Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	SSL Cert on Content switch Locked	S Parker 24 July 2017	Harsh Patel 15 Dec 2017	3
	Default Password policies: Self enrolment vs group enrolment Locked	Deleted user 14 June 2017	Deleted user 10 July 2017	3
	Can't enable web services for authentication Locked	Brad Smith 1 June 2017	Dave Perry 20 July 2017	3
	How do I remove "Forgotten your username or password?" in moodle 3.2 Locked	Obuntu Cracks 23 Apr 2017	Ambreen Kiran 7 July 2017	3
	Recaptcha Locked	Miyone G 24 Feb 2017	Randy Thornton 28 Mar 2017	3
	Avoiding LDAP data in plain text when you check the source code from a browser Locked	Robespierre Galindo 16 Feb 2017	Randy Thornton 16 Feb 2017	3
	How to restrict users who are not using office's computer? Locked	Fung Tony 10 Feb 2017	Jon Bolton 23 Feb 2017	3
	How secure is using admin/tool/uploaduser/index.php Locked	callum Wood 5 Dec 2016	Matt Bury 6 Dec 2016	3
	how to restrict domain Locked	m question 16 Oct 2016	Helen Foster 21 Oct 2016	3
	Alternatives to reCaptcha Locked	Colin Fraser 21 Sept 2016	Rick Jerz 24 Sept 2016	3
	New Profile field not working as a course restriction Locked	Anne Sherman 14 Sept 2016	Helen Foster 15 Sept 2016	3
	Hiding users in grade reports Locked	bart de bie 12 Sept 2016	Emma Richardson 13 Sept 2016	3
	How to fix a mix of secure and insecure content? Locked	Arturs Polis 6 June 2016	Luke Barone 24 Sept 2016	3
	SECURITY WARNING! (moodledata) Locked	Can Yasa 2 June 2016	Can Yasa 2 June 2016	3
	Secure PHP Configuration Settings for Moodle Locked	Calvin Bu 22 Apr 2016	Ken Task 26 Apr 2016	3
	Hide courses and categories to specific role Locked	Renato Marchesani 17 Mar 2016	Howard Miller 19 Mar 2016	3
	access to server lost Locked	Hicham Doumali 9 Mar 2016	Hicham Doumali 18 Mar 2016	3
	Alias name - workaround Locked	Muse 79 20 Feb 2016	Just H 21 Feb 2016	3
	Moodle not displaying errors Locked	Tyler Whiteley 15 Jan 2016	Richard Oelmann 24 Jan 2016	3
	How to see who changed letter grades site-wide? Locked	Juan F 17 Nov 2015	John Provasnik 7 Dec 2015	3
	User database Locked	Pal Kerecsenyi 26 Oct 2015	Richard Oelmann 27 Oct 2015	3
	Moodle session tickets not expiring when closing the browser Locked	Shaun Conway 9 Oct 2015	Simon Rediss-Whitfield 3 Nov 2015	3
	Administrator Logging??? Locked	Vincent Gullotta 2 Oct 2015	Chris Wharton 5 Oct 2015	3
	Open Access / Student User access Locked	Catherine Seeds 7 Sept 2015	Emma Richardson 7 Sept 2015	3
	CSRF on moodle pages Locked	Naaman Fallouh 6 Sept 2015	Tim Hunt 7 Sept 2015	3
	Getting user passwords Locked	Chardelle Busch 22 Aug 2015	Vicke Denniston 2 Oct 2015	3
	No CAPTCHA reCAPTCHA Moodle Locked	Bruno Nogueira 2 July 2015	John Okely 7 July 2015	3
	Web API encryption to push/pull data Locked	Gordon McLeod 4 June 2015	Gordon McLeod 5 June 2015	3
	Cookie Consent Warning mandatory in Europe Locked	Rolf Cper 16 Dec 2014	Rolf Cper 18 Dec 2014	3
	Switch from https to http Locked	Joost Bosschert 1 Dec 2014	Dave Perry 1 Dec 2014	3
	MOODLE :: Security Single-SignOn Locked	Lavanya Manne 1 Dec 2014	Lavanya Manne 15 Dec 2014	3
	Trusted Permission not working. Locked	Clarence Prudhoe 18 Nov 2014	François Lizotte 21 Nov 2014	3
	How to keep Moodle data safe from server admins? Locked	Ohto Nordberg 17 Oct 2014	Visvanath Ratnaweera 18 Oct 2014	3
	Hiding email addresses in Moodle 2.6 forums Locked	John Edmiston 9 Oct 2014	Randy Thornton 3 Dec 2016	3
	Interests, profile picture, and Google image search? Locked	Michael Gerszewski 7 Oct 2014	Daniel Neis Araujo 14 Oct 2014	3
	New Install: dataroot exposure to web, security issue Locked	Brad PIerce 27 Sept 2014	Brad PIerce 30 Sept 2014	3
	Make MYSQL Database Anonymous Locked	Alan Cherwinski 3 June 2014	Alan Cherwinski 3 June 2014	3
	Download Protection Locked	Gulano Leisberg 31 May 2014	Matt Bury 31 May 2014	3
	Hide All Email Addresses From Everyone Locked	Tom Wootton 29 May 2014	Guillermo Madero 29 May 2014	3
	Moodle with Ms active directory(Lapd) single sign-in Locked	Spyros Savvanis 19 May 2014	Dave Perry 19 May 2014	3
	How do I setup LDAP or Microsoft AD? Locked	Chris Smith 8 May 2014	Chris Smith 13 May 2014	3
	Database crashed Locked	Ahmed Belhani 27 Mar 2014	Ahmed Belhani 29 Mar 2014	3
	Course visibility Locked	Karen Atkinson 2 Oct 2013	Karen Atkinson 17 Oct 2013	3
	Safe harbor Certified Hosting Locked	David Grebow 30 Aug 2013	Dave Perry 9 Sept 2013	3
	my moodle redirect to https and trailing slash Locked	JC Dodo 26 Aug 2013	Brian walker 18 Dec 2013	3
	Windows Distribution Package OK for real use? Locked	Mike Scott 8 July 2013	Visvanath Ratnaweera 24 July 2013	3
	Getting weird anonymous account created in one of our Moodle sites Locked	François Lizotte 12 June 2013	Silvia Camacho 13 May 2015	3
	Uploading files to user profiles Locked	sherri g 11 June 2013	Jordi Fontseca 21 Aug 2014	3
	Certificação SSL no Moodle Locked	Alex Menezes 22 Mar 2013	Iñaki Arenaza 2 Apr 2013	3
	Moodle security overview Locked	Sami Hwang 14 Mar 2013	Helen Foster 26 Mar 2013	3
	Anonymous Evaluations Compromised Locked	Tom Brown 12 Mar 2013	Tom Brown 13 Mar 2013	3
	Site policy agreement - force scroll Locked	Justina Torres 11 Dec 2012	Justina Torres 21 Dec 2012	3
	Students can see hidden resources Locked	Richard van Iwaarden 2 Oct 2012	E. L. Cooper 4 Oct 2012	3
	Guest access not working under moodle 2.2 Locked	K A 29 Sept 2012	Geoff Waring 1 Nov 2012	3
	Hide other students from Recent Activity Report Locked	Jonathan Rabson 22 Sept 2012	Jonathan Rabson 27 Sept 2012	3
	unknown apaches's log entries Locked	tatiana ramiro 27 July 2012	tatiana ramiro 30 July 2012	3
	Edit SSL-secured login page to include site seal. Locked	Alexander Wiklund 26 July 2012	Deleted user 27 July 2012	3
	Exam Results on Moodle Locked	Alex 09 28 June 2012	Alex 09 28 June 2012	3
	How to "Digital sign" the logs within the moodle Locked	kc yau 21 June 2012	Hubert Chathi 22 June 2012	3
	Login Attacks from various IPs Locked	Deleted user 16 May 2012	Visvanath Ratnaweera 12 June 2012	3
	I was hacked! Locked	Robert Leonard 11 May 2012	Helen Foster 14 May 2012	3
	How to prevent user to access the course without unenroll? Locked	Zoran Jančić 23 Feb 2012	Zoran Jančić 2 Mar 2012	3
	Grades and new roles behaviour Locked	Zoran Jančić 17 Feb 2012	Zoran Jančić 22 Feb 2012	3
	How do I fix this? Locked	Jay McLellan 17 Feb 2012	Marcus Green 19 Feb 2012	3
	Is there something available to allow only certain IP's to login? Locked	Matt Hobbs 22 Dec 2011	Adi Tedjasaputra 22 Dec 2011	3
	1.9.14 commit for MDL-28615? Locked	Colin Campbell 19 Oct 2011	Tim Hunt 20 Oct 2011	3
	Parents shouldn't know things Locked	Doug Moody 26 Sept 2011	Mary Cooch 27 Sept 2011	3
	Self enrolment Locked	Visi Alaminos 9 Sept 2011	Visi Alaminos 9 Sept 2011	3
	LDAP Question Locked	Devin Roush 19 Aug 2011	Michael Woods 9 Sept 2011	3
	Hiding IP Addresses in Reports Logs Locked	Karen Crumbley 18 Aug 2011	Howard Miller 18 Aug 2011	3
	SELinux is preventing httpd from using files /boot Locked	roger griffiths 14 Aug 2011	Ken Task 3 July 2012	3
	how to keep one user can only be a single login? Locked	Adi Prasetya 24 June 2011	Deleted user 24 June 2011	3
	Cross-Moodle Logins Locked	Mario Stylianou 21 June 2011	Hubert Chathi 21 June 2011	3
	spam messages being sent through MOODLE Locked	Steve Gilmore 14 June 2011	Helen Foster 6 July 2011	3
	Forum hacked Locked	Higor Oliveira 7 June 2011	Higor Oliveira 20 July 2011	3
	LOCK OUT Locked	Anna Burnheim 7 Apr 2011	Guillermo Madero 6 June 2011	3
	Error Changing Password Policy Locked	Ankit Jain 24 Feb 2011	Ankit Jain 7 Mar 2011	3
	Creating a Local Moodle Administrator Locked	Gregory Furtman 16 Feb 2011	Luis de Vasconcelos 16 Feb 2011	3
	Multiple AD fields at login with LDAP Locked	Jeffrey Jones 6 Feb 2011	David Tredinnick 11 Feb 2011	3
	block abusive user Locked	Baruch Sienna 3 Jan 2011	Helen Foster 3 Jan 2011	3
	Stopping site downloaders Locked	Mahtab Hussain 4 Dec 2010	Howard Miller 5 Dec 2010	3
	Password format Locked	pelleth thomas 1 Nov 2010	Stephen Bloomer 2 Nov 2010	3
	Security Overview report not showing up at all Locked	Hartmut Scherer 27 Oct 2010	Hartmut Scherer 4 Nov 2010	3
	How much to lock down server ? Locked	Mr. Marc 14 Oct 2010	Deleted user 15 Oct 2010	3
	ACCESS CONTROL IN MOODLE Locked	r ma 29 Sept 2010	Aaron Wells 1 Oct 2010	3
	Encrypted Password Locked	Fifie Sha 24 Sept 2010	Thế Huân Đoàn 6 Oct 2010	3
	How to set up best security from the outset - not later.. Locked	brian avery 5 Aug 2010	Chris Collman 11 Aug 2010	3
	Security Attack? Locked	Clive Gould 29 June 2010	Lars-Olof Krause 6 Oct 2010	3
	[ERROR] Estado de la Copia de Seguridad programada Locked	Heike Ebelt 28 June 2010	Heike Ebelt 29 June 2010	3
	BP Uses Moodle and (unfortunately) expose themselves to an "XSS based iFrame injection"... Locked	Dale Davies 10 June 2010	Howard Miller 10 June 2010	3
	Prevent Teacher Role from Downloading Backup Zip Files Locked	Blair F. 10 June 2010	Howard Miller 13 June 2010	3
	Creating Static Student Emails Locked	Kester David 1 June 2010	Jon Witts 9 June 2010	3
	Moodle security patching documentation Locked	John Grobler 6 May 2010	John Grobler 10 May 2010	3
	Compromised Moodle Clean Up... Locked	Andy McCall 28 Apr 2010	Andy McCall 28 Apr 2010	3
	Restrict user access to courses Locked	Jason Yeung 22 Mar 2010	Chris Collman 23 Mar 2010	3
	Security warning won't go away Locked	Henry Foster 28 Feb 2010	Aaron Wells 21 June 2010	3
	Hide email address by default Locked	Martin O'Mahony 18 Feb 2010	Daniel meanock 17 Jan 2015	3
	Moodle and Digital Certificates Locked	Jesus Diaz Vico 14 Feb 2010	Jon Witts 16 Feb 2010	3
	How to 'unlink' access to user info Locked	Allen Starowsky 4 Feb 2010	Frank Ralf 5 Feb 2010	3
	Moodle 1.8 SMF 1.1.11 integration Locked	James Jackson 26 Jan 2010	stog muller 12 Jan 2011	3