Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next

Discussion	Started by	Last post	Replies
EU General Data Protection Regulation (GDPR) compliance	Martin Dougiamas 17 May 2017	Prince Namdev 9 Jul 2019	100
Moodle Security Locked	Marc Grober 30 Oct 2008	Anthony Borrow 16 Dec 2008	74
Moodle Salting Locked	ETH Zürich 14 Nov 2009	Ger Tielemans 21 Nov 2009	50
Is an SSL Certicate required for Moodle 2.0 Locked	Rich Brennan 5 Jan 2011	Ian Webb 12 Mar 2011	42
Hacking and security Locked	Robin Greaves 17 Aug 2007	Timothy Takemoto 8 Feb 2009	34
SSL connection to Moodle DB? Locked	Paul Martin 2 Oct 2018	Garrett Boone 11 Jan 2019	33
GDPR Plugins - some questions Locked	Kerry Watt 19 Apr 2018	Jun Pataleta 19 Jul 2018	32
Moodle and Encrypted Database Locked	Robert Saari 24 Oct 2009	Cliff Carpenter 18 Nov 2009	31
Is the unoconv installation a security risk? Locked	Matthew Davidson 24 Jun 2016	Meg Goodine 10 Nov 2017	27
Weak SSL Cipher Suites are Supported - Version-1.9.5 Locked	Vinod Kumar 27 Apr 2015	Vinod Kumar 10 May 2015	26
Disabling Login HTTPS Locked	John Okely 20 Jun 2014	John Okely 5 Jan 2015	25
Is there a way to completely delete users including all their data?	stefan weber 18 Sep 2018	stefan weber 5 Apr 2019	24
Security issue: source files hacked ("hackcheckstr") Locked	Christian Ebert 3 Feb 2009	Timothy Takemoto 12 Nov 2009	23
SSL certificate issues Locked	raghav agarwal 30 Mar 2013	James McLean 19 Jul 2016	23
A 15 year old student put Moodle down Locked	Bernat Martinez 23 May 2014	Dave Perry 30 May 2014	23
How to secure the Data Root for Moodle files? Locked	nicole hackett 29 Mar 2009	Guillermo Madero 23 Apr 2012	22
Deny access to/Hide participant listing when logged in - enrolled students Locked	s n 27 Jul 2009	Chuck Barry` 4 Sep 2014	22
Firesheep Locked	Mike Norton 3 Nov 2010	Petr Skoda 24 Dec 2010	22
SSL config on CentOS/Nginx	Martin Williams 30 Apr 2019	Ken Task 4 May 2019	22
SSL Proxy woes Locked	Ben Steeples 27 Jul 2012	Robin Stark 22 Dec 2016	20
Spammers Using Self Registration Locked	Mark Iannone 13 Feb 2013	Greg Padberg 9 Jul 2014	20
Security Question Locked	Andrew Taylor 16 Jul 2014	Howard Miller 11 Oct 2016	20
Ferpa and moodle Locked	curt bixel 23 Mar 2018	Rick Jerz 26 Mar 2018	20
Server breached front-end - malicious files uploaded Locked	Michael Iscool 30 Jun 2016	Ken Task 8 Jul 2016	19
URGENT HELP!! ADMIN ACCOUNT HACKED Locked	Deb Smith 3 May 2011	George Henley 14 Apr 2012	18
Courses for Teachers...... Enrol one by one by one Locked	Steve Audus 12 Sep 2013	Zeid Fanous 24 Sep 2013	18
Applying patch to protect against CVE-2017-2641 Locked	B J 21 Mar 2017	Nadav Kavalerchik 25 Mar 2017	18
Site Hacked Locked	Seth Dickens 15 Jun 2009	Jon Witts 18 Jun 2009	17
Moodle does not restrict file types for uploads??? Security Risk??? Locked	Rob Barnett 18 Sep 2009	javier D 30 Mar 2016	17
How to hide/disable courses and quiz? Locked	Lucilla Wang 31 May 2016	Lucilla Wang 6 Jun 2016	17
Vulnerabilities in Moodle code scan	Vinod Kumar Aleti 17 Jul 2019	Eu Wee TAN 22 Nov 2019	17
Hacking and security - what is the ultimate htaccess? Locked	Timothy Takemoto 8 Feb 2009	Bartosz Cisek 24 Mar 2009	16
How do I NOT force a password change Locked	Heather Whitney 8 May 2009	Mark Hulbrock 5 Oct 2011	16
Why do passwords have to be so difficult??? Locked	Jamie Smith 1 Jul 2010	Glenys Hanson 19 Aug 2010	16
hacking of moodle learning platform Locked	henri pelissier 22 May 2011	Chris Pangelinan 21 Jul 2014	16
IP Blocker - help Locked	Paul Baumeister 20 Feb 2013	Ernani Veloso Freire 1 Sep 2016	16
restricting usage of pdf file Locked	Jirka Hladis 17 May 2014	Guillermo Madero 21 May 2014	16
worms infect site Locked	Lázaro José Carneiro de Sousa 29 Sep 2014	François Lizotte 21 Nov 2014	16
Advice please! Is Moodle safe? Locked	jesse magees 30 Apr 2015	Visvanath Ratnaweera 7 Jan 2016	16
Privacy concens regarding the mobile push notifications Locked	Beni Keller 23 Feb 2018	Beni Keller 5 Mar 2018	16
How to Download my Personal Data or other's Data Locked	Alan Schrock 29 Nov 2018	Alan Schrock 4 Jan 2019	16
What about preventing multiple log-ins by the same login and password in Moodle? Locked	John Stremp 1 Nov 2011	Krizny Kishnek 10 Nov 2012	15
Cross-Site Request Forgery (CSRF) in Moodle default pages - help Locked	Vincent Gullotta 21 Feb 2015	James McLean 25 Feb 2015	15
GDPR Course retention varies by qual type Locked	Alicia Wallace 4 May 2018	Mark Chaney 25 May 2018	15
Building in SHA-256 hashing for javascript Locked	Garrett Boone 22 Oct 2018	Dan Marsden 25 Oct 2018	15
Lots of requests in access_log for outbound connections	David White 16 May 2019	Evan Donovan 19 May 2019	15
Spam infected Moodle sites Locked	Frank Ralf 13 May 2009	Frank Ralf 6 Oct 2009	14
Teachers should only see theire own students/courses Locked	Klaas Hobo 21 Mar 2013	Tim Childe 9 Jan 2014	14
HTTP to HTTPS converter for external content Locked	John Okely 5 Aug 2014	John Okely 4 May 2015	14
The path supplied to Clam is invalid Locked	Saeed Amiri 31 Oct 2014	Ken Task 8 Nov 2014	14
Manager role not function as expected Locked	Trace James 24 Sep 2015	Trace James 29 Sep 2015	14
Help with redirect from HTTP to HTTPS Locked	Carolyn McIntyre 8 Mar 2017	J Guzman 22 Nov 2017	14
reset admin password?	Rachel Horst 6 Jun 2017	Vinod Kumar 26 Feb 2020	14
Lots of invalid login token errors in the logs Locked	Diane Soini 9 Jan 2019	Diane Soini 12 Jan 2019	14
Session Identifier Not Updated ?? Security Issue? Locked	Richard Wallace 4 Aug 2009	Howard Miller 3 May 2015	13
user access Locked	ivan breziansky 4 Aug 2009	ivan breziansky 7 Aug 2009	13
Securing a directory Locked	Michael Black 14 Jan 2010	Joe Griffin 11 Feb 2010	13
MAMP & https Locked	Mike Brinkman 3 Jun 2010	Chris K 19 Feb 2014	13
Insecure dataroot (yet again) Locked	Visvanath Ratnaweera 14 Nov 2015	Visvanath Ratnaweera 15 Nov 2015	13
prevent login from the same ip address for a time Locked	Mohammed awad 17 Dec 2015	Visvanath Ratnaweera 5 Jan 2016	13
Security Moodle Locked	Rondi Ariyanto 27 Jul 2017	Rondi Ariyanto 7 Aug 2017	13
Cookie Consent and Privacy Notice Popup	Alan Christie 13 Jul 2018	Gary Payne 7 Oct 2019	13
Offering the same courses to many enterprises (privacy concerns) Locked	Deleted user 10 Nov 2008	Helen Foster 11 Feb 2009	12
Corrupted php files Locked	jlh 437 11 Feb 2009	jlh 437 19 Jun 2009	12
Hide e-mail addresses as default Locked	Pete MacKichan 4 Jul 2009	Menda Lerenda 2 Aug 2012	12
Make username and password case insensitive Locked	Micky Fokken 12 Dec 2011	Petr Skoda 5 Mar 2014	12
Disabling Right Click Locked	Steve Howe 2 Apr 2013	Rick Jerz 6 Apr 2013	12
Maximum Time per Day Locked	Seth Mengal 29 Jul 2013	Howard Miller 16 Feb 2016	12
2.7.1 hacked Locked	Wendi Daniels 6 Feb 2015	Visvanath Ratnaweera 10 Feb 2015	12
Blocking access to Users from outside the country Locked	david english 24 Jan 2016	Matt Bury 25 Jan 2016	12
Move Moodle Config Outside of Web Root Locked	Lewis Hackfath 9 Feb 2016	James McLean 10 Feb 2016	12
Incoming mail configuration with Google accounts detected as insecure Locked	Iñigo Zendegi Urzelai 5 Mar 2018	Iñigo Zendegi Urzelai 17 Sep 2018	12
LDAP server authentication	Jorge G. C. 16 Sep 2019	Jon Bolton 3 Oct 2019	12
How to fix XSS trusted users problem Locked	Monico Briseño 7 Feb 2009	Tim Hunt 27 Feb 2015	11
How to stop my course files being copied Locked	Kevin Sowden 31 Mar 2009	rupert mackenzie 8 Apr 2009	11
SSL and Moodle Locked	April Cookson 27 Apr 2010	Hossam eldin Reda Ibrahim 12 Jun 2011	11
Hacked? (AddFreeStats link embedded on my front page) Locked	Jason Hollowell 13 Jun 2010	Howard Miller 18 Jun 2010	11
Vulnerable software detected on your account Locked	Lhoussaine Moughli 23 Nov 2010	Lhoussaine Moughli 25 Nov 2010	11
Facebook contacted me. I have 48hours to comply. What do I do? Locked	Frankie Kam 16 May 2011	Frankie Kam 20 May 2011	11
moodledata folder location Locked	Gavin McKay 11 Jun 2012	Doug Moody 12 Jun 2012	11
Access rights to catagorys in moodle Locked	Andy Burrows 28 Jan 2014	Andy Burrows 29 Jan 2014	11
Google keyword in Japanese characters for my moodle site Locked	Milan Mihajlov 20 Apr 2016	Guillermo Madero 19 May 2016	11
data privacy plugin 3.3.5 hanging in cron Locked	Tim Gildersleeve 9 May 2018	John Packiaraj 21 Nov 2018	11
Moodle reverse proxy and URL replace.php not working	jitendra Phull 6 Apr 2019	Ken Task 17 Apr 2019	11
Cannot Login to Moodle Website Locked	Jan Combrink 27 May 2009	Ruwan Wickramarachchi 17 Oct 2010	10
Forum posts appearing in Technorati - have I been hacked? Locked	Richard Miller 9 Jun 2009	Howard Miller 10 Jun 2009	10
Assign roles in System Locked	Roseli Mat Nor 18 Feb 2011	reham ali 15 Nov 2014	10
LDAP Authentication Error Locked	Constance Kan 13 Jan 2012	Constance Kan 18 Jan 2012	10
Can't get this permission to work Locked	Doug Moody 30 May 2013	Mary Cooch 31 May 2013	10
Enable "Require the Use of Safe Exam Browser" on SCORM package Locked	Jamison Hyman 16 Jul 2013	Jamison Hyman 30 Jul 2013	10
Keeping Members of Paid Courses from Sharing Login Credentials Locked	joseph zabrosky 11 Jun 2015	joseph zabrosky 13 Jun 2015	10
login issue Locked	maggie jelli 5 Oct 2015	Just H 11 Oct 2015	10
How do you secure email addresses? Locked	Paul Wakelam 10 Dec 2015	Richard Lisle 23 Mar 2016	10
Moodle was hacked, how can I modify the index.php Locked	Louis Lawson 14 Nov 2016	Ken Task 15 Nov 2016	10
Guide to ssl certificate https linux ubuntu apache Locked	Christian Kristiansen 1 May 2017	Ken Task 16 May 2017	10
Completely isolated courses Locked	Hannu Mattila 9 Nov 2018	Kerstin Namuth 16 Nov 2018	10
Has Moodle done any Vulnerability Assessments themselves?	Monty Bhatia 23 Nov 2019	Michael Hawkins 29 Nov 2019	10
How to Stop anyone from accessing web material uploaded in Moodle? Locked	Hiten Vyas 30 May 2009	Darcy Parker 11 Aug 2009	9
I think we're being attacked Locked	Harvey Arkawy 20 Jul 2009	Harvey Arkawy 29 Jul 2009	9
Recovery after being hacked. Locked	Stephen Lambert 30 Jul 2009	cor kuijt 3 Aug 2009	9

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next