Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Have I been hacked? Locked	Jeff Richards 29 May 2012	Jeff Richards 29 May 2012	0
	Login Attacks from various IPs Locked	Deleted user 16 May 2012	Visvanath Ratnaweera 12 June 2012	3
	moodledata folder location Locked	Gavin McKay 11 June 2012	Doug Moody 12 June 2012	11
	Make course unsearchable Locked	steph . 13 June 2012	steph . 13 June 2012	0
	Restore installation with missing password salt Locked	D'Oyen Williams 13 June 2012	Helen Foster 13 June 2012	1
	Lesson password Locked	Tomislav Gaborovic 14 June 2012	Tomislav Gaborovic 14 June 2012	0
	bigbluetooth button its showing security reason Locked	Ashi yadav 21 June 2012	Ashi yadav 22 June 2012	4
	How to "Digital sign" the logs within the moodle Locked	kc yau 21 June 2012	Hubert Chathi 22 June 2012	3
	Forbid teachers to changing front page settings Locked	Christian Meermann 9 Dec 2011	Guillermo Madero 23 June 2012	5
	Exam Results on Moodle Locked	Alex 09 28 June 2012	Alex 09 28 June 2012	3
	Figuring out the version of Moodle being used Locked	Marko Vidberg 29 June 2012	Marko Vidberg 29 June 2012	5
	SELinux is preventing httpd from using files /boot Locked	roger griffiths 14 Aug 2011	Ken Task 3 July 2012	3
	time-stamping and digital signature Locked	kc yau 3 July 2012	kc yau 3 July 2012	0
	Hide contents of course catgegories Locked	Whitney Lowe 7 July 2012	Whitney Lowe 7 July 2012	0
	User Profiles Lockdown Locked	James Cracknell 17 July 2012	James Cracknell 17 July 2012	0
	HTTPS Insecure Content Locked	Mika Yearman 19 July 2012	Dan Poltawski 20 July 2012	1
	Disable Password Expiry Locked	Lemmy Naught 19 July 2012	Guillermo Madero 20 July 2012	1
	Edit SSL-secured login page to include site seal. Locked	Alexander Wiklund 26 July 2012	Deleted user 27 July 2012	3
	unknown apaches's log entries Locked	tatiana ramiro 27 July 2012	tatiana ramiro 30 July 2012	3
	Alert User if Locked Caps Locked	Jamie Tinley 12 Aug 2009	Steve Bilton 2 Aug 2012	9
	Hide e-mail addresses as default Locked	Pete MacKichan 4 July 2009	Menda Lerenda 2 Aug 2012	12
	Category visibility for authorized only ? Locked	Justin Nguyen 3 Aug 2012	Justin Nguyen 3 Aug 2012	0
	Server Notification Security Message & Multiple URL logins Locked	James McDermott 30 May 2011	Louise Kearins 7 Aug 2012	6
	LDAP and security Locked	Jedidiah Rex 28 July 2012	Visvanath Ratnaweera 9 Aug 2012	2
	Using SSL and User Search Doesn't Work Locked	Mike Sangray 9 Aug 2012	Mike Sangray 9 Aug 2012	0
	Site policy - workflow, depending on if self-reg or not Locked	Deleted user 27 Feb 2012	Deleted user 13 Aug 2012	1
	Security of users - removing First and Last name registration requirements Locked	Sue M. 18 July 2010	Marcus Green 21 Aug 2012	7
	HTTPS SSL Proxy Dropdown Menu Issues Locked	Seth Whitworth 24 Aug 2012	Seth Whitworth 25 Aug 2012	2
	How to hide student enrolments for courses. Locked	Michael Haskell 28 Aug 2012	Michael Haskell 28 Aug 2012	1
	how to set https just for the login page Locked	Carlos Kiyan Tsunami 8 Sept 2012	Carlos Kiyan Tsunami 8 Sept 2012	0
	Moodle 2.2.3 doesn't accept https!!! HELP Locked	marianka wagner 10 Sept 2012	Seth Whitworth 11 Sept 2012	1
	Professor and student self-enrollment help. Locked	pinguim pinguim 13 Sept 2012	Mary Cooch 13 Sept 2012	2
	To HTTPS or to not HTTPS? That is the question Locked	Dave Perry 26 Jan 2012	Rod Spears 14 Sept 2012	8
	temporary/one-time-use password for user Locked	K P 24 Sept 2012	K P 24 Sept 2012	2
	Encryption of Files Inquiry Locked	Cariosha Dav 25 Sept 2012	Hubert Chathi 25 Sept 2012	1
	File security/permissions issue in Safari Locked	M N 27 Sept 2012	Mary Cooch 27 Sept 2012	5
	Hide other students from Recent Activity Report Locked	Jonathan Rabson 22 Sept 2012	Jonathan Rabson 27 Sept 2012	3
	How can I disable Notifications page when login as admin? Locked	susan cheng 3 Oct 2012	susan cheng 3 Oct 2012	0
	Students can see hidden resources Locked	Richard van Iwaarden 2 Oct 2012	E. L. Cooper 4 Oct 2012	3
	Changing Password Settings Locked	William Hazell 7 Aug 2012	Derek Chirnside 4 Oct 2012	4
	Parent Role - View Child's Courses (moodle 2,2) Locked	M Bee 5 Oct 2012	Mary Cooch 5 Oct 2012	1
	Integration with Atlassian Crowd Locked	Nicholas Rayner 5 Oct 2012	Nicholas Rayner 5 Oct 2012	0
	Use the no login feature for the admin user Locked	Steve Massicotte 5 Oct 2012	Steve Massicotte 6 Oct 2012	2
	Is notification page supposed to be free of require_login()? Locked	Daniele Cordella 6 Oct 2012	Tim Hunt 7 Oct 2012	1
	Get username from core_user_get_users_by_id Locked	Shi Qiao Yu 8 Sept 2012	Roger Studner 10 Oct 2012	2
	Moodle 1.9.19+ spam accounts added inspite of CAPTCHA Locked	Deleted user 11 Oct 2012	Deleted user 11 Oct 2012	0
	Login authentication Locked	Frank Vanden Bosch 11 Oct 2012	Frank Vanden Bosch 11 Oct 2012	0
	BackTracking in moodle site? Locked	panagiotis karageorgos 12 Oct 2012	Visvanath Ratnaweera 13 Oct 2012	5
	How can i hide teachers name on homepage Locked	H Saris 14 Oct 2012	Mary Cooch 15 Oct 2012	5
	Improve password hashing in Moodle Locked	Darko Miletić 16 Oct 2012	Dan Poltawski 16 Oct 2012	1
	Added security maybe along the lines of side certificates Locked	Edward Murray 18 Oct 2012	Edward Murray 18 Oct 2012	0
	LDAP Problems Locked	Ivaylo Radev 19 Oct 2012	Ivaylo Radev 19 Oct 2012	0
	Making passwords simpler Locked	Simon Carr 26 Oct 2012	Mary Cooch 26 Oct 2012	1
	Guest access not working under moodle 2.2 Locked	K A 29 Sept 2012	Geoff Waring 1 Nov 2012	3
	BSI VULNERABILITY Locked	aziz elhajir 5 Nov 2012	aziz elhajir 5 Nov 2012	0
	clamAV blocks all Uploads in Moodle 2.3.1 Locked	Deleted user 25 July 2012	Monica Florea 8 Nov 2012	4
	anonymous grading Locked	Asaf Ohaion 8 Nov 2012	Mary Cooch 8 Nov 2012	1
	locked out! Locked	steven corner 18 July 2012	Rachel Fransen 9 Nov 2012	2
	What about preventing multiple log-ins by the same login and password in Moodle? Locked	John Stremp 1 Nov 2011	Krizny Kishnek 10 Nov 2012	15
	IP Blocker Locked	mike schulz 4 May 2011	Ken Task 15 Nov 2012	6
	Company demanding domain access - connect as Locked	Keith W 28 Oct 2012	Russell Waldron 21 Nov 2012	1
	Create New User in DB Locked	Bar Geffen 21 Nov 2012	Bar Geffen 21 Nov 2012	0
	Moodle hacked, file permissions in IIS Locked	Dave Keller 22 Nov 2012	Dave Keller 23 Nov 2012	5
	Force users to change password in first login (LDAP settings) Locked	Siamak Alavi 28 Nov 2012	Siamak Alavi 28 Nov 2012	0
	Role permittung access only to specified courses Locked	Klaus Westermann 4 Dec 2012	Klaus Westermann 4 Dec 2012	0
	http to https Locked	d.w jones 20 Nov 2012	d.w jones 4 Dec 2012	2
	public and registered user course permissions Locked	Justas Pranskaitis 4 Dec 2012	Justas Pranskaitis 4 Dec 2012	0
	Blocked yet no blocking found Locked	Paul S 6 Dec 2012	Paul S 6 Dec 2012	0
	someone added adds to my moodle Locked	Dan Trouten 7 June 2012	zeinab khadem 8 Dec 2012	9
	How to grant access to guest Locked	Abraham Zeyohannis 27 June 2012	Mary Cooch 16 Dec 2012	2
	Another guest access question Locked	Wendy Tocci 20 Dec 2012	Wendy Tocci 20 Dec 2012	0
	Site policy agreement - force scroll Locked	Justina Torres 11 Dec 2012	Justina Torres 21 Dec 2012	3
	What is the impact of technology on privacy and security? Locked	xy8797 xy8797 27 Dec 2012	xy8797 xy8797 27 Dec 2012	0
	guest access without password Locked	thomas tomporowski 3 Jan 2013	thomas tomporowski 3 Jan 2013	0
	does administrators see who "anonymous" are? Locked	val val 3 Jan 2013	val val 3 Jan 2013	0
	How to block printing of my html pages Locked	jason steer 9 Jan 2013	jason steer 9 Jan 2013	0
	Expire Login Locked	Patrick Hallermann 14 Jan 2013	Patrick Hallermann 14 Jan 2013	0
	LDAP Password Changer Locked	Graham Stone 14 Jan 2013	Steve Kleine 14 Jan 2013	1
	My site was hacked. Students get re-directed when accessing blog tag Locked	Cristina Berisso 18 Jan 2013	Justas Pranskaitis 18 Jan 2013	2
	Disable password Unmask option Locked	Dimitris Chatzipanagiotidis 17 Jan 2013	Dimitris Chatzipanagiotidis 21 Jan 2013	4
	moodledata in cgi-bin unsave? Locked	Janno Bend 23 Jan 2013	Ray Morris 29 Jan 2013	1
	Security Process Locked	rupamoy bhattacharya 23 Jan 2013	Dan Poltawski 30 Jan 2013	1
	Moodle with a Hosting Provider or Moodle with a University Server Locked	Daniel Lombardo 18 Jan 2013	Daniel Lombardo 31 Jan 2013	4
	SQL Injectable Sites listed! Locked	Deleted user 2 Feb 2013	Deleted user 4 Feb 2013	4
	Edit profile page not loading when using https login Locked	Paul Garratt 7 Feb 2013	Paul Garratt 7 Feb 2013	0
	Moodle Site Malware infected - please help! Locked	Emma Richardson 13 Nov 2012	Mary Cooch 10 Feb 2013	9
	sshd Not Running \| Moodle v2.4 Locked	Francois Evans 9 Feb 2013	Visvanath Ratnaweera 12 Feb 2013	1
	How to allow guests to view the MRBS calendar? Locked	Dieter D. 14 Feb 2013	Dieter D. 14 Feb 2013	0
	Setting up Moodle using Windows Server 2008R2 Locked	Viki Markwell 15 Feb 2013	Viki Markwell 18 Feb 2013	2
	Setting Enrolment Key in 2.4 Locked	Simukai Rukuni 18 Feb 2013	Derek Chirnside 19 Feb 2013	1
	Site Comprismised Courses table deleted? Locked	conrad jones 21 Feb 2013	conrad jones 21 Feb 2013	1
	How to assign roles to guests? Locked	Dieter D. 25 Feb 2013	Mary Cooch 25 Feb 2013	1
	Insecure Dataroot Locked	Edward Shaw 28 Feb 2013	Ken Task 28 Feb 2013	1
	Is there a "waiting period" after so many failed login attempts? Locked	Melissa Benson 1 Mar 2013	Melissa Benson 1 Mar 2013	0
	restrcition d'acces au site moodle par IP Locked	Faouzi Maddouri 19 Feb 2013	Faouzi Maddouri 1 Mar 2013	2
	LDAP SSO on Windows Locked	rupamoy bhattacharya 1 Mar 2013	Iñaki Arenaza 2 Mar 2013	1
	robo accounts HELP Locked	Gerry Jenkins 5 Mar 2013	Gerry Jenkins 6 Mar 2013	2
	clean frontpage Locked	remco koffijberg 27 Feb 2013	Richard Oelmann 6 Mar 2013	8
	Teachers account compromised and course files deleted Locked	Stephen Bloomer 8 Mar 2013	Steve Kleine 8 Mar 2013	5
	redirect to new installation Locked	Deleted user 3 Mar 2013	Visvanath Ratnaweera 13 Mar 2013	2