Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	[Security] How to protect source code and database from hosting company Locked	Hu La 9 Jan 2017	Dave Perry 16 Jan 2017	7
	Issues with a virus in Moodle 3.0.2+ Locked	Luis Pu 2 Aug 2016	Ken Task 3 Aug 2016	7
	Comment request on vulnerability results Locked	Panagiotis Petasis 22 Apr 2016	Richard Oelmann 25 Apr 2016	7
	Captcha alternatives? Locked	Tom Litchfield 24 Feb 2016	Visti Larsen 4 Aug 2016	7
	IP address Locked	heather brown 6 May 2015	Visvanath Ratnaweera 11 May 2015	7
	My Site has been hacked. HELP Locked	Fergal McCann 18 Oct 2014	Guillermo Madero 21 Oct 2014	7
	Single Sign On With Forefront Locked	Paul Lindgreen 26 June 2014	Dave Perry 10 Sept 2014	7
	Securely setting up Moodle 1.9 for Membership requests Locked	Kevin Duggan 18 Oct 2013	Kevin Duggan 19 Oct 2013	7
	"Site policy URL for guests" keeps getting auto filled Locked	Melissa Benson 8 Oct 2013	Daniel Thies 29 Aug 2014	7
	Possible Hack? What to do next? Locked	Nic Ruley 31 Aug 2013	Tim Vaughn 25 Aug 2014	7
	After Spam Account Protection, Current Students Cannot Log-in Locked	Sam Geppi 29 Apr 2013	Helen Foster 30 Apr 2013	7
	How best to track moodle 1.9 security vulnerabilities Locked	Nate Baxley 23 Feb 2012	Nate Baxley 28 Feb 2012	7
	Mysterious self-enrolled user Locked	David McAuley 23 Feb 2011	Guillermo Madero 31 Mar 2011	7
	Minimal student data - help Locked	Rik Hall 21 Sept 2010	Tim Hunt 24 Sept 2010	7
	Security of users - removing First and Last name registration requirements Locked	Sue M. 18 July 2010	Marcus Green 21 Aug 2012	7
	Restricting User Access Locked	Peter Dagnall 2 June 2010	Dean DiMonte 18 Apr 2011	7
	Changing EVERY Learner's Password in one action? Locked	Justin Bender 27 Apr 2010	Justin Bender 30 Apr 2010	7
	securityalerts list Locked	Deleted user 1 Dec 2009	Deleted user 3 Dec 2009	7
	Flash Vulnerability - dealing with uploaded files Locked	Alistair Groves 13 Nov 2009	Mauno Korpelainen 14 Nov 2009	7
	Limiting Incorrect Logins Locked	David Price 27 Oct 2009	Tim Hunt 17 Nov 2009	7
	Limiting Incorrect Login Attempts Locked	David Price 28 Sept 2009	Alex Walker 12 Aug 2011	7
	Password salting by default? Locked	Garret Gengler 31 Mar 2009	Garret Gengler 7 Apr 2009	7
	Add security mecanism SSL to handle user connection on Moodle/CIMA Locked	chhivhorng ly 6 Nov 2008	chhivhorng ly 25 Nov 2008	7
	Malicious User Profile - How can I delete Locked	Debbie McDonald 1 July 2008	J B 13 Oct 2008	7
	Server returns critical error	Andrew Lian 30 Sept 2023	Ken Task 15 Oct 2023	6
	.../local/ folder visible - security risk?	Flotter Totte 25 June 2023	Brett Dalton 30 June 2023	6
	ModSecurity: Warning Locked	Ralph Ballier 8 Mar 2023	Ralph Ballier 21 Mar 2023	6
	Student locked out which table & field updated Locked	Mark Fellowes 18 Jan 2023	Mark Fellowes 19 Jan 2023	6
	Privacy in courses Locked	Deleted user 7 Aug 2022	Deleted user 13 Aug 2022	6
	Moodle 4.0 Security Report: Check all public / private paths errors Locked	Bec Nash 25 July 2022	Mario Bouchard 5 Oct 2022	6
	seeking advice or experience report of using 2FA Locked	Andrew Brooks 27 Apr 2022	Brett Dalton 27 Mar 2023	6
	Moodle broke with switching to https Locked	Lance Hinds 24 Mar 2022	Ken Task 25 Mar 2022	6
	Content Security Policy (CSP) and inline scripts Locked	Stephen Hooley 9 Mar 2022	Luis de Vasconcelos 19 Oct 2022	6
	Plugin Privacy Registry is blank - Moodle 3.10 Locked	Hoda Farazandeh 15 Mar 2021	Tim Hunt 18 Mar 2021	6
	Old Student Accounts Locked	Colin Tennyson 12 Nov 2020	Colin Tennyson 13 Nov 2020	6
	Trusted contents from users Locked	Mahmood Naderan 17 June 2020	Michael Hawkins 22 June 2020	6
	download backup via file picker Locked	Deleted user 26 Apr 2020	Ken Task 27 Apr 2020	6
	Guest access to courses Locked	Frank Burger 6 Feb 2020	Frank Burger 8 Feb 2020	6
	[3.7]Block certain HTML codes Locked	Richard van Iwaarden 12 Nov 2019	Michael Hawkins 13 Jan 2020	6
	Audit log of user activity Locked	Kate Dawson 15 Apr 2019	Randy Thornton 27 Apr 2019	6
	Content lockdown Locked	Kenneth Hess 21 Mar 2019	Jon Bolton 24 Mar 2019	6
	Fast registration possible? Locked	Colin Peters 9 Nov 2018	Visvanath Ratnaweera 19 Nov 2018	6
	Deceptive site ahead - Phishing Locked	Nilesh Pathade 4 Oct 2018	Ken Task 5 Oct 2018	6
	automated backups Locked	Dom F 12 May 2018	Paul Raper 14 May 2018	6
	Erasing optional field data Locked	Dave Foord 23 Apr 2018	Alicia Wallace 24 Apr 2018	6
	GDPR: config settings as user preferences in blocks Locked	Mark Sharp 16 Apr 2018	Randy Thornton 1 May 2018	6
	GDPR plugins - Category & Purpose Locked	Mark Sharp 12 Apr 2018	Adrian Greeve 17 Apr 2018	6
	Moodle security Locked	MoodleKittyCat . 28 Mar 2018	Mathew Gancarz 29 Mar 2018	6
	Create new User via Webservice Locked	Zadok Lindt 13 Feb 2018	Lê Tú 30 May 2018	6
	restrict guest access for courses in a specific category Locked	stefan weber 10 Aug 2017	Louise H 10 Oct 2018	6
	Moving to HTTPS everywhere Locked	Michael Aherne 16 May 2017	Susan Mangan 7 July 2017	6
	Use Self-Signed Certificate Locked	mimi nom 7 Feb 2017	Harsh Patel 15 Dec 2017	6
	Moodle should not force a password change Locked	Irma Boks - Eek 9 Aug 2016	Irma Boks - Eek 10 Aug 2016	6
	Possible Exploit - Accessing the Main Admins account through the CLI Locked	Alex Legg 13 Apr 2016	Alex Legg 13 Apr 2016	6
	IP addresses used by Moodle's mail servers Locked	Dan OBrien 16 Dec 2015	Dan OBrien 16 Dec 2015	6
	can my activity be seen? Locked	murdoc niccals 29 Nov 2015	Just H 29 Nov 2015	6
	Multiple login Locked	Suleiman Umar 13 May 2015	Suleiman Umar 18 May 2015	6
	Self Enrolment - enrolment key issue Locked	Katrina Nicholson 6 Mar 2015	Albert Ramsbottom 2 June 2015	6
	Cloudflare Locked	James Easton 27 Jan 2015	Visvanath Ratnaweera 10 Feb 2015	6
	Security Question Locked	Mr. Marc 9 Nov 2014	Ken Task 10 Nov 2014	6
	How to make the entire Moodle website over https? Locked	Davi DePaula 12 June 2014	Davi DePaula 13 June 2014	6
	How do I prevent some users from enrolling themselves in some courses? Locked	Ted Osborne 4 June 2014	John Gifford 5 June 2014	6
	ISO 27001: Input data validation and Control of internal processing Locked	Gael Lams 26 May 2014	Tim Hunt 6 June 2014	6
	reCaptcha Preventing User Registration Locked	Fred Roller 24 Apr 2014	Jez H 29 Apr 2014	6
	prevent printing of lessons in Moodle 2.5 Locked	Asana Draper 31 Jan 2014	Howard Miller 4 Feb 2014	6
	Problem with spam: Clic to Continue > by Text-Enhance Locked	Álvaro López Rojas 4 Dec 2013	Raquel Sacristán P. 15 Sept 2014	6
	Ban certain e-mail addresses from account creation? Locked	Deleted user 24 Apr 2013	Greg Padberg 24 May 2013	6
	STAY LOGGED IN Locked	Matt Drury 28 Sept 2011	Ken Task 28 Sept 2011	6
	My site is listed as suspicious site !! help mee Locked	eda karacelebi 15 Aug 2011	Iñaki Arenaza 21 Aug 2011	6
	Is this actually possible in Moodle 2.x? Locked	Alan Muscat 21 June 2011	Guillermo Madero 24 June 2011	6
	Server Notification Security Message & Multiple URL logins Locked	James McDermott 30 May 2011	Louise Kearins 7 Aug 2012	6
	IP Blocker Locked	mike schulz 4 May 2011	Ken Task 15 Nov 2012	6
	404 after 10 failed logins Locked	David Kennedy 2 Dec 2010	David Kennedy 7 Jan 2011	6
	How do I set up a course that I can't have access to ? Locked	Dale Bender 26 Apr 2010	Chris Collman 27 Apr 2010	6
	In a hosted server, where should moodledata go Locked	Chris Collman 8 Mar 2010	nabil Lachheb 15 Mar 2011	6
	Trojan found Locked	Seif Fateen 24 Feb 2010	Seif Fateen 25 Feb 2010	6
	Internet Explorer cannot load 'Edit Profile' page #MDL-10296 revisited. Locked	Worth Bishop 14 Jan 2010	Worth Bishop 15 Jan 2010	6
	Change password for Admin account Locked	Stephen Bloomer 25 Nov 2009	Paul Fynn 14 Dec 2009	6
	About MSA-09-0019 Locked	Sebastien M. 27 Oct 2009	Howard Miller 28 Oct 2009	6
	ANTI VIRUS for SECURITY "UPLOADING DATA" Locked	Jet Batung Bakal 19 Oct 2009	Jon Witts 25 Nov 2009	6
	Example of a intrusion into Moodle Locked	Stellan Kinberg 23 Sept 2009	Timothy Kane 20 Jan 2010	6
	Moodle Porn Update Locked	Don Won 4 Sept 2009	Marcus Green 6 Sept 2009	6
	Teacher's Intranet Locked	Travis Wilhelm 20 Aug 2009	Jon Witts 25 Aug 2009	6
	Moodle porn alert Locked	moodle bs 24 July 2009	Marcus Green 26 July 2009	6
	When you install Moodle is the My SQL secure from being Hacked? Locked	Christopher Saunders 5 July 2009	Jon Witts 13 July 2009	6
	How do you password protect files and folders already uploaded on Moodle. Locked	Christopher Saunders 5 July 2009	Jeff Enders 3 Feb 2011	6
	How to secure Moodle website from being hacked Locked	K.James Mathai 28 Mar 2008	Helen Foster 2 Apr 2008	6
	Moodle security concern	Karan Rawat 23 Jan 2024	Brendan Heywood 25 Jan 2024	5
	Vulnerable and Outdated Components- YUI 2.9.0	Ruchi Dixit 27 Dec 2023	Ruchi Dixit 1 Jan 2024	5
	How do I restrict users from changing their profile pictures	Sonny Herrick 3 Nov 2023	Sonny Herrick 7 Nov 2023	5
	Error accessing "Manage Authentication" settings	Vittorio Della Rossa 6 Aug 2023	Reefo Relaxo 5 Jan 2024	5
	smtpauthtype has no XOAUTH2 option	David Topps 30 Mar 2023	Jerry Lau 19 Jan 2024	5
	Vulnerability Scans - False Positives? Locked	Steve Mo 25 Apr 2022	Michael Hawkins 26 Apr 2022	5
	mod_security rule to ignore a false positive ... assistance Locked	Ken Task 15 Nov 2021	Carlos del Río 7 June 2022	5
	Moodle Site Blacklisted for Phishing Locked	Harry Dickinson 21 Sept 2021	Sergio Rabellino 22 Sept 2021	5
	Permission Changes via Command Line Locked	Lynn MacDonald 14 Apr 2021	Lynn MacDonald 14 Apr 2021	5
	SSO issue with MooWoodle Plugin Locked	arsalan titi 22 Mar 2021	Benoit Ter Burg 6 Aug 2021	5
	cannot login with any user Locked	John Karistinakis 5 Jan 2021	John Karistinakis 7 Jan 2021	5
	Moodle cron jobs detect as suspicious activity Locked	James Peter 23 Dec 2020	Ken Task 18 May 2021	5
	Sending secure mail using phpmailer Locked	Frans Zwijnenberg 21 Dec 2020	Frans Zwijnenberg 23 Dec 2020	5