Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	How to authenticate w/ CAS but skip LDAP? Locked	Rob Byrd 9 Feb 2012	Rob Byrd 9 Feb 2012	0
	Moodle 2.x + mod_auth_tkt Locked	Steve Fister 24 Apr 2012	Steve Fister 24 Apr 2012	0
	Have I been hacked? Locked	Jeff Richards 29 May 2012	Jeff Richards 29 May 2012	0
	Make course unsearchable Locked	steph . 13 June 2012	steph . 13 June 2012	0
	Lesson password Locked	Tomislav Gaborovic 14 June 2012	Tomislav Gaborovic 14 June 2012	0
	time-stamping and digital signature Locked	kc yau 3 July 2012	kc yau 3 July 2012	0
	Hide contents of course catgegories Locked	Whitney Lowe 7 July 2012	Whitney Lowe 7 July 2012	0
	User Profiles Lockdown Locked	James Cracknell 17 July 2012	James Cracknell 17 July 2012	0
	Category visibility for authorized only ? Locked	Justin Nguyen 3 Aug 2012	Justin Nguyen 3 Aug 2012	0
	Using SSL and User Search Doesn't Work Locked	Mike Sangray 9 Aug 2012	Mike Sangray 9 Aug 2012	0
	how to set https just for the login page Locked	Carlos Kiyan Tsunami 8 Sept 2012	Carlos Kiyan Tsunami 8 Sept 2012	0
	How can I disable Notifications page when login as admin? Locked	susan cheng 3 Oct 2012	susan cheng 3 Oct 2012	0
	Integration with Atlassian Crowd Locked	Nicholas Rayner 5 Oct 2012	Nicholas Rayner 5 Oct 2012	0
	Moodle 1.9.19+ spam accounts added inspite of CAPTCHA Locked	Deleted user 11 Oct 2012	Deleted user 11 Oct 2012	0
	Login authentication Locked	Frank Vanden Bosch 11 Oct 2012	Frank Vanden Bosch 11 Oct 2012	0
	Added security maybe along the lines of side certificates Locked	Edward Murray 18 Oct 2012	Edward Murray 18 Oct 2012	0
	LDAP Problems Locked	Ivaylo Radev 19 Oct 2012	Ivaylo Radev 19 Oct 2012	0
	BSI VULNERABILITY Locked	aziz elhajir 5 Nov 2012	aziz elhajir 5 Nov 2012	0
	Create New User in DB Locked	Bar Geffen 21 Nov 2012	Bar Geffen 21 Nov 2012	0
	Force users to change password in first login (LDAP settings) Locked	Siamak Alavi 28 Nov 2012	Siamak Alavi 28 Nov 2012	0
	Role permittung access only to specified courses Locked	Klaus Westermann 4 Dec 2012	Klaus Westermann 4 Dec 2012	0
	public and registered user course permissions Locked	Justas Pranskaitis 4 Dec 2012	Justas Pranskaitis 4 Dec 2012	0
	Blocked yet no blocking found Locked	Paul S 6 Dec 2012	Paul S 6 Dec 2012	0
	Another guest access question Locked	Wendy Tocci 20 Dec 2012	Wendy Tocci 20 Dec 2012	0
	What is the impact of technology on privacy and security? Locked	xy8797 xy8797 27 Dec 2012	xy8797 xy8797 27 Dec 2012	0
	guest access without password Locked	thomas tomporowski 3 Jan 2013	thomas tomporowski 3 Jan 2013	0
	does administrators see who "anonymous" are? Locked	val val 3 Jan 2013	val val 3 Jan 2013	0
	How to block printing of my html pages Locked	jason steer 9 Jan 2013	jason steer 9 Jan 2013	0
	Expire Login Locked	Patrick Hallermann 14 Jan 2013	Patrick Hallermann 14 Jan 2013	0
	Edit profile page not loading when using https login Locked	Paul Garratt 7 Feb 2013	Paul Garratt 7 Feb 2013	0
	How to allow guests to view the MRBS calendar? Locked	Dieter D. 14 Feb 2013	Dieter D. 14 Feb 2013	0
	Is there a "waiting period" after so many failed login attempts? Locked	Melissa Benson 1 Mar 2013	Melissa Benson 1 Mar 2013	0
	Automatic log out. Locked	curt bixel 14 Mar 2013	curt bixel 14 Mar 2013	0
	How can hide options of each menu Locked	Jorge Silva 25 Mar 2013	Jorge Silva 25 Mar 2013	0
	How limit usernames characters Locked	Miguel Urtado 11 June 2013	Miguel Urtado 11 June 2013	0
	SQL Server Driver for PHP Connection Options: Encrypt Locked	Arif Shah 27 June 2013	Arif Shah 27 June 2013	0
	Linked Instances accross networks Locked	Taffy Brecknock 10 July 2013	Taffy Brecknock 10 July 2013	0
	SSL proxy causes formatting error - Formal White theme Locked	Jim Moen 4 Aug 2013	Jim Moen 4 Aug 2013	0
	Change date of sended file to system by activity assignment Locked	Ivan Kreškóczi 1 Sept 2013	Ivan Kreškóczi 1 Sept 2013	0
	Guest access permissions Locked	Julie Lindsay 5 Oct 2013	Julie Lindsay 5 Oct 2013	0
	License Key Locked	Tyler Musser 19 Oct 2013	Tyler Musser 19 Oct 2013	0
	Added unique login plug-in normally installation,but not work Locked	Kelvin Cheung 23 Nov 2013	Kelvin Cheung 23 Nov 2013	0
	Login error? Locked	Kevin Burton 7 Dec 2013	Kevin Burton 7 Dec 2013	0
	LDAP signing Locked	Carl Maschke 18 Dec 2013	Carl Maschke 18 Dec 2013	0
	Secure and httponly cookies Locked	Bob Ross 18 Dec 2013	Bob Ross 18 Dec 2013	0
	Service field is empty while creating a Token Locked	Ann S 18 Dec 2013	Ann S 18 Dec 2013	0
	Need help on student's assignment become searchable on google scholars Locked	tom tom 27 Dec 2013	tom tom 27 Dec 2013	0
	Securing SMTP Locked	Mihai Bojonca 18 Jan 2014	Mihai Bojonca 18 Jan 2014	0
	Websiteadministration does not work correctly after update Locked	Matthias Barmeier 28 Jan 2014	Matthias Barmeier 28 Jan 2014	0
	Sharing Authentication With External Site Locked	Jack O'Neill 20 Mar 2014	Jack O'Neill 20 Mar 2014	0
	verifying security patches Locked	john saylor 25 Mar 2014	john saylor 25 Mar 2014	0
	IP lockdown for admin account Locked	Martin O'Mahony 28 Mar 2014	Martin O'Mahony 28 Mar 2014	0
	How to get course completed date..? Locked	Atul Kachhadiya 31 Mar 2014	Atul Kachhadiya 31 Mar 2014	0
	changing multiple passwords at once Locked	Rob Dahlin 11 Apr 2014	Rob Dahlin 11 Apr 2014	0
	Ads displayed Moodle sites where none should be (a browser issue actually) Locked	Joseph Thibault 12 Apr 2014	Joseph Thibault 12 Apr 2014	0
	Allow user with specific email domain on moodle 2.6 Locked	Christine Mburu 2 May 2014	Christine Mburu 2 May 2014	0
	Dataroot permissions and contents changed... Locked	Aaron Batty 4 May 2014	Aaron Batty 4 May 2014	0
	Guest being able to enter a course (course frontpage) but not able to access resources Locked	Ezequiel Uberti 13 May 2014	Ezequiel Uberti 13 May 2014	0
	Authentication with captcha Locked	Irith Herman 28 May 2014	Irith Herman 28 May 2014	0
	moodle systematically remove users Locked	jose Campos 2 June 2014	jose Campos 2 June 2014	0
	Unsecured files in course with password-protected guest access Locked	Kuriko A 6 June 2014	Kuriko A 6 June 2014	0
	Security "Forbidden" error Locked	Eder dos Santos 11 June 2014	Eder dos Santos 11 June 2014	0
	Enroll Users Without Email Confirmation Locked	Kenton de Jong 21 June 2014	Kenton de Jong 21 June 2014	0
	Creating a non-gradeable student role - Audit. Locked	Jason Carson 27 June 2014	Jason Carson 27 June 2014	0
	SECURITY: Disable themes.googleusercontent and other cross-site linking Locked	Leon Franken 10 July 2014	Leon Franken 10 July 2014	0
	Security for Online services Locked	sasa lk 10 July 2014	sasa lk 10 July 2014	0
	SSL, custom domains, general security and platform curiosities Locked	Chris Wagner 22 July 2014	Chris Wagner 22 July 2014	0
	Course Category acess through LDAP Locked	Catherine Pinnell 23 July 2014	Catherine Pinnell 23 July 2014	0
	300 login error Locked	m question 25 July 2014	m question 25 July 2014	0
	Login errors form unknown users every 5-7 minutes? Locked	Tony Chilvers 12 Sept 2014	Tony Chilvers 12 Sept 2014	0
	Admin Notification for self registration users with their details Locked	Tom Farrow 12 Sept 2014	Tom Farrow 12 Sept 2014	0
	External database settings or example Locked	Henk Petter 2 Oct 2014	Henk Petter 2 Oct 2014	0
	http for login Locked	Pete Tyrer 5 Oct 2014	Pete Tyrer 5 Oct 2014	0
	Solution worms infect site Locked	Lázaro José Carneiro de Sousa 6 Oct 2014	Lázaro José Carneiro de Sousa 6 Oct 2014	0
	Easy authentication for children and adults? Locked	Brylie Oxley 10 Oct 2014	Brylie Oxley 10 Oct 2014	0
	Should user profile images be exposed to shared proxies? Locked	Matteo Scaramuccia 7 Nov 2014	Matteo Scaramuccia 7 Nov 2014	0
	Course Creator Locked	mohamed hammam 13 Nov 2014	mohamed hammam 13 Nov 2014	0
	Moodle ClamAV Scan Log? Locked	Sam Pearson 20 Nov 2014	Sam Pearson 20 Nov 2014	0
	Auditing passwords Locked	Tomasz Muras 12 Jan 2015	Tomasz Muras 12 Jan 2015	0
	2.7.1 .htaccess files Locked	Wendi Daniels 9 Feb 2015	Wendi Daniels 9 Feb 2015	0
	Setting up a consumer key on a moodle site Locked	David Price 22 Feb 2015	David Price 22 Feb 2015	0
	insert JavaScript via ATO Locked	Shimon Nagar 15 Mar 2015	Shimon Nagar 15 Mar 2015	0
	Google reCaptcha not working Locked	Mark Whalley 26 Mar 2015	Mark Whalley 26 Mar 2015	0
	File type extensions Locked	Soha Gamal 26 Mar 2015	Soha Gamal 26 Mar 2015	0
	Allowing students anonymous access to others work Locked	Velson Horie 1 Apr 2015	Velson Horie 1 Apr 2015	0
	Appearance Tab access permission Locked	Hossam eldin Reda Ibrahim 20 Apr 2015	Hossam eldin Reda Ibrahim 20 Apr 2015	0
	Wanted: reference on stability/security of Moodle Locked	Derek Chirnside 24 Apr 2015	Derek Chirnside 24 Apr 2015	0
	Advice on Roles / Permissions for a hierarchichal structure Locked	Phil Carlson 21 May 2015	Phil Carlson 21 May 2015	0
	Removing Timestamps in Tests and Assignments Locked	Sebastian H. 17 June 2015	Sebastian H. 17 June 2015	0
	Security Warnings! Locked	Eliecer Acevedo Patiño 23 June 2015	Eliecer Acevedo Patiño 23 June 2015	0
	How to download the course content using moodle web service Locked	Sameer Kshirsagar 10 July 2015	Sameer Kshirsagar 10 July 2015	0
	Pass through single-sigon authentication Locked	Bryan Ward 5 Sept 2015	Bryan Ward 5 Sept 2015	0
	Redirect error after enforcing https Locked	Oliver W 4 Oct 2015	Oliver W 4 Oct 2015	0
	validation of username length Locked	Irith Herman 12 Oct 2015	Irith Herman 12 Oct 2015	0
	Block Access to Courses list Locked	Andrew Milner 28 Oct 2015	Andrew Milner 28 Oct 2015	0
	Using "http head method" in Moodle Locked	Naaman Fallouh 2 Dec 2015	Naaman Fallouh 2 Dec 2015	0
	Restricting guests from viewing the category structure and non guest-enabled courses Locked	Deleted user 4 Dec 2015	Deleted user 4 Dec 2015	0
	Moodledata ... Moodle Code ... htaccess-dist.txt files Locked	Ken Task 25 Jan 2016	Ken Task 25 Jan 2016	0
	IPV6 address in IP Blocker Locked	rabin sk 12 Feb 2016	rabin sk 12 Feb 2016	0
	"Invalid Login" if country code is lowercase Locked	Derek Chaplin 9 Apr 2016	Derek Chaplin 9 Apr 2016	0