locked	Lee Richards 26 Feb 2018	Randy Thornton 27 Feb 2018	5
	Hacked or some kind of update? Locked	Patrick Lawrence 28 Jan 2018	Moodle Admin 28 Feb 2018	1
	Privacy concens regarding the mobile push notifications Locked	Beni Keller 23 Feb 2018	Beni Keller 5 Mar 2018	16
	Authentication Keys Plugin Needed Locked	Donna Betancourt 9 Mar 2018	Donna Betancourt 9 Mar 2018	0
	Database encryption Locked	Ted Long 18 Mar 2018	Mathew Gancarz 21 Mar 2018	1
	Privacy issue: how to disable Analytics completely Locked	Randy Thornton 6 Mar 2018	Randy Thornton 21 Mar 2018	7
	Ferpa and moodle Locked	curt bixel 23 Mar 2018	Rick Jerz 26 Mar 2018	20
	Moodle blocked out after IP listing Locked	Anandarup Kar 17 Mar 2018	Visvanath Ratnaweera 28 Mar 2018	1
	Moodle security Locked	MoodleKittyCat . 28 Mar 2018	Mathew Gancarz 29 Mar 2018	6
	Plugins DB and external services (GDPR related) Locked	Tomasz Muras 29 Mar 2018	Andrew Lyons 30 Mar 2018	1
	Limit Course Access by Special LDAP Attribute Locked	Jeff Jones 31 Mar 2018	Jeff Jones 31 Mar 2018	0
	Security vulnerability Locked	İdiye ÖKTEN 3 Apr 2018	İdiye ÖKTEN 3 Apr 2018	0
	user always online Locked	m question 2 Apr 2018	Visvanath Ratnaweera 6 Apr 2018	3
	pseudonymization/anonymization of deleted users Locked	Alexandra F 10 Apr 2018	Alexandra F 10 Apr 2018	2
	Privacy / Site / Cookie Policies (GDPR) Locked	Guildford College Group 6 Apr 2018	Gareth J Barnard 11 Apr 2018	2
	Report page visible to web Locked	Nick Gault 11 Apr 2018	Ken Task 14 Apr 2018	3
	Trusted content permission does not work for Teacher role, XSS vulnerable? Locked	Paul Lindgreen 25 Oct 2017	Sascha Leblanc 17 Apr 2018	2
	GDPR plugins - Category & Purpose Locked	Mark Sharp 12 Apr 2018	Adrian Greeve 17 Apr 2018	6
	saml - sso error Locked	oded blaum 18 Apr 2018	Ken Task 18 Apr 2018	1
	You are considered to be a digital minor Locked	Bente Olsen 21 Apr 2018	Bente Olsen 22 Apr 2018	4
	Bug bounty by Detectify Locked	George Mihailov 24 Apr 2018	Marina Glancy 24 Apr 2018	1
	Erasing optional field data Locked	Dave Foord 23 Apr 2018	Alicia Wallace 24 Apr 2018	6
	Same moodle server to cater both Intranet & Internet Locked	Sreepathy T L 23 Apr 2018	Ken Task 25 Apr 2018	9
	Hiding Student Names from Graders Locked	Jennifer Holder 25 Apr 2018	John Provasnik 27 Apr 2018	1
	Delete "graduated" students (GDPR) Locked	Alicia Wallace 24 Apr 2018	Randy Thornton 27 Apr 2018	1
	GDPR and Custom Reports Locked	Lester Cunningham 20 Apr 2018	Randy Thornton 27 Apr 2018	2
	Policy & Privacy Plugin help Locked	Mark Lewis 1 Apr 2018	Mark Lewis 29 Apr 2018	3
	GDPR: config settings as user preferences in blocks Locked	Mark Sharp 16 Apr 2018	Randy Thornton 1 May 2018	6
	Moodle 'Site News' is public, it needs to be private. Help. Locked	roshan kolar 29 Apr 2018	roshan kolar 1 May 2018	2
	https & sensitive info Locked	James Brown 27 Apr 2018	Visvanath Ratnaweera 2 May 2018	5
	I think we were hacked Locked	mimi nom 30 Apr 2018	Ken Task 2 May 2018	8
	Migrating my Moodle Site From HTTP to HTTPS Locked	Jonathan Christoper Go 30 Apr 2018	callum Wood 2 May 2018	3
	GDPR Policies Plugin - Any facility for Optional? Locked	James Clarke 26 Apr 2018	Randy Thornton 2 May 2018	4
	ClamAV - clamdscan Locked	callum Wood 2 May 2018	callum Wood 4 May 2018	3
	automated backups Locked	Dom F 12 May 2018	Paul Raper 14 May 2018	6
	monitoring course changes Locked	Jennifer Meyer 15 May 2018	Jennifer Meyer 15 May 2018	0
	monitoring course changes Locked	Jennifer Meyer 15 May 2018	Jennifer Meyer 15 May 2018	3
	Background info to / clarification on CVE-2017-7298? Locked	Temp Account 16 May 2018	Temp Account 16 May 2018	0
	External tool and CSRF Locked	Nicanor García 16 May 2018	Nicanor García 16 May 2018	0
	Plugin support for privacy API (split from EU General Data Protection Regulation (GDPR) compliance) Locked	Jean-Michel Védrine 20 May 2018	Jean-Michel Védrine 20 May 2018	3
	GDPR plugins Moodle 3.3 Locked	Ken Task 19 May 2018	Ken Task 20 May 2018	5
	DSAR's and Redaction Locked	Tim Gildersleeve 18 May 2018	Tim Gildersleeve 21 May 2018	2
	GDPR plugins: display consent option on first screen? Locked	Stewart Carswell 22 May 2018	Stewart Carswell 22 May 2018	0
	How to assess a data breach Locked	Dom F 22 May 2018	Visvanath Ratnaweera 22 May 2018	5
	GDPR Privacy API for advanced grading methods Locked	Marcus Green 22 May 2018	Marcus Green 23 May 2018	2
	Pollicies Locked	Andrzej Gałuszka 23 May 2018	Andrzej Gałuszka 23 May 2018	0
	GDPR and forum forced subscription Locked	Christos Savva 23 May 2018	Christos Savva 24 May 2018	4
	GDPR Course retention varies by qual type Locked	Alicia Wallace 4 May 2018	Deleted user 25 May 2018	15
	GDPR - Manually trigger deletion requests Locked	Deleted user 23 May 2018	Jan Dageförde 25 May 2018	5
	GPDR plugin for 2.X moodle Locked	María Sánchez 23 May 2018	koen roggemans 26 May 2018	3
	Problem with "Force users to log in" option Locked	Zoran Jančić 24 May 2018	Zoran Jančić 28 May 2018	1