Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	were can I find exhaustive documentation on the GDPR data registry? Locked	stefan weber 25 May 2018	stefan weber 29 May 2018	2
	Create new User via Webservice Locked	Zadok Lindt 13 Feb 2018	Lê Tú 30 May 2018	6
	Data registry - Data Requests when not using it, and 'Subject Scope' Locked	Deleted user 30 May 2018	Deleted user 30 May 2018	0
	Password security options Locked	ayman cherrat 29 May 2018	Dave Perry 30 May 2018	2
	Is a logged action created when a user is deleted via a privacy data request? Locked	Mike Churchward 5 June 2018	Mike Churchward 5 June 2018	0
	Invalid permissions detected in $CFG->dataroot directory, administrator has to fix permissions Locked	Jukka Kylliäinen 5 June 2018	Jukka Kylliäinen 5 June 2018	0
	Multilang policies Locked	Andrzej Gałuszka 7 June 2018	Andrzej Gałuszka 7 June 2018	0
	User policies > Show user identity field ignored when exporting grades Locked	Eoin Campbell 7 June 2018	Eoin Campbell 7 June 2018	0
	Policy type Locked	Jacques Barzic 14 June 2018	Sara Arjona Téllez 15 June 2018	1
	SSL implementation on Moodle 2.7.x Locked	Steven Borch 18 June 2018	Steven Borch 19 June 2018	2
	Disabled permission in admin Locked	Deleted user 20 June 2018	Deleted user 20 June 2018	0
	GDPR - How does retention period work? Locked	Howard Miller 6 June 2018	Richard van Iwaarden 21 June 2018	5
	Some student is stealing other students passwords Locked	André Carvalho 20 June 2018	Conn Warwicker 21 June 2018	2
	Fix Blind SQL Injection Locked	Ahmed Hamed 26 June 2018	Ken Task 29 June 2018	8
	Is Facebook review required for Facebook login? Locked	Claus Tøndering 30 June 2018	Claus Tøndering 30 June 2018	0
	User deletion not GDPR compliant : personal data not deleted (lastip) Locked	Dorel Manolescu 29 June 2018	Adrian Greeve 1 July 2018	3
	ClamAV and FastCGI Locked	callum Wood 2 July 2018	Matteo Scaramuccia 4 July 2018	4
	Random HTTP 403 Errors Locked	Raymond Frangie 2 July 2018	Raymond Frangie 4 July 2018	3
	Verifying identity of students Locked	altan ahmet 4 July 2018	altan ahmet 5 July 2018	3
	Students contact details hiden from each other Locked	Selma Limbo 9 July 2018	Emma Richardson 9 July 2018	1
	Critical Security Warning - Guest role Locked	Michael Ko 2 July 2018	Emma Richardson 9 July 2018	2
	Bugs: Code Injection in Moodle? Locked	Franky Vallori 10 July 2018	Tim Hunt 10 July 2018	1
	Last login information on user profile Locked	Joost Elshoff 9 July 2018	Ray Lawrence 10 July 2018	1
	Recommendations for the permissions on the server Locked	Franky Vallori 16 July 2018	Visvanath Ratnaweera 17 July 2018	1
	GDPR Plugins - some questions Locked	Kerry Watt 19 Apr 2018	Jun Pataleta 19 July 2018	32
	How to disable 3.5.1 cookie policy popup? Locked	Randy Thornton 25 July 2018	Randy Thornton 25 July 2018	1
	Folder and file permissions for Moodledata and Moodle Locked	Albert Ramsbottom 26 July 2018	Matteo Scaramuccia 31 July 2018	8
	SQL injection via Scorm package Locked	Paul D 23 July 2018	Matteo Scaramuccia 1 Aug 2018	7
	using ClamAV to scan for malicious macros in office files Locked	Patrick Scott 31 July 2018	Moodle Admin 5 Aug 2018	1
	problem in securing the login page Locked	m question 25 July 2018	Moodle Admin 5 Aug 2018	2
	Force HTTPS Locked	Michel d. S. Mesquita 4 July 2018	Moodle Admin 5 Aug 2018	1
	Found Code injection in moodle instance Locked	Prasanna H 7 Aug 2018	Prasanna H 7 Aug 2018	0
	Access Reserved to Moodle Maintenance Mode Locked	Rui Costa 7 Aug 2018	Mary Cooch 7 Aug 2018	1
	GDPR / data registry / data deletion plugins - questions, discussion and experiences Locked	stefan weber 7 Aug 2018	Howard Miller 7 Aug 2018	1
	Backup of user data Locked	Tobias Hänel 15 Aug 2018	Mary Cooch 17 Aug 2018	3
	security Issue of Moodle Locked	Anderson Hsu 21 Aug 2018	Richard van Iwaarden 21 Aug 2018	3
	Backup policy Locked	Albert Ramsbottom 12 July 2018	Ken Task 22 Aug 2018	8
	Could a quickly changing client IP upset the log in process? Locked	Visvanath Ratnaweera 22 Aug 2018	Visvanath Ratnaweera 24 Aug 2018	3
	Security for docs and videos in moodle Locked	Jenn MapMaven 29 Aug 2018	Jenn MapMaven 29 Aug 2018	0
	Log in issue Locked	Pravin J 23 Aug 2018	Emma Richardson 31 Aug 2018	3
	Students can see other students enrolled in a course Locked	Jacques Technologies 8 Dec 2017	Mohamed Gad 10 Sept 2018	1
	Data privacy plugin and quizzes Locked	Jonas Asa. 13 Sept 2018	Jonas Asa. 14 Sept 2018	3
	Define roles by IP address Locked	Tamar Alania 14 Sept 2018	Tamar Alania 14 Sept 2018	0
	How to prevent script tag in search URL Locked	Khant Kyaw 14 Sept 2018	Ruslan Kabalin 14 Sept 2018	1
	Incoming mail configuration with Google accounts detected as insecure Locked	Iñigo Zendegi Urzelai 5 Mar 2018	Iñigo Zendegi Urzelai 17 Sept 2018	12
	Changing Content on Alternate login URL Locked	Jennifer Belisle 24 Sept 2018	Jennifer Belisle 24 Sept 2018	0
	Is there a way to set manager role to be able to enroll student to certain Course categories only? Locked	Maddy Fu 26 Sept 2018	Maddy Fu 26 Sept 2018	0
	User data in joint activities Locked	Kerstin Namuth 28 Sept 2018	Kerstin Namuth 28 Sept 2018	0
	Securing the platform and databases best approach? Locked	Jerry Lau 23 Sept 2018	Jerry Lau 2 Oct 2018	7
	Deceptive site ahead - Phishing Locked	Nilesh Pathade 4 Oct 2018	Ken Task 5 Oct 2018	6
	When logging in, I'm getting a "logout/cancel" popup every time Locked	Jan Waginski 4 Oct 2018	Jan Waginski 8 Oct 2018	3
	Data registry and data deletion Locked	Tomasz Czernak 9 Oct 2018	Andrew Lyons 10 Oct 2018	1
	restrict guest access for courses in a specific category Locked	stefan weber 10 Aug 2017	Louise H 10 Oct 2018	6
	XSS Trusted Users list longer than it should be given our settings Locked	Deleted user 11 Aug 2018	Deleted user 19 Oct 2018	3
	[3.5]Insecure files/folders Moodle? Locked	Richard van Iwaarden 18 Oct 2018	Richard van Iwaarden 19 Oct 2018	2
	Contacts tab in messaging provides list of all users (GDPR issue?) Locked	Craig Hunter 20 Sept 2018	Gemma Lesterhuis 23 Oct 2018	8
	A required parameter token was missing Locked	Ross Quinnell 26 Oct 2018	Ross Quinnell 30 Oct 2018	2
	Secure coukies Locked	mimi nom 3 Nov 2018	mimi nom 3 Nov 2018	0
	Can my instructor see my activities outside his course? Locked	Gulielmus Pius Robertus Winslowius 5 Nov 2018	Tim Hunt 5 Nov 2018	1
	Building in SHA-256 hashing for javascript Locked	Garrett Boone 22 Oct 2018	Dan Marsden 25 Oct 2018	15
	Data requests retention period Locked	Leon Erasmus 9 Nov 2018	Leon Erasmus 9 Nov 2018	2
	Password recovery from login page : a strange screen Locked	Niko Niko 7 Nov 2018	Emma Richardson 9 Nov 2018	1
	Mail bomb afther update 6-11-2018 Locked	Bas van Kollenburg 8 Nov 2018	Ralf Hilgenstock 12 Nov 2018	4
	Need Assistance on Installing SSL Wildcard Certificate Moodle3.2.4 Apache Locked	Aretha Etienne 12 Nov 2018	Aretha Etienne 12 Nov 2018	0
	email alert when new users are created Locked	Raman Joshi 9 Nov 2018	Raman Joshi 13 Nov 2018	2
	Privacy Policy - Different Languages Locked	Stephen Oxlade 19 Oct 2018	Ralf Hilgenstock 14 Nov 2018	5
	Completely isolated courses Locked	Hannu Mattila 9 Nov 2018	Kerstin Namuth 16 Nov 2018	10
	looking for vulnerable (old) plugins for Moodle Locked	Jurgen Gaeremyn 19 Nov 2018	Dan Marsden 19 Nov 2018	1
	Fast registration possible? Locked	Colin Peters 9 Nov 2018	Visvanath Ratnaweera 19 Nov 2018	6
	Problem with HTTPS Locked	LAVS EDUCATOR 19 Nov 2018	AL Rachels 20 Nov 2018	1
	The perils of the BIG "helping" school IT Locked	Visvanath Ratnaweera 19 Nov 2018	Visvanath Ratnaweera 20 Nov 2018	1
	data privacy plugin 3.3.5 hanging in cron Locked	Tim Gildersleeve 9 May 2018	John Packiaraj 21 Nov 2018	11
	HTTP to HTTPS Locked	LAVS EDUCATOR 25 Nov 2018	Ken Task 25 Nov 2018	1
	No checkboxes on Data Requests page Locked	Peter Diedrichs 22 Nov 2018	Alex Sandu 25 Nov 2018	2
	content protection method Locked	dave lewis 26 Nov 2018	dave lewis 27 Nov 2018	2
	ClamAV Plugin Config Paths Locked	Wolf Ventir 21 Nov 2018	Wolf Ventir 28 Nov 2018	3
	Manual enrollment and obligate change password Locked	Reinier Batterink 30 Nov 2018	Reinier Batterink 30 Nov 2018	0
	Unable to Log In as admin - Moodle 3.5 Locked	Dave Emsley 30 Nov 2018	Emma Richardson 30 Nov 2018	1
	adding a wildcard security ssl for a plugin Locked	Aretha Etienne 1 Dec 2018	Aretha Etienne 1 Dec 2018	0
	User's Choice of Course Locked	deepak rs 4 Dec 2018	deepak rs 4 Dec 2018	0
	Quiz Answers "Keywords" Not Working Locked	deepak rs 4 Dec 2018	deepak rs 5 Dec 2018	3
	Cell-like groups possible? Locked	Sam Stevens 5 Dec 2018	Sam Stevens 5 Dec 2018	0
	disable video right click Locked	rasha fawzy 8 Dec 2018	Rick Jerz 9 Dec 2018	1
	How do I finetune Website Copier HTTrack or Cyotek WebCopy? Locked	Rolf Cper 12 Dec 2018	Rolf Cper 12 Dec 2018	0
	IP blocker error when access via html script Locked	T K 17 Dec 2018	T K 17 Dec 2018	0
	GuardianKey - A new plugin of Security Locked	Gesiel Bernardes 17 Dec 2018	Gesiel Bernardes 17 Dec 2018	0
	Restrict teacher's ability to backup courses including userdata? Locked	stefan weber 17 Dec 2018	stefan weber 18 Dec 2018	2
	ClamAV server Locked	callum Wood 12 Dec 2018	Matteo Scaramuccia 21 Dec 2018	2
	ClamAV and Cwatch Locked	Wynand Louw 28 Dec 2018	Wynand Louw 29 Dec 2018	4
	Host with LiquidWeb - mod_security rules Locked	Ken Task 25 Dec 2018	Ken Task 29 Dec 2018	2
	How to Download my Personal Data or other's Data Locked	Alan Schrock 29 Nov 2018	Alan Schrock 4 Jan 2019	16
	Plugin privacy registry error Locked	Henrik sune Pedersen 3 Jan 2019	Andrew Lyons 4 Jan 2019	2
	SSL connection to Moodle DB? Locked	Paul Martin 2 Oct 2018	Garrett Boone 11 Jan 2019	33
	Lots of invalid login token errors in the logs Locked	Diane Soini 9 Jan 2019	Diane Soini 12 Jan 2019	14
	User Policy and agrement Locked	Tone Engebretsen 6 Jan 2019	Ralf Hilgenstock 14 Jan 2019	1
	Suppression of advice about php register_global at documentation Locked	Joan Cervan 18 Jan 2019	Joan Cervan 18 Jan 2019	0
	Can't edit moodle's password policy Locked	Salome Tkhilaishvili 28 Dec 2018	Salome Tkhilaishvili 21 Jan 2019	2
	dataprivacy tool blocking cron job from running Locked	stefan weber 24 Jan 2019	stefan weber 24 Jan 2019	0
	Moodle 3.6.1+ (20181210) issue with tool_policy Locked	Joost Elshoff 25 Jan 2019	Joost Elshoff 25 Jan 2019	2
	OSSEC blocks ajax call Locked	Venizia Venizia 2 Feb 2019	Venizia Venizia 2 Feb 2019	0