Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Passwords and User Uploads Locked	Stephen Oxlade 12 July 2019	Stephen Oxlade 12 July 2019	0
	password, invalid characters Locked	Velson Horie 11 Jan 2021	Velson Horie 25 Mar 2021	2
	Password security options Locked	ayman cherrat 29 May 2018	Dave Perry 30 May 2018	2
	Password Security in moodle 2.9 or greater Locked	Sanmeet Singh 19 July 2016	Sanmeet Singh 19 July 2016	4
	Password salting by default? Locked	Garret Gengler 31 Mar 2009	Garret Gengler 7 Apr 2009	7
	password salt vs. password policy Locked	Guillermo Madero 6 June 2010	Guillermo Madero 7 June 2010	2
	Password salt - where do I put it? Locked	Pete Jones 21 May 2010	Pete Jones 28 May 2010	4
	Password Reset Process Locked	Pince AUS 1 Apr 2019	Pince AUS 1 Apr 2019	0
	Password reset options Locked	Jeremy Schweitzer 4 Dec 2009	Jeremy Schweitzer 4 Dec 2009	0
	password requirement too complex Locked	jenny clarke 10 Apr 2014	Guillermo Madero 11 Apr 2014	2
	Password recovery from login page : a strange screen Locked	Niko Niko 7 Nov 2018	Emma Richardson 9 Nov 2018	1
	Password protection Locked	jd hamrick 1 Oct 2011	Adi Tedjasaputra 3 Oct 2011	4
	Password policy error message displays in English Locked	Tim Bahula 18 July 2022	Tim Bahula 18 July 2022	0
	Password policy and authentication plugins	Stuart Anderson 6 Oct 2023	Stuart Anderson 9 Oct 2023	3
	Password Issue with moodle 3.4.6 Locked	Tech Academy 13 Apr 2019	Tech Academy 13 Apr 2019	0
	Password format Locked	pelleth thomas 1 Nov 2010	Stephen Bloomer 2 Nov 2010	3
	Password Encryption MD5 plain text Locked	Rupesh Kumar 20 Nov 2015	Tim Hunt 11 Mar 2016	4
	password change Locked	Maria Murjani 24 Jan 2013	Marco Rossi 25 May 2013	1
	Password Attempts Locked	Richard Hand 25 Mar 2010	Tim Hunt 15 May 2010	4
	Passing credentials to Moodle Locked	Jason Brandt 20 May 2010	Jason Brandt 20 May 2010	0
	Pass through single-sigon authentication Locked	Bryan Ward 5 Sept 2015	Bryan Ward 5 Sept 2015	0
	Parents shouldn't know things Locked	Doug Moody 26 Sept 2011	Mary Cooch 27 Sept 2011	3
	Parent role access to profiles Locked	Abdulhadi Zakkour 8 Dec 2020	Mary Cooch 8 Dec 2020	1
	Parent Role - View Child's Courses (moodle 2,2) Locked	M Bee 5 Oct 2012	Mary Cooch 5 Oct 2012	1
	Outstanding Tracker Issue Locked	C Behan 24 Sept 2019	C Behan 25 Sept 2019	3
	our doamin says Reported Attack Page??? Locked	umesh chavan 3 Jan 2011	Clive Gould 3 Jan 2011	1
	OSSEC blocks ajax call Locked	Venizia Venizia 2 Feb 2019	Venizia Venizia 2 Feb 2019	0
	Opt-in Student Privacy Locked	David Needham 3 June 2009	David Needham 3 June 2009	0
	OpenID Connect/Microsoft 365 Integration Locked	Edward West 21 June 2021	Edward West 21 June 2021	0
	open id plugin help Locked	Ilona El 23 May 2011	Hubert Chathi 3 June 2011	1
	Open Access / Student User access Locked	Catherine Seeds 7 Sept 2015	Emma Richardson 7 Sept 2015	3
	only my ip addresses allowed and still getting hacked Locked	christian turc 11 Sept 2013	Ken Task 12 Sept 2013	4
	one user one login Locked	Adi Prasetya 23 June 2011	Adi Prasetya 23 June 2011	0
	One Time Permission Camera Access Locked	Nick Marr 11 Mar 2020	Nick Marr 11 Mar 2020	0
	Old Student Accounts Locked	Colin Tennyson 12 Nov 2020	Colin Tennyson 13 Nov 2020	6
	Old CVE resolved? Locked	Hap Less 18 Oct 2022	Hap Less 18 Oct 2022	2
	Offline Moodle (Poodle) file security Locked	Henry Happ 25 Apr 2009	Henry Happ 25 Apr 2009	0
	Offering the same courses to many enterprises (privacy concerns) Locked	Deleted user 10 Nov 2008	Helen Foster 11 Feb 2009	12
	Odd error message: error/concurrent access from same user is not supported Locked	Christe McMenomy 26 Apr 2021	Christe McMenomy 10 Aug 2021	2
	Number of login attempts to be allowed Locked	Annette Powell 16 Dec 2011	J Arn 14 May 2013	4
	Notifications regarding Data Privacy requests processing Locked	seaghan moriarty 27 Feb 2019	seaghan moriarty 27 Feb 2019	0
	Notification Messages Locked	Trevor Clay 5 Oct 2011	Jack Watson 3 Dec 2011	5
	Not a vulnerability... not even Moodle's fault... but still annoying! What can we do? Locked	Dale Davies 15 Sept 2009	Dale Davies 15 Sept 2009	2
	non-downloadable content Locked	Sarah Knight 1 Mar 2012	Mary Cooch 1 Mar 2012	1
	No checkboxes on Data Requests page Locked	Peter Diedrichs 22 Nov 2018	Alex Sandu 25 Nov 2018	2
	No CAPTCHA reCAPTCHA Moodle Locked	Bruno Nogueira 2 July 2015	John Okely 7 July 2015	3
	New users - disable "required" fields Locked	Warren McCullough 20 Mar 2011	Mary Cooch 20 Mar 2011	1
	New user email regisration by group key Locked	Doug Stevens 20 May 2010	Doug Stevens 20 May 2010	0
	New User Email Address Message Locked	Lauren Ziegler 16 July 2015	Lauren Ziegler 16 July 2015	2
	New to Moodle, security issue? Can anyone advise please? Locked	Debbie Kay 23 Sept 2009	Debbie Kay 24 Sept 2009	3
	New Profile field not working as a course restriction Locked	Anne Sherman 14 Sept 2016	Helen Foster 15 Sept 2016	3
	New Install: dataroot exposure to web, security issue Locked	Brad PIerce 27 Sept 2014	Brad PIerce 30 Sept 2014	3
	New account username and email enumeration	Julian Pool 15 June 2023	Julian Pool 15 June 2023	0
	Network Issue Firewall Moodle and Openmeetings. Locked	pinguim oitenta e seis 2 May 2021	pinguim oitenta e seis 2 May 2021	0
	NET::ERR_CERT_AUTHORITY_INVALID 3.2.2 Locked	David Robertson 2 May 2017	Amit Shingala 5 Sept 2017	9
	Nessus and PHP upgrade Locked	Deleted user 2 July 2011	Deleted user 2 July 2011	0
	Need to circumvent - "Dataroot location is not secure" issue Locked	Rick Morice 15 Dec 2010	Guillermo Madero 23 Apr 2012	5
	Need to block access to my Tags/search.php Locked	Yossi Koren 21 Oct 2014	Ken Task 21 Oct 2014	1
	Need security help with university examinations Locked	Robert Barone 13 Jan 2014	Tim Hunt 13 Jan 2014	1
	Need ideas. Unique issue Locked	Doug Moody 19 Aug 2011	Jonathan Newman 2 Nov 2011	4
	Need help on student's assignment become searchable on google scholars Locked	tom tom 27 Dec 2013	tom tom 27 Dec 2013	0
	Need Help My Moodle Blocked	Yaddy Kusmayadi 20 June 2023	Ken Task 20 June 2023	1
	Need Assistance on Installing SSL Wildcard Certificate Moodle3.2.4 Apache Locked	Aretha Etienne 12 Nov 2018	Aretha Etienne 12 Nov 2018	0
	Mysterious self-enrolled user Locked	David McAuley 23 Feb 2011	Guillermo Madero 31 Mar 2011	7
	MySQL SSL Connection? Locked	William Voyek 11 Aug 2009	Mohammed Mohammed 7 Feb 2016	4
	MySQL Database Encryption Locked	Vincent Basile 18 May 2021	Ken Task 18 May 2021	2
	MySQL / MariaDB / PerconaDB - Root Privilege Escalation Locked	Grant Mucha 4 Nov 2016	Grant Mucha 4 Nov 2016	0
	myphp & Admin username/pass Locked	Skyler Crandall 22 Jan 2020	Ken Task 22 Jan 2020	7
	mymoodle.com/config.php Locked	Garth Brady 29 Aug 2022	Ken Task 30 Aug 2022	1
	My Website is not working in Google Chrome with my local network. Locked	Vineet Kamboj 16 Sept 2021	Vineet Kamboj 25 Sept 2021	2
	My students don't have email!!!! Locked	Tom Connolly 14 Mar 2020	Visvanath Ratnaweera 17 Mar 2020	2
	My site was hacked. Students get re-directed when accessing blog tag Locked	Cristina Berisso 18 Jan 2013	Justas Pranskaitis 18 Jan 2013	2
	My site is listed as suspicious site !! help mee Locked	eda karacelebi 15 Aug 2011	Iñaki Arenaza 21 Aug 2011	6
	My Site has been hacked. HELP Locked	Fergal McCann 18 Oct 2014	Guillermo Madero 21 Oct 2014	7
	my site hangs Locked	juan vi 2 Mar 2011	juan vi 2 Mar 2011	0
	My moodle site is infected with malware, how to fix?	dharmik dharmik 25 July 2023	Ken Task 27 July 2023	11
	My Moodle site infected with malware: how to fix it? Locked	Luca Oppizzi 30 Nov 2012	alice louis 6 Dec 2014	5
	my moodle redirect to https and trailing slash Locked	JC Dodo 26 Aug 2013	Brian walker 18 Dec 2013	3
	My host account suspended for being send bulk sms Locked	HamidReza Sheerkoshan 1 Jan 2021	Visvanath Ratnaweera 3 Jan 2021	3
	My homepage (frontpage) before login is only showing the login module Locked	Stefan Stefansson 6 Sept 2016	Stefan Stefansson 6 Sept 2016	2
	Multiple users, same username and password Locked	Andrew Hayes 29 July 2014	Andrew Hayes 29 July 2014	2
	Multiple session for same user. Locked	Ashwani Singh 2 Nov 2009	Ashwani Singh 2 Nov 2009	0
	Multiple password for Quiz Locked	vancool black 7 June 2015	Rick Jerz 7 June 2015	1
	Multiple login Locked	Suleiman Umar 13 May 2015	Suleiman Umar 18 May 2015	6
	Multiple LDAP/AD forest support Locked	S P 29 Apr 2009	S P 29 Apr 2009	0
	Multiple LDAP authentication servers Locked	Hamza Khan 18 Feb 2020	Visvanath Ratnaweera 25 Feb 2020	1
	Multiple authentication options. Locked	gunna hafta 11 Nov 2010	Aaron Johnson 11 Nov 2010	1
	Multiple AD fields at login with LDAP Locked	Jeffrey Jones 6 Feb 2011	David Tredinnick 11 Feb 2011	3
	Multilang policies Locked	Andrzej Gałuszka 7 June 2018	Andrzej Gałuszka 7 June 2018	0
	Multi-Factor authentication plugin for only specific users Locked	Mario Gharib 13 July 2020	Dan Marsden 16 July 2020	2
	Multi-Factor authentication plugin for only specific users Locked	Mario Gharib 13 July 2020	Tim Hunt 24 July 2020	1
	MSA-11-0038 and MSA-11-0037 have the same change link Locked	juan Diaz 27 Oct 2011	Michael de Raadt 27 Oct 2011	2
	Moving whole site from http to https on LAMP virtual host Locked	Peter DeBruyn 15 Sept 2015	Peter DeBruyn 17 Sept 2015	4
	Moving to HTTPS everywhere Locked	Michael Aherne 16 May 2017	Susan Mangan 7 July 2017	6
	Move to secure protocol (https) issues Locked	Wes Matchett 2 Feb 2017	Ken Task 8 Feb 2017	8
	Move Moodle Config Outside of Web Root Locked	Lewis Hackfath 9 Feb 2016	James McLean 10 Feb 2016	12
	More info about security updates Locked	Tiffany Morgan 23 Dec 2014	Tiffany Morgan 29 Dec 2014	2
	moodlesession variable got rejected	Sujata Kumari 15 June 2023	Ken Task 16 June 2023	1
	moodlesession value security issue Locked	Dnyaneshwar K 21 Apr 2021	Sergio Rabellino 21 Apr 2021	3
	moodledata security testing Locked	Filippo Carnevali 14 May 2014	Guillermo Madero 15 May 2014	1