Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

Previous
1
2
3
4
5
6
7
8 (current)
9
10
…
16
Next

List of discussions. Showing 100 of 1552 discussions
Discussion	Started by	Last post	Replies
Avoid dictionary attacks Locked	Manuel García 20 Jan 2014	Tim Hunt 20 Jan 2014	1
User Access to Courses by Device and Number of Login Sessions Locked	Steve Gemar 21 Dec 2013	Rob Willemse 25 Jan 2014	1
Websiteadministration does not work correctly after update Locked	Matthias Barmeier 28 Jan 2014	Matthias Barmeier 28 Jan 2014	0
Access rights to catagorys in moodle Locked	Andy Burrows 28 Jan 2014	Andy Burrows 29 Jan 2014	11
SSL Certificate for Moodle Locked	Tim Childe 24 Jan 2014	Howard Miller 3 Feb 2014	5
prevent printing of lessons in Moodle 2.5 Locked	Asana Draper 31 Jan 2014	Howard Miller 4 Feb 2014	6
Firewall settings for Moodle Locked	Anya Zinoveva 29 Jan 2014	samudaya Nanayakkara 10 Feb 2014	2
MAMP & https Locked	Mike Brinkman 3 Jun 2010	Chris K 19 Feb 2014	13
What is a security issue? Locked	Tim Hunt 18 Feb 2014	Michael de Raadt 19 Feb 2014	1
Moodle and Mod_Evasive Locked	Brian Y 20 Feb 2014	Howard Miller 25 Feb 2014	1
MOODLE REGISTRATION Locked	Jyoti Madkar 4 Mar 2014	Emma Richardson 4 Mar 2014	2
Make username and password case insensitive Locked	Micky Fokken 12 Dec 2011	Petr Skoda 5 Mar 2014	12
SSO across Active Directory forests Locked	Colleen Romero 23 Jan 2014	Iñaki Arenaza 12 Mar 2014	4
"Print screen / copy page" Protection Locked	Irham Latif 14 Dec 2013	Tim Hunt 18 Mar 2014	4
Sharing Authentication With External Site Locked	Jack O'Neill 20 Mar 2014	Jack O'Neill 20 Mar 2014	0
Security of external manifests Locked	Johan Meerkerk 23 Mar 2014	Johan Meerkerk 25 Mar 2014	2
verifying security patches Locked	john saylor 25 Mar 2014	john saylor 25 Mar 2014	0
course file access without login into moodle Locked	zizo zizo 24 Mar 2014	Richard Oelmann 27 Mar 2014	5
IP lockdown for admin account Locked	Martin O'Mahony 28 Mar 2014	Martin O'Mahony 28 Mar 2014	0
Database crashed Locked	Ahmed Belhani 27 Mar 2014	Ahmed Belhani 29 Mar 2014	3
How to get course completed date..? Locked	Atul Kachhadiya 31 Mar 2014	Atul Kachhadiya 31 Mar 2014	0
password requirement too complex Locked	jenny clarke 10 Apr 2014	Guillermo Madero 11 Apr 2014	2
changing multiple passwords at once Locked	Rob Dahlin 11 Apr 2014	Rob Dahlin 11 Apr 2014	0
Ads displayed Moodle sites where none should be (a browser issue actually) Locked	Joseph Thibault 12 Apr 2014	Joseph Thibault 12 Apr 2014	0
Authenticating Access to Large Amount of Static Data Locked	Warren Toomey 11 Apr 2014	Warren Toomey 12 Apr 2014	2
[URGENT] Heartbleed OpenSSL Vulnerability Locked	Matt Spurrier 11 Apr 2014	Matt Bury 17 Apr 2014	9
reCaptcha Preventing User Registration Locked	Fred Roller 24 Apr 2014	Jez H 29 Apr 2014	6
Allow Teachers to reset password Locked	Stijn Kersten 29 Apr 2014	Stijn Kersten 30 Apr 2014	2
Anti-minimization ability Locked	Michael Spain 2 Apr 2014	Ray Morris 1 May 2014	1
students opening new internet windows on iPads during quizzes Locked	Rob Dahlin 11 Apr 2014	Ray Morris 1 May 2014	2
Allow user with specific email domain on moodle 2.6 Locked	Christine Mburu 2 May 2014	Christine Mburu 2 May 2014	0
Dataroot permissions and contents changed... Locked	Aaron Batty 4 May 2014	Aaron Batty 4 May 2014	0
View Permissions Locked	Sigal Rashba 11 May 2014	Nikki LM 12 May 2014	1
How do I setup LDAP or Microsoft AD? Locked	Chris Smith 8 May 2014	Chris Smith 13 May 2014	3
Guest being able to enter a course (course frontpage) but not able to access resources Locked	Ezequiel Uberti 13 May 2014	Ezequiel Uberti 13 May 2014	0
moodledata security testing Locked	Filippo Carnevali 14 May 2014	Guillermo Madero 15 May 2014	1
Moodledata security check Locked	Filippo Carnevali 14 May 2014	Guillermo Madero 15 May 2014	1
Moodle with Ms active directory(Lapd) single sign-in Locked	Spyros Savvanis 19 May 2014	Dave Perry 19 May 2014	3
restricting usage of pdf file Locked	Jirka Hladis 17 May 2014	Guillermo Madero 21 May 2014	16
Authentication with captcha Locked	Irith Herman 28 May 2014	Irith Herman 28 May 2014	0
Hide All Email Addresses From Everyone Locked	Tom Wootton 29 May 2014	Guillermo Madero 29 May 2014	3
Email address change confirmation sent to wrong address? Locked	Dale Davies 29 May 2014	Dale Davies 29 May 2014	2
Moodle Site Redirecting to an unknown site Locked	deepika thakur 29 May 2014	Emma Richardson 29 May 2014	1
A 15 year old student put Moodle down Locked	Bernat Martinez 23 May 2014	Dave Perry 30 May 2014	23
Download Protection Locked	Gul Leisberg 31 May 2014	Matt Bury 31 May 2014	3
moodle systematically remove users Locked	jose Campos 2 Jun 2014	jose Campos 2 Jun 2014	0
Make MYSQL Database Anonymous Locked	Alan Cherwinski 3 Jun 2014	Alan Cherwinski 3 Jun 2014	3
How do I prevent some users from enrolling themselves in some courses? Locked	Ted Osborne 4 Jun 2014	John Gifford 5 Jun 2014	6
ISO 27001: Input data validation and Control of internal processing Locked	Gael Lams 26 May 2014	Tim Hunt 6 Jun 2014	6
Unsecured files in course with password-protected guest access Locked	Kuriko A 6 Jun 2014	Kuriko A 6 Jun 2014	0
Do I need a secure https logon? Locked	Steven Fitzgerald 9 Jun 2014	Dave Perry 9 Jun 2014	1
The guest role "guest" is incorrectly defined! Locked	Di Juwel 9 Jun 2014	Emma Richardson 9 Jun 2014	1
Expanding logging (and events) coverage in 2.8 Locked	Marina Glancy 6 Jun 2014	Catherine Pinnell 10 Jun 2014	1
Restricting category Admins from other cohorts Locked	Brian Gaehring 10 Jun 2014	Brian Gaehring 11 Jun 2014	2
Security "Forbidden" error Locked	Eder dos Santos 11 Jun 2014	Eder dos Santos 11 Jun 2014	0
How to make the entire Moodle website over https? Locked	Davi DePaula 12 Jun 2014	Davi DePaula 13 Jun 2014	6
Allow a moodle user to login only from a given IP or set of IP addresses Locked	Plecto Rincus 13 Jun 2014	Eder dos Santos 13 Jun 2014	1
IP Filter for a resource or an activity Locked	Trevor Li 28 Mar 2014	Marina Glancy 16 Jun 2014	2
Using local login id Locked	chris stevens 18 Jun 2014	John Gifford 18 Jun 2014	1
Enroll Users Without Email Confirmation Locked	Kenton de Jong 21 Jun 2014	Kenton de Jong 21 Jun 2014	0
Enrolling Cohorts from Sub-Categories Locked	Brian Gaehring 11 Jun 2014	John Gifford 23 Jun 2014	2
Creating a non-gradeable student role - Audit. Locked	Jason Carson 27 Jun 2014	Jason Carson 27 Jun 2014	0
Prevent guests from viewing forums Locked	Ezequiel Uberti 11 Jun 2014	Catherine Pinnell 4 Jul 2014	1
Spammers Using Self Registration Locked	Mark Iannone 13 Feb 2013	Greg Padberg 9 Jul 2014	20
SECURITY: Disable themes.googleusercontent and other cross-site linking Locked	Leon Franken 10 Jul 2014	Leon Franken 10 Jul 2014	0
Security for Online services Locked	sasa lk 10 Jul 2014	sasa lk 10 Jul 2014	0
Allow Unauthenicated Users to View Gallery Locked	Matthew Dodds 16 Jul 2014	Matthew Dodds 17 Jul 2014	4
Checkpoint Firewall blocking Moodle Posts Locked	Sam McNeill 22 May 2012	Eric Katchan 18 Jul 2014	5
hacking of moodle learning platform Locked	henri pelissier 22 May 2011	Chris Pangelinan 21 Jul 2014	16
SSL, custom domains, general security and platform curiosities Locked	Chris Wagner 22 Jul 2014	Chris Wagner 22 Jul 2014	0
Course Category acess through LDAP Locked	Catherine Pinnell 23 Jul 2014	Catherine Pinnell 23 Jul 2014	0
300 login error Locked	m question 25 Jul 2014	m question 25 Jul 2014	0
Multiple users, same username and password Locked	Andrew Hayes 29 Jul 2014	Andrew Hayes 29 Jul 2014	2
Restore a course after deleting Locked	Olena Korol 31 Jul 2014	Catherine Pinnell 31 Jul 2014	1
Uploading files to user profiles Locked	sherri g 11 Jun 2013	Jordi Fontseca 21 Aug 2014	3
Possible Hack? What to do next? Locked	Nic Ruley 31 Aug 2013	Tim Vaughn 25 Aug 2014	7
"Site policy URL for guests" keeps getting auto filled Locked	Melissa Benson 8 Oct 2013	Daniel Thies 29 Aug 2014	7
HP's fortify on demand security review: "Session Token Passed in Query String" Locked	Franco Pomidoro 1 Sep 2014	Franco Pomidoro 2 Sep 2014	4
Guest access who can only view certain uploaded assignments Locked	Rachel Chavez 2 Sep 2014	Rachel Chavez 2 Sep 2014	4
Restricting Participants List Locked	Chuck Barry` 2 Sep 2014	Chuck Barry` 3 Sep 2014	2
Deny access to/Hide participant listing when logged in - enrolled students Locked	s n 27 Jul 2009	Chuck Barry` 4 Sep 2014	22
Invalid Login all the time. Locked	alex crampton 20 Dec 2012	James Miller 8 Sep 2014	8
Permissions in 2.7 for Plugin Installer Locked	Eric Albert 29 Aug 2014	Eric Albert 10 Sep 2014	4
Single Sign On With Forefront Locked	Paul L 26 Jun 2014	Dave Perry 10 Sep 2014	7
Login errors form unknown users every 5-7 minutes? Locked	Tony Chilvers 12 Sep 2014	Tony Chilvers 12 Sep 2014	0
Remove few links under site administration for manager Locked	Melvin Richard 10 Sep 2014	Melvin Richard 12 Sep 2014	2
EU cookies law and Moodle Locked	Gonzalo Castells Ortells 12 Sep 2014	Matt Bury 12 Sep 2014	4
Admin Notification for self registration users with their details Locked	Tom Farrow 12 Sep 2014	Tom Farrow 12 Sep 2014	0
Problem with spam: Clic to Continue > by Text-Enhance Locked	Álvaro López Rojas 4 Dec 2013	Raquel Sacristán P. 15 Sep 2014	6
HTTPS login on and off campus Locked	Eric Albert 15 Sep 2014	Eric Albert 17 Sep 2014	2
thematoweb.com site Locked	Leta Rogers 23 Sep 2014	Richard Oelmann 23 Sep 2014	1
Site Policy Acceptance Log Locked	James England 25 Sep 2014	James England 28 Sep 2014	2
New Install: dataroot exposure to web, security issue Locked	Brad PIerce 27 Sep 2014	Brad PIerce 30 Sep 2014	3
External database settings or example Locked	Henk Petter 2 Oct 2014	Henk Petter 2 Oct 2014	0
http for login Locked	Pete Tyrer 5 Oct 2014	Pete Tyrer 5 Oct 2014	0
Solution worms infect site Locked	Lázaro José Carneiro de Sousa 6 Oct 2014	Lázaro José Carneiro de Sousa 6 Oct 2014	0
Moodle guest autologin redirect to login page Locked	Vincent Dewez 6 Oct 2014	Helen Foster 7 Oct 2014	1
Easy authentication for children and adults? Locked	Brylie Oxley 10 Oct 2014	Brylie Oxley 10 Oct 2014	0
Interests, profile picture, and Google image search? Locked	Michael Gerszewski 7 Oct 2014	Daniel Neis Araujo 14 Oct 2014	3
How to keep Moodle data safe from server admins? Locked	Ohto Nordberg 17 Oct 2014	Visvanath Ratnaweera 18 Oct 2014	3

Previous
1
2
3
4
5
6
7
8 (current)
9
10
…
16
Next