Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	EU General Data Protection Regulation (GDPR) compliance Locked	Martin Dougiamas 17 May 2017	Prince Namdev 9 July 2019	100
	Moodle Security Locked	Marc Grober 30 Oct 2008	Anthony Borrow 16 Dec 2008	74
	Moodle Salting Locked	ETH Zürich 14 Nov 2009	Ger Tielemans 21 Nov 2009	50
	Is an SSL Certicate required for Moodle 2.0 Locked	Rich Brennan 5 Jan 2011	Ian Webb 12 Mar 2011	42
	Hacking and security Locked	Robin Greaves 17 Aug 2007	Timothy Takemoto 8 Feb 2009	34
	SSL connection to Moodle DB? Locked	Paul Martin 2 Oct 2018	Garrett Boone 11 Jan 2019	33
	GDPR Plugins - some questions Locked	Kerry Watt 19 Apr 2018	Jun Pataleta 19 July 2018	32
	Moodle and Encrypted Database Locked	Robert Saari 24 Oct 2009	Cliff Carpenter 18 Nov 2009	31
	Is the unoconv installation a security risk? Locked	Matthew Davidson 24 June 2016	Meg Goodine 10 Nov 2017	27
	Weak SSL Cipher Suites are Supported - Version-1.9.5 Locked	Vinod Kumar 27 Apr 2015	Vinod Kumar 10 May 2015	26
	Disabling Login HTTPS Locked	John Okely 20 June 2014	John Okely 5 Jan 2015	25
	Is there a way to completely delete users including all their data? Locked	stefan weber 18 Sept 2018	stefan weber 5 Apr 2019	24
	A 15 year old student put Moodle down Locked	Bernat Martinez 23 May 2014	Dave Perry 30 May 2014	23
	SSL certificate issues Locked	raghav agarwal 30 Mar 2013	James McLean 19 July 2016	23
	Security issue: source files hacked ("hackcheckstr") Locked	Christian Ebert 3 Feb 2009	Timothy Takemoto 12 Nov 2009	23
	Require Moodle Security Audit Certificate	Jbs Shadap 23 Mar 2024	Mary Cooch 2 Apr 2024	22
	SSL config on CentOS/Nginx Locked	Martin Williams 30 Apr 2019	Ken Task 4 May 2019	22
	Firesheep Locked	Mike Norton 3 Nov 2010	Petr Skoda 24 Dec 2010	22
	Deny access to/Hide participant listing when logged in - enrolled students Locked	s n 27 July 2009	Chuck Barry` 4 Sept 2014	22
	How to secure the Data Root for Moodle files? Locked	nicole hackett 29 Mar 2009	Guillermo Madero 23 Apr 2012	22
	Extended support for Moodle 3.9 LTS Locked	Andrew Mair 3 Nov 2022	Dan Marsden 18 Nov 2022	21
	Ferpa and moodle Locked	curt bixel 23 Mar 2018	Rick Jerz 26 Mar 2018	20
	Security Question Locked	Andrew Taylor 16 July 2014	Howard Miller 11 Oct 2016	20
	Spammers Using Self Registration Locked	Mark Iannone 13 Feb 2013	Greg Padberg 9 July 2014	20
	SSL Proxy woes Locked	Ben Steeples 27 July 2012	Robin Stark 22 Dec 2016	20
	Server breached front-end - malicious files uploaded Locked	Michael Iscool 30 June 2016	Ken Task 8 July 2016	19
	Applying patch to protect against CVE-2017-2641 Locked	B J 21 Mar 2017	Nadav Kavalerchik 25 Mar 2017	18
	Courses for Teachers...... Enrol one by one by one Locked	Steve Audus 12 Sept 2013	Zeid Fanous 24 Sept 2013	18
	URGENT HELP!! ADMIN ACCOUNT HACKED Locked	Deb Smith 3 May 2011	George Henley 14 Apr 2012	18
	Vulnerabilities in Moodle code scan Locked	Vinod Kumar Aleti 17 July 2019	Eu Wee TAN 22 Nov 2019	17
	Cookie Consent and Privacy Notice Popup Locked	Alan Christie 13 July 2018	Agnes Beleznai 13 Feb 2021	17
	How to hide/disable courses and quiz? Locked	Lucilla Wang 31 May 2016	Lucilla Wang 6 June 2016	17
	Moodle does not restrict file types for uploads??? Security Risk??? Locked	Rob Barnett 18 Sept 2009	javier D 30 Mar 2016	17
	Site Hacked Locked	Seth Dickens 15 June 2009	Jon Witts 18 June 2009	17
	Rendering random page after \lib\requirejs.php\8708709\	Test Account 28 Mar 2024	Mary Cooch 2 Apr 2024	16
	How to Download my Personal Data or other's Data Locked	Alan Schrock 29 Nov 2018	Alan Schrock 4 Jan 2019	16
	Privacy concens regarding the mobile push notifications Locked	Beni Keller 23 Feb 2018	Beni Keller 5 Mar 2018	16
	Advice please! Is Moodle safe? Locked	jesse magees 30 Apr 2015	Visvanath Ratnaweera 7 Jan 2016	16
	worms infect site Locked	Lázaro José Carneiro de Sousa 29 Sept 2014	François Lizotte 21 Nov 2014	16
	restricting usage of pdf file Locked	Jirka Hladis 17 May 2014	Guillermo Madero 21 May 2014	16
	IP Blocker - help Locked	Paul Baumeister 20 Feb 2013	Ernani Veloso Freire 1 Sept 2016	16
	hacking of moodle learning platform Locked	henri pelissier 22 May 2011	Chris Pangelinan 21 July 2014	16
	Why do passwords have to be so difficult??? Locked	Jamie Smith 1 July 2010	Glenys Hanson 19 Aug 2010	16
	How do I NOT force a password change Locked	Heather Whitney 8 May 2009	Mark Hulbrock 5 Oct 2011	16
	Hacking and security - what is the ultimate htaccess? Locked	Timothy Takemoto 8 Feb 2009	Bartosz Cisek 24 Mar 2009	16
	HaProxy: Moodle complains about not running via SSL though it does Locked	ray charles 4 Mar 2020	Matteo Scaramuccia 30 Mar 2020	15
	Lots of requests in access_log for outbound connections Locked	David White 16 May 2019	Evan Donovan 19 May 2019	15
	Building in SHA-256 hashing for javascript Locked	Garrett Boone 22 Oct 2018	Dan Marsden 25 Oct 2018	15
	GDPR Course retention varies by qual type Locked	Alicia Wallace 4 May 2018	Deleted user 25 May 2018	15
	reset admin password? Locked	Rachel Horst 6 June 2017	Frank Santos 16 Aug 2020	15
	Cross-Site Request Forgery (CSRF) in Moodle default pages - help Locked	Vincent Gullotta 21 Feb 2015	James McLean 25 Feb 2015	15
	What about preventing multiple log-ins by the same login and password in Moodle? Locked	John Stremp 1 Nov 2011	Krizny Kishnek 10 Nov 2012	15
	Fake login attempts Locked	Filippo Caburlotto 1 Feb 2023	Ken Task 3 Feb 2023	14
	Lots of invalid login token errors in the logs Locked	Diane Soini 9 Jan 2019	Diane Soini 12 Jan 2019	14
	Help with redirect from HTTP to HTTPS Locked	Carolyn McIntyre 8 Mar 2017	J Guzman 22 Nov 2017	14
	Manager role not function as expected Locked	Trace James 24 Sept 2015	Trace James 29 Sept 2015	14
	The path supplied to Clam is invalid Locked	Saeed Amiri 31 Oct 2014	Ken Task 8 Nov 2014	14
	HTTP to HTTPS converter for external content Locked	John Okely 5 Aug 2014	John Okely 4 May 2015	14
	Teachers should only see theire own students/courses Locked	Klaas Hobo 21 Mar 2013	Tim Childe 9 Jan 2014	14
	Spam infected Moodle sites Locked	Frank Ralf 13 May 2009	Frank Ralf 6 Oct 2009	14
	Security Moodle Locked	Rondi Ariyanto 27 July 2017	Rondi Ariyanto 7 Aug 2017	13
	prevent login from the same ip address for a time Locked	Mohammed awad 17 Dec 2015	Visvanath Ratnaweera 5 Jan 2016	13
	Insecure dataroot (yet again) Locked	Visvanath Ratnaweera 14 Nov 2015	Visvanath Ratnaweera 15 Nov 2015	13
	MAMP & https Locked	Mike Brinkman 3 June 2010	Chris K 19 Feb 2014	13
	Securing a directory Locked	Michael Black 14 Jan 2010	Joe Griffin 11 Feb 2010	13
	user access Locked	ivan breziansky 4 Aug 2009	ivan breziansky 7 Aug 2009	13
	Session Identifier Not Updated ?? Security Issue? Locked	Richard Wallace 4 Aug 2009	Howard Miller 3 May 2015	13
	Moodle Site is marked with malicious software from Google Locked	EVEA UPE 9 Jan 2023	Ken Task 14 Jan 2023	12
	Downloaded files identified as dangerous Locked	Javier Tejera 10 Aug 2022	Ken Task 14 Aug 2022	12
	LDAP server authentication Locked	Jorge G. C. 16 Sept 2019	Jon Bolton 3 Oct 2019	12
	Incoming mail configuration with Google accounts detected as insecure Locked	Iñigo Zendegi Urzelai 5 Mar 2018	Iñigo Zendegi Urzelai 17 Sept 2018	12
	Move Moodle Config Outside of Web Root Locked	Lewis Hackfath 9 Feb 2016	James McLean 10 Feb 2016	12
	Blocking access to Users from outside the country Locked	david english 24 Jan 2016	Matt Bury 25 Jan 2016	12
	2.7.1 hacked Locked	Wendi Daniels 6 Feb 2015	Visvanath Ratnaweera 10 Feb 2015	12
	Maximum Time per Day Locked	Seth Mengal 29 July 2013	Howard Miller 16 Feb 2016	12
	Disabling Right Click Locked	Steve Howe 2 Apr 2013	Rick Jerz 6 Apr 2013	12
	Make username and password case insensitive Locked	Micky Fokken 12 Dec 2011	Petr Skoda 5 Mar 2014	12
	Hide e-mail addresses as default Locked	Pete MacKichan 4 July 2009	Menda Lerenda 2 Aug 2012	12
	Corrupted php files Locked	jlh 437 11 Feb 2009	jlh 437 19 June 2009	12
	Offering the same courses to many enterprises (privacy concerns) Locked	Deleted user 10 Nov 2008	Helen Foster 11 Feb 2009	12
	How to prevent session hijacking in Moodle	Jyoti M 22 Sept 2023	Brett Dalton 2 Oct 2023	11
	My moodle site is infected with malware, how to fix?	dharmik dharmik 25 July 2023	Ken Task 27 July 2023	11
	How to turn off - moodle site support request ?	Otmar Bender 20 Oct 2022	Michael Hawkins 14 Mar 2024	11
	XML-RPC: "Should be installed/enabled" Warning Locked	Jason Press 11 Sept 2022	Jason Press 23 Nov 2022	11
	Moodle reverse proxy and URL replace.php not working Locked	jitendra Phull 6 Apr 2019	Ken Task 17 Apr 2019	11
	data privacy plugin 3.3.5 hanging in cron Locked	Tim Gildersleeve 9 May 2018	John Packiaraj 21 Nov 2018	11
	Google keyword in Japanese characters for my moodle site Locked	Milan Mihajlov 20 Apr 2016	Guillermo Madero 19 May 2016	11
	Access rights to catagorys in moodle Locked	Andy Burrows 28 Jan 2014	Andy Burrows 29 Jan 2014	11
	moodledata folder location Locked	Gavin McKay 11 June 2012	Doug Moody 12 June 2012	11
	Facebook contacted me. I have 48hours to comply. What do I do? Locked	Frankie Kam 16 May 2011	Frankie Kam 20 May 2011	11
	Vulnerable software detected on your account Locked	Lhoussaine Moughli 23 Nov 2010	Lhoussaine Moughli 25 Nov 2010	11
	Hacked? (AddFreeStats link embedded on my front page) Locked	Jason Hollowell 13 June 2010	Howard Miller 18 June 2010	11
	SSL and Moodle Locked	Deleted user 27 Apr 2010	Hossam eldin Reda Ibrahim 12 June 2011	11
	How to stop my course files being copied Locked	Kevin Sowden 31 Mar 2009	rupert mackenzie 8 Apr 2009	11
	How to fix XSS trusted users problem Locked	Monico Briseño 7 Feb 2009	Tim Hunt 27 Feb 2015	11
	Safe Exam Browser not available for Assignments????	Ben Girard 5 Mar 2024	Visvanath Ratnaweera 8 Mar 2024	10
	Does Moodle call home? Locked	Soen Trueman 21 Nov 2020	Randy Thornton 30 Oct 2021	10
	About JQuery Locked	Mahmood Naderan 11 June 2020	Ilya Tregubov 12 Feb 2021	10
	Moodle data folder permissons Locked	Eduardo Aspe 29 May 2020	Visvanath Ratnaweera 1 June 2020	10
	Has Moodle done any Vulnerability Assessments themselves? Locked	Monty Bhatia 23 Nov 2019	Michael Hawkins 29 Nov 2019	10