Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	LTI in moodle and security Locked	Patrick Scott 13 Jan 2020	Lang Holloman 20 Mar 2020	1
	Security Features of Moodle Locked	azhar mir 8 Jan 2020	Marcus Green 9 Jan 2020	1
	Why aren’t deleted users actually deleted? Locked	Natassia Stelmaszek 18 Dec 2019	Michael Hawkins 18 Dec 2019	1
	Google is indexing content when Opentogoogle is disabled Locked	Susana L. 20 Nov 2019	John Provasnik 27 Nov 2019	1
	Moodle.org tracker ... Locked	Ken Task 4 Nov 2019	Michael Hawkins 4 Nov 2019	1
	Changing quiz password while quiz is underway Locked	Ranjith Kunnath 2 Nov 2019	Tim Hunt 2 Nov 2019	1
	Automating GDPR Data Request approval Locked	Jeremy Virgo 30 Oct 2019	Michael Hawkins 30 Oct 2019	1
	User Profile Fields and guests Locked	Matthew Landseadel 5 Sept 2019	Randy Thornton 6 Sept 2019	1
	How can I block cURLs to eliminate phony accounts? Locked	Deb Smith 18 Apr 2019	Ken Task 18 Apr 2019	1
	security problem with mod/scorm/datamodel.php Locked	Michał Boszke 17 Apr 2019	Dan Marsden 17 Apr 2019	1
	Is Moodle OWASP compliant? Locked	Ivica Matotek 9 Apr 2019	Dan Marsden 11 Apr 2019	1
	SSL installation Locked	Akhil Verma 4 Apr 2019	Jon Bolton 4 Apr 2019	1
	The Policy consent form for the teachers only? Locked	Antti Peltonen 27 Mar 2019	Emma Richardson 27 Mar 2019	1
	Testing Moodle security Locked	Luke P 8 Mar 2019	Tim Hunt 9 Mar 2019	1
	defining admin/mamager role for specific course Locked	altan ahmet 8 Mar 2019	altan ahmet 9 Mar 2019	1
	ssl problem Locked	FaRzad Shami 6 Mar 2019	Martin Williams 30 Apr 2019	1
	Restricting Access by Cohort Locked	Elizabeth Ford 1 Mar 2019	Zoran Jančić 15 Mar 2019	1
	Cohorts View hidden categories Locked	Matthew Landseadel 27 Feb 2019	Dave Perry 27 Feb 2019	1
	User Policy and agrement Locked	Tone Engebretsen 6 Jan 2019	Ralf Hilgenstock 14 Jan 2019	1
	disable video right click Locked	rasha fawzy 8 Dec 2018	Rick Jerz 9 Dec 2018	1
	Unable to Log In as admin - Moodle 3.5 Locked	Dave Emsley 30 Nov 2018	Emma Richardson 30 Nov 2018	1
	HTTP to HTTPS Locked	LAVS EDUCATOR 25 Nov 2018	Ken Task 25 Nov 2018	1
	The perils of the BIG "helping" school IT Locked	Visvanath Ratnaweera 19 Nov 2018	Visvanath Ratnaweera 20 Nov 2018	1
	Problem with HTTPS Locked	LAVS EDUCATOR 19 Nov 2018	AL Rachels 20 Nov 2018	1
	looking for vulnerable (old) plugins for Moodle Locked	Jurgen Gaeremyn 19 Nov 2018	Dan Marsden 19 Nov 2018	1
	Password recovery from login page : a strange screen Locked	Niko Niko 7 Nov 2018	Emma Richardson 9 Nov 2018	1
	Can my instructor see my activities outside his course? Locked	Gulielmus Pius Robertus Winslowius 5 Nov 2018	Tim Hunt 5 Nov 2018	1
	Data registry and data deletion Locked	Tomasz Czernak 9 Oct 2018	Andrew Lyons 10 Oct 2018	1
	How to prevent script tag in search URL Locked	Khant Kyaw 14 Sept 2018	Ruslan Kabalin 14 Sept 2018	1
	GDPR / data registry / data deletion plugins - questions, discussion and experiences Locked	stefan weber 7 Aug 2018	Howard Miller 7 Aug 2018	1
	Access Reserved to Moodle Maintenance Mode Locked	Rui Costa 7 Aug 2018	Mary Cooch 7 Aug 2018	1
	using ClamAV to scan for malicious macros in office files Locked	Patrick Scott 31 July 2018	Moodle Admin 5 Aug 2018	1
	How to disable 3.5.1 cookie policy popup? Locked	Randy Thornton 25 July 2018	Randy Thornton 25 July 2018	1
	Recommendations for the permissions on the server Locked	Franky Vallori 16 July 2018	Visvanath Ratnaweera 17 July 2018	1
	Bugs: Code Injection in Moodle? Locked	Franky Vallori 10 July 2018	Tim Hunt 10 July 2018	1
	Last login information on user profile Locked	Joost Elshoff 9 July 2018	Ray Lawrence 10 July 2018	1
	Students contact details hiden from each other Locked	Selma Limbo 9 July 2018	Emma Richardson 9 July 2018	1
	Force HTTPS Locked	Michel d. S. Mesquita 4 July 2018	Moodle Admin 5 Aug 2018	1
	Policy type Locked	Jacques Barzic 14 June 2018	Sara Arjona Téllez 15 June 2018	1
	Problem with "Force users to log in" option Locked	Zoran Jančić 24 May 2018	Zoran Jančić 28 May 2018	1
	Hiding Student Names from Graders Locked	Jennifer Holder 25 Apr 2018	John Provasnik 27 Apr 2018	1
	Delete "graduated" students (GDPR) Locked	Alicia Wallace 24 Apr 2018	Randy Thornton 27 Apr 2018	1
	Bug bounty by Detectify Locked	George Mihailov 24 Apr 2018	Marina Glancy 24 Apr 2018	1
	saml - sso error Locked	oded blaum 18 Apr 2018	Ken Task 18 Apr 2018	1
	Plugins DB and external services (GDPR related) Locked	Tomasz Muras 29 Mar 2018	Andrew Lyons 30 Mar 2018	1
	Database encryption Locked	Ted Long 18 Mar 2018	Mathew Gancarz 21 Mar 2018	1
	Moodle blocked out after IP listing Locked	Anandarup Kar 17 Mar 2018	Visvanath Ratnaweera 28 Mar 2018	1
	File permissions on webroot vs installing plugins Locked	Tom Smith 6 Feb 2018	Ken Task 6 Feb 2018	1
	Hacked or some kind of update? Locked	Patrick Lawrence 28 Jan 2018	Moodle Admin 28 Feb 2018	1
	The Web Application Firewall Blocks Most of the Actions Locked	Ali Arekat 22 Jan 2018	Dan Marsden 22 Jan 2018	1
	Moodle Security Alerts - SPAM Locked	Joshua Hagan 15 Jan 2018	Ken Task 15 Jan 2018	1
	Moodle SimpleSAML Error Locked	Dax Nac 15 Dec 2017	Leon Stringer 15 Dec 2017	1
	Prevent seeing Permissions for others Locked	Andy Hill 11 Dec 2017	Andy Hill 15 Dec 2017	1
	Students can see other students enrolled in a course Locked	Jacques Technologies 8 Dec 2017	Mohamed Gad 10 Sept 2018	1
	DRM and Course content protection. Locked	Deepak Tripathi 1 Dec 2017	Dave Perry 4 Dec 2017	1
	a user with student privilege change another user's password Locked	esty wexler 27 Nov 2017	Mathew Gancarz 29 Nov 2017	1
	Falling out of supported releases? Locked	Wen Hao Chuang 22 Nov 2017	Mathew Gancarz 22 Nov 2017	1
	Assigning permissions to modify themes Locked	marisol castro 2 Nov 2017	Ken Task 2 Nov 2017	1
	PHP.URI.Code.Injection Firewall Message Locked	Ali Arekat 24 Oct 2017	Tomasz Muras 24 Oct 2017	1
	Tab redirected Locked	randall jones 5 Oct 2017	randall jones 5 Oct 2017	1
	Guest Access to Calendar Locked	Emma Richardson 29 Sept 2017	Dean Montgomery 14 Oct 2017	1
	JS Injection Locked	Claudio Henrique 29 Sept 2017	David Mudrák 29 Sept 2017	1
	Discussing sensitive content in moodle Locked	James Brown 11 Sept 2017	Mathew Gancarz 11 Sept 2017	1
	How to change admin password Locked	Mark Miller 5 Sept 2017	Emma Richardson 5 Sept 2017	1
	uses moodle username and password for login on main site Locked	Muhammad Abdulhakeem 7 Aug 2017	Adam Jenkins 1 Sept 2017	1
	Security issue - authentification Locked	Marta Mik 1 Aug 2017	Adam Jenkins 1 Sept 2017	1
	IP address being blocked by the server Locked	Rick Enderle, Jr. 25 July 2017	Just H 25 July 2017	1
	Security settings Locked	Ali Shettima 21 July 2017	John Okely 21 July 2017	1
	GeoLite Database Locked	Doug Moody 21 June 2017	Ken Task 21 June 2017	1
	create an option to prevent xss injection ? Locked	Julien Boulen 1 June 2017	Marina Glancy 6 June 2017	1
	settings for multiple manager(admin) for each organization Locked	Anand Vadivelu 19 May 2017	gurpreet singh 20 June 2017	1
	Security Issue in Moodle 3.2.2: Can you tell me what happened with my content as a Administrator ... Locked	Ricardo Rodriguez 17 May 2017	Emma Richardson 17 May 2017	1
	Daniel Esterly - Is Moodle secure to use with Windows 10 Locked	Daniel Esterly 12 May 2017	John Okely 15 May 2017	1
	settings required to do for running diff ministry sites on single moodle installation Locked	rajani gupta 10 May 2017	Emma Richardson 10 May 2017	1
	Reviewing messages table for bullying incidents Locked	DR LMS 26 Mar 2017	Mike Hoddee 11 Apr 2017	1
	What are the best practices to determine if site was affected by security vulnerability Locked	Rex Lorenzo 23 Mar 2017	Randy Thornton 24 Mar 2017	1
	Folder Password in Moodle Locked	Yonten Jamtsho 17 Mar 2017	Mary Cooch 17 Mar 2017	1
	Cloudflare Security Issue Locked	Matt Spurrier 25 Feb 2017	Randy Thornton 28 Feb 2017	1
	ClamAV Locked	Pieter Portier 18 Jan 2017	Alain Raap 14 Dec 2017	1
	[Security] Moodle showed all users to Sub Category Manager Locked	Hu La 7 Jan 2017	Emma Richardson 7 Jan 2017	1
	Fun times with Poisoned Cookies! Locked	Robin Stark 22 Dec 2016	Randy Thornton 23 Dec 2016	1
	SAML auth with users pulled via LDAP Locked	Joel Coehoorn 14 Dec 2016	Keiron Walsh 22 Sept 2017	1
	Single sign in from a student registration portal Locked	Abdulrauf Yamta 17 Nov 2016	Christopher McCool 18 Nov 2016	1
	How to make sure Accounts get not shared? Max 3 IPs for 1 user Locked	Sven Faltin 24 Oct 2016	James McLean 26 Oct 2016	1
	Moodle 2.9 apache can access moodle files Locked	Zola Anderson 15 Oct 2016	Tim Hunt 15 Oct 2016	1
	Secure Cookies Locked	Deleted user 1 Sept 2016	John Okely 2 Sept 2016	1
	Httpoxy vulnerabilities in php addressed? Locked	Jerry Lau 28 July 2016	Ken Task 29 July 2016	1
	Harold Nartey - Is Moodle Secure to Use? Locked	Harold Nartey 13 May 2016	Mike Churchward 13 May 2016	1
	After Upgrade to 3.0, SSL No Longer Working Locked	Greg Dietrich 27 Apr 2016	James McLean 27 Apr 2016	1
	Limit the number of users into a group Locked	Paul Lemarchand 11 Apr 2016	Sebastian Wz 11 May 2016	1
	Authentication problem Locked	eduardo moisa 7 Jan 2016	eduardo moisa 7 Jan 2016	1
	About Drupal + Moodle integration Locked	Raviteja Yarlagadda 16 Dec 2015	Ken Task 16 Dec 2015	1
	security test Locked	maggie jelli 19 Oct 2015	Simon Rediss-Whitfield 19 Oct 2015	1
	SSL causing Backup problem Locked	René Breedveld 12 Oct 2015	René Breedveld 20 Oct 2015	1
	all the site notes are visible for the teacher Locked	Isaac Marco Blancas 2 Oct 2015	Jon Bolton 16 Oct 2015	1
	Passwords Moodle v2.8 Locked	pat webber 2 Oct 2015	Helen Foster 2 Oct 2015	1
	Access Moodle webservice using SAML Token Locked	Nitin Khubani 16 Sept 2015	Nitin Khubani 17 Sept 2015	1
	accessing moodle from another site without logging in again Locked	tim lambert 15 Sept 2015	Jon Bolton 16 Oct 2015	1
	prevent guest from seeing course summary Locked	Scott Brim 7 Sept 2015	Scott Brim 7 Sept 2015	1
	Removing the navigation block from Moodle 2.5? Locked	Andrew Leer 14 Aug 2015	Sam Alken 31 Aug 2015	1