Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Limited Web Access for Moodle only Locked	Deleted user 5 Mar 2012	Jon Witts 6 Mar 2012	1
	Limited access to one login Locked	Brennan Waters 3 Feb 2012	Mauro Guimarães 24 May 2012	1
	Limit the number of users into a group Locked	Paul Lemarchand 11 Apr 2016	Sebastian Wz 11 May 2016	1
	limit the number of times login Locked	mochamad rudyawan 24 Nov 2011	Visvanath Ratnaweera 11 Dec 2011	1
	Limit size of files uploaded by students via Atto > File Picker? Locked	Przemek Kaszubski 4 Aug 2021	Przemek Kaszubski 4 Aug 2021	0
	Limit number of ip adresses per user Locked	marwa bekrar 8 Dec 2016	Robin Stark 22 Dec 2016	4
	Limit number of IP Addresses per User Locked	Jamie Zelenak-Hyre 27 Feb 2020	Jamie Zelenak-Hyre 3 Mar 2020	2
	Limit Course Access by Special LDAP Attribute Locked	Jeff Jones 31 Mar 2018	Jeff Jones 31 Mar 2018	0
	License Key Locked	Tyler Musser 19 Oct 2013	Tyler Musser 19 Oct 2013	0
	Lesson password Locked	Tomislav Gaborovic 14 Jun 2012	Tomislav Gaborovic 14 Jun 2012	0
	Legal issue Locked	Eder Fernandez 23 Jul 2010	Michael Hughes 23 Jul 2010	4
	LDAP Users Import Locked	Hossam eldin Reda Ibrahim 18 Jul 2011	Deleted user 18 Jul 2011	1
	LDAP SSO on Windows Locked	rupamoy bhattacharya 1 Mar 2013	Iñaki Arenaza 2 Mar 2013	1
	LDAP signing Locked	Carl Maschke 18 Dec 2013	Carl Maschke 18 Dec 2013	0
	LDAP server authentication Locked	Jorge G. C. 16 Sep 2019	Jon Bolton 3 Oct 2019	12
	LDAP Question Locked	Devin Roush 19 Aug 2011	Michael Woods 9 Sep 2011	3
	LDAP Problems Locked	Ivaylo Radev 19 Oct 2012	Ivaylo Radev 19 Oct 2012	0
	LDAP Password Changer Locked	Graham Stone 14 Jan 2013	Steve Kleine 14 Jan 2013	1
	LDAP Errors with Novell E-Directory Locked	Keith Giles 12 Dec 2009	Iñaki Arenaza 14 Dec 2009	1
	LDAP Error Locked	suresh Sundaram 22 Feb 2011	Jason Adams 22 Feb 2011	1
	LDAP Authentication Error Locked	Constance Kan 13 Jan 2012	Constance Kan 18 Jan 2012	10
	LDAP Authantication Locked	Tumediso Sebonego 8 Apr 2019	Leon Stringer 15 Apr 2019	3
	LDAP and security Locked	Jedidiah Rex 28 Jul 2012	Visvanath Ratnaweera 9 Aug 2012	2
	LDAP and non-LDAP? Locked	Mike Stewart 5 Feb 2018	Mike Stewart 5 Feb 2018	2
	LDAP allowing students teacher access with any password Locked	Tim Rolands 18 Nov 2009	Ger Tielemans 18 Nov 2009	2
	LDAP - 404 Locked	Jason Adams 22 Feb 2011	Jason Adams 22 Feb 2011	1
	LDAP Locked	J R 13 Jan 2011	J R 13 Jan 2011	0
	Last login information on user profile Locked	Joost Elshoff 9 Jul 2018	Ray Lawrence 10 Jul 2018	1
	Keeping Members of Paid Courses from Sharing Login Credentials Locked	joseph zabrosky 11 Jun 2015	joseph zabrosky 13 Jun 2015	10
	Keeping informed about security Locked	Alexandro Colorado 9 Sep 2008	Helen Foster 9 Sep 2008	1
	Keep track of changes Locked	Vasilis F. 4 Jun 2010	Vasilis F. 4 Jun 2010	2
	keep track of assignments Locked	Grant Allison 9 Dec 2009	Grant Allison 9 Dec 2009	0
	Katharine Edson - How secure is to use Moodle? Locked	Katharine Edson 8 Oct 2016	Christopher McCool 22 Oct 2016	5
	Just a 'heads up' ... something you might want ot check ... depending. Locked	Ken Task 27 Mar 2023	Ken Task 27 Mar 2023	0
	JS Injection Locked	Claudio Henrique 29 Sep 2017	David Mudrák 29 Sep 2017	1
	Issues with a virus in Moodle 3.0.2+ Locked	Luis Pu 2 Aug 2016	Ken Task 3 Aug 2016	7
	Issue with oauth2 Locked	Noat Tran 26 Sep 2021	Ken Task 26 Sep 2021	1
	Issue with javascript.php Locked	Mahmood Naderan 17 Jun 2020	Mahmood Naderan 17 Jun 2020	2
	ISO 27001: Input data validation and Control of internal processing Locked	Gael Lams 26 May 2014	Tim Hunt 6 Jun 2014	6
	Is this possible? Policies and agreements view after login, not before... Locked	Oli G. 1 May 2019	Oli G. 1 May 2019	0
	Is this actually possible in Moodle 2.x? Locked	Alan Muscat 21 Jun 2011	Guillermo Madero 24 Jun 2011	6
	Is this a VULNERABILITY? Locked	LauriBeth Hull 31 Jul 2010	LauriBeth Hull 31 Jul 2010	0
	Is there something available to allow only certain IP's to login? Locked	Matt Hobbs 22 Dec 2011	Adi Tedjasaputra 22 Dec 2011	3
	Is there an example on configure Moodle to connect Zimbra LDAP? Locked	Bo Xie 24 Sep 2011	Iñaki Arenaza 26 Sep 2011	2
	Is there a way to set manager role to be able to enroll student to certain Course categories only? Locked	Maddy Fu 26 Sep 2018	Maddy Fu 26 Sep 2018	0
	Is there a way to completely delete users including all their data? Locked	stefan weber 18 Sep 2018	stefan weber 5 Apr 2019	24
	Is there a "waiting period" after so many failed login attempts? Locked	Melissa Benson 1 Mar 2013	Melissa Benson 1 Mar 2013	0
	Is the unoconv installation a security risk? Locked	Matthew Davidson 24 Jun 2016	Meg Goodine 10 Nov 2017	27
	Is the Cron script a security threat? Locked	John Bonner 13 Sep 2009	John Bonner 26 Sep 2009	5
	Is thar any way to make Moodle site at least basicly GDPR compliant? Locked	Zoran Jančić 18 Mar 2019	Zoran Jančić 18 Mar 2019	0
	Is password salt needed with LDAP authentication? Locked	Stephen Bloomer 28 Oct 2010	Stephen Bloomer 29 Oct 2010	2
	Is password policy change "retroactive"? Locked	Jacques LeCavalier 27 Jul 2017	Emma Richardson 28 Jul 2017	3
	Is package.json vulerable? Locked	維彰單 3 Dec 2022	維彰單 4 Dec 2022	2
	Is notification page supposed to be free of require_login()? Locked	Daniele Cordella 6 Oct 2012	Tim Hunt 7 Oct 2012	1
	Is Moodle OWASP compliant? Locked	Ivica Matotek 9 Apr 2019	Dan Marsden 11 Apr 2019	1
	Is Moodle ok on GitHub? Locked	Leticia Dark-rose 11 Feb 2016	Evan Donovan 20 Feb 2016	9
	Is Moodle Adminer a security risk? Locked	Don Schwartz 2 Nov 2019	Ken Task 2 Nov 2019	2
	Is LDAPS necessary when using https (ssl) login? Locked	elearning developer 22 Oct 2010	Waldemar Basista 4 Jan 2011	2
	Is it safe to create system roles to restrict the access to blocks? Locked	Federica Marra 19 Jun 2015	Tim Hunt 19 Jun 2015	1
	is it possible to have username instead their ID in the logs or more details ? ? Locked	REMI PICARD (substitute) 26 Aug 2019	REMI PICARD (substitute) 26 Aug 2019	0
	Is it possible to have Moodle users using local autentication and other users authenticating with...	Alejandro Lengua 15 Apr 2024	Tim Hunt 15 Apr 2024	1
	is it possible to have "create new account" button with no athentication method? Locked	Regdomain A 29 Oct 2011	Regdomain A 29 Oct 2011	0
	Is it possible to edit the Logs and specially the admin Logs Locked	Osama Hasan 6 Apr 2016	Richard Oelmann 7 Apr 2016	2
	Is It possible to authenticate users by there certificate ? Locked	patrick badji 4 Apr 2009	patrick badji 4 Apr 2009	0
	is it possible that category administrator can upload new user and course Locked	rajani gupta 11 May 2017	Ambrish Tiwari 4 Jul 2017	2
	Is https for the login page necessary? Locked	Abel Cheng 5 Feb 2010	Jon Witts 6 Feb 2010	2
	Is Facebook review required for Facebook login? Locked	Claus Tøndering 30 Jun 2018	Claus Tøndering 30 Jun 2018	0
	Is an SSL Certicate required for Moodle 2.0 Locked	Rich Brennan 5 Jan 2011	Ian Webb 12 Mar 2011	42
	Is a logged action created when a user is deleted via a privacy data request? Locked	Mike Churchward 5 Jun 2018	Mike Churchward 5 Jun 2018	0
	IPV6 address in IP Blocker Locked	rabin sk 12 Feb 2016	rabin sk 12 Feb 2016	0
	iptables firewall stops email messages to SMTP host Locked	Adrian Scarle 11 Jul 2013	Ken Task 13 Jul 2013	9
	IP lockdown for admin account Locked	Martin O'Mahony 28 Mar 2014	Martin O'Mahony 28 Mar 2014	0
	IP Filter for a resource or an activity Locked	Trevor Li 28 Mar 2014	Marina Glancy 16 Jun 2014	2
	IP Blocker question Locked	Doug McGlathery 23 Mar 2013	Klaas Hobo 23 Mar 2013	2
	IP Blocker Issue - Urgent Locked	Alexa Lupenec 16 Jan 2020	Ken Task 16 Jan 2020	2
	IP blocker error when access via html script Locked	T K 17 Dec 2018	T K 17 Dec 2018	0
	IP Blocker - help Locked	Paul Baumeister 20 Feb 2013	Ernani Veloso Freire 1 Sep 2016	16
	IP Blocker Locked	mike schulz 4 May 2011	Ken Task 15 Nov 2012	6
	IP Blocked Out of Moodle Locked	Steve Cook 31 Aug 2011	Deleted user 31 Aug 2011	1
	IP addresses used by Moodle's mail servers Locked	Dan OBrien 16 Dec 2015	Dan OBrien 16 Dec 2015	6
	IP address being blocked by the server Locked	Rick Enderle, Jr. 25 Jul 2017	Just H 25 Jul 2017	1
	IP address Locked	heather brown 6 May 2015	Visvanath Ratnaweera 11 May 2015	7
	Invalid sesskey Problem Locked	James Quinones 9 Sep 2020	Kate James 20 Apr 2021	1
	Invalid permissions detected in $CFG->dataroot directory, administrator has to fix permissions Locked	Jukka Kylliäinen 5 Jun 2018	Jukka Kylliäinen 5 Jun 2018	0
	Invalid login, please try again using Live@edu plug-in Locked	Mark Smith 12 May 2011	Mark Smith 25 May 2011	1
	Invalid Login Token Locked	Mahmood Naderan 10 Jul 2020	Mahmood Naderan 10 Sep 2020	4
	Invalid Login Attempt Locked	Visionaries ICT 12 Jun 2020	Visionaries ICT 14 Jun 2020	2
	Invalid Login all the time. Locked	alex crampton 20 Dec 2012	James Miller 8 Sep 2014	8
	Internet Explorer cannot load 'Edit Profile' page #MDL-10296 revisited. Locked	Worth Bishop 14 Jan 2010	Worth Bishop 15 Jan 2010	6
	Internet Access on Ubuntu Locked	Greg Kippen 13 Oct 2021	Tradebloc Tim Clark 15 Oct 2021	2
	Intermittent: This course does not allow public access Locked	Jonny Barnstorf 30 Aug 2011	Jonny Barnstorf 30 Aug 2011	0
	Interests, profile picture, and Google image search? Locked	Michael Gerszewski 7 Oct 2014	Daniel Neis Araujo 14 Oct 2014	3
	Integration with external system users? Locked	Aaron Zeckoski 1 May 2009	Hubert Chathi 9 May 2009	3
	Integration with Atlassian Crowd Locked	Nicholas Rayner 5 Oct 2012	Nicholas Rayner 5 Oct 2012	0
	Integrating Hall Pass Systems with Moodle for K-12 Schools	ehall pass 1 Mar 2024	Ken Task 1 Mar 2024	1
	Installing wildcard HTTPS to apache win server Locked	Malcolm Rivett 17 Apr 2013	Dave Perry 17 Apr 2013	1
	Installing ssl certificates in moodle server Locked	Christine Mburu 4 Feb 2014	Linda Petty 13 Jul 2016	2
	install CERTbot on moodle Locked	Luis Alford 18 Jul 2020	Luis Alford 18 Jul 2020	2
	Inserting Javascript code in user profile (description field) Locked	Peter Allen 21 Aug 2020	Michael Hawkins 24 Aug 2020	1
	Insecure dataroot (yet again) Locked	Visvanath Ratnaweera 14 Nov 2015	Visvanath Ratnaweera 15 Nov 2015	13