Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	using gnupg when sending emails Locked	Erik Diewald 16 Jul 2009	Dan Poltawski 16 Jul 2009	1
	Stop simultaneous logins Locked	Ebenezer Le Page 17 Jul 2009	Howard Miller 17 Jul 2009	1
	.htaccess files hacked Locked	John Bonner 20 Jul 2009	John Bonner 27 Jul 2009	1
	Disabling authenticated user ability to edit profile kills Moodle Locked	Anon User 23 Jul 2009	Howard Miller 23 Jul 2009	1
	Log file question. Locked	Raul Rodriguez 31 Jul 2009	cor kuijt 3 Aug 2009	1
	Stimutaneous Login Plug-In Locked	Eric Polatty 4 Aug 2009	Hubert Chathi 4 Aug 2009	1
	SMTP Error with sending email Locked	Shin Okada 22 Aug 2009	Shin Okada 24 Aug 2009	1
	Front page Locked	carole gould 25 Aug 2009	Mary Cooch 25 Aug 2009	1
	admin shows in participants list but not on log Locked	Colleen McGuire 16 Sep 2009	Teresa Gibbison 24 Sep 2009	1
	CGIWrap Error: Execution of this script not permitted Locked	ansi anser 16 Sep 2009	Tim Hunt 16 Sep 2009	1
	Failed to login to my moodle Locked	jabera matogoro 30 Sep 2009	Howard Miller 30 Sep 2009	1
	Moodle Word and PDF documents opening with spam Locked	rui gomes 16 Oct 2009	Mauno Korpelainen 16 Oct 2009	1
	Hide real name hide email Locked	Russ Titsworth 21 Oct 2009	Stephan Hahn 4 Nov 2009	1
	Edit PHP warning Locked	Jet Batung Bakal 21 Oct 2009	M. N. 24 Oct 2009	1
	Hackers in my moodle Locked	Carlo Amore 27 Oct 2009	Howard Miller 27 Oct 2009	1
	Site Configuration not Secure Locked	Arlo Speer 27 Oct 2009	Jon Witts 27 Oct 2009	1
	Restrict Student Maessaging Locked	Grant Allison 10 Nov 2009	Bente Olsen 10 Nov 2009	1
	phpMyAdmin vulnerability Locked	Clive Gould 16 Nov 2009	Petr Skoda 16 Nov 2009	1
	Filters for discussions Locked	Carolyn Minks 24 Nov 2009	Helen Foster 24 Nov 2009	1
	LDAP Errors with Novell E-Directory Locked	Keith Giles 12 Dec 2009	Iñaki Arenaza 14 Dec 2009	1
	Admin Access Level Issue Locked	Suhail Baloch 15 Dec 2009	Jon Witts 16 Dec 2009	1
	where to locate moodledata folder Locked	Stuart Whiting 16 Dec 2009	Jon Witts 17 Dec 2009	1
	mon mot de passe a disparu Locked	benedicte charles 29 Dec 2009	Deleted user 29 Dec 2009	1
	Security to moodledata folder Locked	Simon A 4 Jan 2010	Visvanath Ratnaweera 12 Mar 2010	1
	Can't access php.ini file, don't know how to change display_errors setting Locked	Henry Foster 25 Jan 2010	Marc Grober 26 Jan 2010	1
	$dataroot ownership and permissions Locked	Liam O'Riordan 10 Feb 2010	Visvanath Ratnaweera 12 Mar 2010	1
	Login problem Locked	Nicolas Lejeune 22 Feb 2010	Nicolas Lejeune 22 Feb 2010	1
	Digital certificates Locked	Rob Cunniffe 20 Apr 2010	Rob Cunniffe 22 Apr 2010	1
	'send me details via email' Forgotten Password email address Locked	John Riley 8 May 2010	Worth Bishop 9 May 2010	1
	virus troyano Locked	angel santillan 25 Jun 2010	Maryel Mendiola 25 Jun 2010	1
	How to check authentication? Locked	ahmad ajiloo 1 Aug 2010	Aaron Wells 2 Aug 2010	1
	How to find port scan coming from server Locked	Mr. Marc 11 Aug 2010	Visvanath Ratnaweera 26 Aug 2010	1
	Preventing certain roles from seeing resources Locked	Tom S 31 Aug 2010	Colin Fraser 20 Sep 2010	1
	Uninvited users Locked	Carol Ibanez 1 Oct 2010	Mary Cooch 2 Oct 2010	1
	Admin user has only teacher permissions Locked	Srdan Dukic 12 Oct 2010	Emanuel Delgado 12 Oct 2010	1
	Topic based permission settings possible? Locked	yuki yuki 18 Oct 2010	Sean Farrell 24 Nov 2010	1
	Hacked site Locked	Jeffrey Kimoto 21 Oct 2010	Helen Foster 21 Oct 2010	1
	Fichero config.php Locked	Martin Guerra 21 Oct 2010	Iñaki Arenaza 24 Oct 2010	1
	Multiple authentication options. Locked	gunna hafta 11 Nov 2010	Aaron Johnson 11 Nov 2010	1
	Hide student email address from teachers? Locked	Jesse Bye 17 Nov 2010	Piotr Kowalski 10 Feb 2011	1
	Moodle dependancy on expose_php Locked	Luis de Vasconcelos 25 Nov 2010	Tim Hunt 26 Nov 2010	1
	Protected URLs for html content? Locked	Alejandro Lengua 1 Dec 2010	Waldemar Basista 4 Jan 2011	1
	Blocking access to courses Locked	max was 10 Dec 2010	Mary Cooch 10 Dec 2010	1
	client block - mod_security Locked	Alfredo Pineiro 21 Dec 2010	Matteo Scaramuccia 21 Dec 2010	1
	our doamin says Reported Attack Page??? Locked	umesh chavan 3 Jan 2011	Clive Gould 3 Jan 2011	1
	Audit Features Locked	David Chau 5 Jan 2011	Tim Hunt 6 Jan 2011	1
	dataroot directory access Locked	Richard Austin 25 Jan 2011	Lars-Olof Krause 25 Jan 2011	1
	student from Mumbia, India Locked	Doris Johnson 3 Feb 2011	Lars-Olof Krause 4 Feb 2011	1
	Hide password in External database password field Locked	Michael Rhodes 11 Feb 2011	Michael Rhodes 11 Feb 2011	1
	Help with AV installation Locked	Cecilia Cicolini 13 Feb 2011	Lars-Olof Krause 14 Feb 2011	1
	Debian SSL Locked	LauriBeth Hull 15 Feb 2011	Deleted user 15 Feb 2011	1
	moodle 2.0 not userfriendly anymore Locked	Roseli Mat Nor 18 Feb 2011	Visvanath Ratnaweera 1 Apr 2011	1
	LDAP - 404 Locked	Jason Adams 22 Feb 2011	Jason Adams 22 Feb 2011	1
	LDAP Error Locked	suresh Sundaram 22 Feb 2011	Jason Adams 22 Feb 2011	1
	Course Creator change password access Locked	uk nites 23 Feb 2011	Darko Miletić 24 Feb 2011	1
	Forgot Password Notification? Locked	I VALENZUELA I VALENZUELA 28 Feb 2011	Iñaki Arenaza 1 Mar 2011	1
	New users - disable "required" fields Locked	Warren McCullough 20 Mar 2011	Mary Cooch 20 Mar 2011	1
	Moodle 1.9 folder and files permission Locked	Maciej smith 25 Mar 2011	Visvanath Ratnaweera 1 Apr 2011	1
	I may have locked myself out Locked	Anthony Rooney 30 Mar 2011	Anthony Rooney 31 Mar 2011	1
	Logs not displaying user name and information Locked	Sunitha Appikatla 28 Apr 2011	Guillermo Madero 10 Jun 2011	1
	Forcing password changes Locked	C. J. Turner 29 Apr 2011	Emanuel Delgado 29 Apr 2011	1
	Invalid login, please try again using Live@edu plug-in Locked	Mark Smith 12 May 2011	Mark Smith 25 May 2011	1
	Moodle & PHPMotion login integration with LDAP Locked	Adam B 13 May 2011	Nadav Kavalerchik 15 Aug 2011	1
	Report on Forgot Password Locked	Nancy K Hoke 23 May 2011	Guillermo Madero 31 May 2011	1
	open id plugin help Locked	Ilona El 23 May 2011	Hubert Chathi 3 Jun 2011	1
	Googlebot and security Locked	Clive Gould 6 Jun 2011	Lars-Olof Krause 6 Jun 2011	1
	Downloading problems on windows Locked	angelo maclean 6 Jun 2011	Deleted user 6 Jun 2011	1
	Unidentified admin user / hacked admin user Locked	Marcel Mihulka 7 Jun 2011	Guillermo Madero 8 Jun 2011	1
	Help! Locked Out Of Moodle Due To SSL Error Locked	Scott Custer 10 Jun 2011	Guillermo Madero 21 Jun 2011	1
	Moodle 2.0.3 with ClamAV - Detection Failure Locked	C Bartlett 21 Jun 2011	C Bartlett 25 Jun 2011	1
	Company A can still see company B. Help needed. Locked	Alan Muscat 6 Jul 2011	Thibault Hermes 14 Jul 2011	1
	Hack Detection and Repair Locked	Avrila Klaus 14 Jul 2011	Timothy Kaemmerer 15 Jul 2011	1
	LDAP Users Import Locked	Hossam eldin Reda Ibrahim 18 Jul 2011	Deleted user 18 Jul 2011	1
	Moodle -Admin Password reset Locked	Tobias Foppen 10 Aug 2011	Marcus Green 10 Aug 2011	1
	Calendar in v2.1.0 Locked	Deleted user 12 Aug 2011	Dan Marsden 12 Aug 2011	1
	IP Blocked Out of Moodle Locked	Steve Cook 31 Aug 2011	Deleted user 31 Aug 2011	1
	Permission Denied / Theme Upload Locked	Robert Lightburn 3 Sep 2011	Alex Walker 5 Sep 2011	1
	Disable Email Requirement PHP (Where to start) Locked	Alex Illsley 7 Sep 2011	Juan Rubio 12 Sep 2011	1
	admin password no longer works Locked	Sarah Swierk 28 Sep 2011	Mauno Korpelainen 28 Sep 2011	1
	How can i Limit The Log-In Locked	Richmon Atienza 9 Oct 2011	Tim Hunt 10 Oct 2011	1
	digital signatures in moodle Locked	hina yousuf 22 Oct 2011	Chad Outten 24 Oct 2011	1
	User role course subscriptions problem Locked	Rick Morice 27 Oct 2011	Rick Morice 27 Oct 2011	1
	Use secure logins problem Locked	Azmat Ullah 4 Nov 2011	Azmat Ullah 4 Nov 2011	1
	How do I know SSL is working? Locked	Scott Johnson 11 Nov 2011	Visvanath Ratnaweera 22 Nov 2011	1
	limit the number of times login Locked	mochamad rudyawan 24 Nov 2011	Visvanath Ratnaweera 11 Dec 2011	1
	Forgotten Admin Password Locked	Alex Li 22 Dec 2011	Alex Li 10 Jan 2012	1
	Limited access to one login Locked	Brennan Waters 3 Feb 2012	Mauro Guimarães 24 May 2012	1
	Upload of Files - Clam Locked	Emma Irwin 8 Feb 2012	Andrew Lyons 8 Feb 2012	1
	Auditing enrolment Locked	Michael Mollard 17 Feb 2012	Adi Tedjasaputra 17 Feb 2012	1
	Site policy - workflow, depending on if self-reg or not Locked	Deleted user 27 Feb 2012	Deleted user 13 Aug 2012	1
	non-downloadable content Locked	Sarah Knight 1 Mar 2012	Mary Cooch 1 Mar 2012	1
	Limited Web Access for Moodle only Locked	Deleted user 5 Mar 2012	Jon Witts 6 Mar 2012	1
	How to create an account for third party Tech Support Locked	paul dubois 8 Mar 2012	Colin Fraser 7 Apr 2012	1
	Urgent Security Issue with moodle and plesk Locked	Burt Polesitter 8 Mar 2012	Faris Raouf 14 Mar 2012	1
	Secure Forms Locked	Christopher O'Kelly 14 Mar 2012	Guillermo Madero 15 Mar 2012	1
	Permission oddity Locked	Colin Fraser 7 Apr 2012	Ken Task 7 Apr 2012	1
	Login using username Locked	Mart Leib 18 May 2012	Hubert Chathi 18 May 2012	1
	Restore installation with missing password salt Locked	D'Oyen Williams 13 Jun 2012	Helen Foster 13 Jun 2012	1
	Disable Password Expiry Locked	Lemmy Naught 19 Jul 2012	Guillermo Madero 20 Jul 2012	1
	HTTPS Insecure Content Locked	Mika Yearman 19 Jul 2012	Dan Poltawski 20 Jul 2012	1