Security and privacy | Moodle.org

Forums
Documentation
Plugins
Downloads
Demo
Development
Translation
Tracker
Search

Search
Other Moodle sites

Moodle in English

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

PLEASE DO NOT PUBLISH SECURITY FINDINGS PUBLICLY.

If you discover a potential security issue, please report it via our Security Submission Form.

For more information about our security processes and responsible disclosure policy, see the Security Procedures documentation.

List of discussions. Showing 100 of 1899 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	anonymous grading Locked	Asaf Ohaion 8 Nov 2012	Mary Cooch (personal account) 8 Nov 2012	1
	How to check authentication? Locked	ahmad ajiloo 1 Aug 2010	Aaron Wells 2 Aug 2010	1
	insert JavaScript via ATO Locked	Shimon Nagar 15 Mar 2015	Shimon Nagar 15 Mar 2015	0
	moodle 2.8 security Locked	myelearning system 19 June 2015	Tim Hunt 19 June 2015	1
	SMTPAPI header error Locked	Gayan Yasantha 21 Mar 2022	Gayan Yasantha 21 Mar 2022	0
	Stimutaneous Login Plug-In Locked	Eric Polatty 4 Aug 2009	Hubert Chathi 4 Aug 2009	1
	`Forbidden. "sesskey" field is missing or contains an incorrect value.` Locked	cyber sec 15 Sept 2020	cyber sec 17 Sept 2020	2
	.../local/ folder visible - security risk? Locked	Flotter Totte 25 June 2023	Brett Dalton 30 June 2023	6
	.htaccess files hacked Locked	John Bonner 20 July 2009	John Bonner 27 July 2009	1
	.PHP Extensions in Moodle URLs.	palak mittal 18 Sept 2025	Andrew Lyons 18 Sept 2025	1
	'chmod(): Operation not permitted' in global search Locked	Dorel Manolescu 23 Feb 2010	Dorel Manolescu 23 Feb 2010	0
	'loglevel' cookie - what does it do? Locked	S G 11 May 2023	S G 11 May 2023	0
	'send me details via email' Forgotten Password email address Locked	John Riley 8 May 2010	Worth Bishop 9 May 2010	1
	'Successful Login Notification' to catch potential impersonation Locked	Mario Gharib 13 July 2020	Mario Gharib 16 July 2020	4
	"\tool_dataprivacy\task\expired_retention_period" processing time taking too long Locked	Ricardo Caiado 3 May 2022	Ricardo Caiado 3 May 2022	0
	"admin":"admin" Locked	Colin G 14 Mar 2023	Colin G 20 Mar 2023	2
	"coursecontact" only after login? Locked	Uwe Klemm 20 Mar 2011	Uwe Klemm 20 Mar 2011	0
	"Force users to log in" not working Locked	Mph Live 27 May 2022	Carlos Alvarez Fullgraff 16 Feb 2023	2
	"Guest User (id=1)" was enrolled in courses by itself Locked	Mario Gharib 29 May 2021	Randy Thornton 11 May 2022	7
	"Guest user has logged in" ? Locked	g k 7 July 2016	Ken Task 9 Jan 2017	2
	"Invalid Login" if country code is lowercase Locked	Derek Chaplin 9 Apr 2016	Derek Chaplin 9 Apr 2016	0
	"locking" Moodle Update page Locked	Florian Tolk 24 Oct 2023	Florian Tolk 24 Oct 2023	2
	"Open to Google" question Locked	James Phillips 6 June 2008	James Phillips 6 June 2008	0
	"Print screen / copy page" Protection Locked	Irham Latif 14 Dec 2013	Tim Hunt 18 Mar 2014	4
	"Registered user role" and "Default course role (global)" in critical status Locked	Antonello Moneta 24 Feb 2009	Antonello Moneta 24 Feb 2009	0
	"Site policy URL for guests" keeps getting auto filled Locked	Melissa Benson 8 Oct 2013	Daniel Thies 29 Aug 2014	7
	"view courses without participation" - not wanted / and changed? Locked	Klaas Hobo 17 Nov 2016	Klaas Hobo 19 Nov 2016	5
	($SESSION->session_test) value becomes null Locked	sujeet kumar 21 Mar 2011	sujeet kumar 21 Mar 2011	0
	[3.5]Insecure files/folders Moodle? Locked	Richard van Iwaarden 18 Oct 2018	Richard van Iwaarden 19 Oct 2018	2
	[3.7]Block certain HTML codes Locked	Richard van Iwaarden 12 Nov 2019	Michael Hawkins 13 Jan 2020	6
	[3.9.2]Trusted content problem Locked	Richard van Iwaarden 29 Mar 2021	Richard van Iwaarden 29 Apr 2021	2
	[Dev] Is there a hook that will help me to secure (filter) User information. Locked	Ryan Behague 10 Aug 2023	Ryan Behague 10 Aug 2023	0
	[ERROR] Estado de la Copia de Seguridad programada Locked	Heike Ebelt 28 June 2010	Heike Ebelt 29 June 2010	3
	[privacy] The status of tracking visitors on the Web	Visvanath Ratnaweera 25 Mar 2025	Doulos Xavier 27 Mar 2025	1
	[Security] How to protect source code and database from hosting company Locked	Hu La 9 Jan 2017	Dave Perry 16 Jan 2017	7
	[Security] Moodle showed all users to Sub Category Manager Locked	Hu La 7 Jan 2017	Emma Richardson 7 Jan 2017	1
	[SOLVED] Strange problem with upload file size Locked	Gregory Soprano 4 Jan 2012	Deleted user 4 Jan 2012	4
	[URGENT] Heartbleed OpenSSL Vulnerability Locked	Matt Spurrier 11 Apr 2014	Matt Bury 17 Apr 2014	9
	/repository/ directory visible via browser Locked	Shad Rashed 26 Sept 2021	Shad Rashed 26 Sept 2021	2
	$dataroot ownership and permissions Locked	Liam O'Riordan 10 Feb 2010	Visvanath Ratnaweera 12 Mar 2010	1
	1.9.14 commit for MDL-28615? Locked	Colin Campbell 19 Oct 2011	Tim Hunt 20 Oct 2011	3
	15749 hits in 24 hours on the styles_debug.php Locked	Mark Fellowes 16 Oct 2024	Ken Task 16 Oct 2024	1
	16 years old vulnerability	Kutlymurat Mambetniyazov 8 Apr 2026	Kutlymurat Mambetniyazov 10 Apr 2026	4
	2.0.2: ClamAV Locked	Karsten Burger 12 Apr 2011	Karsten Burger 12 Apr 2011	0
	2.7 brute force attack - how to stop Locked	Ian L 1 Dec 2014	Eduardo Kraus 12 Apr 2015	4
	2.7.1 .htaccess files Locked	Wendi Daniels 9 Feb 2015	Wendi Daniels 9 Feb 2015	0
	2.7.1 Permissions Locked	Wendi Daniels 8 Feb 2015	Wendi Daniels 9 Feb 2015	1
	2.7.1 hacked Locked	Wendi Daniels 6 Feb 2015	Visvanath Ratnaweera 10 Feb 2015	12
	2.9+ moodle - recaptcha suddenly stopped working Locked	ajeet Singh 1 Nov 2015	John Okely 17 Nov 2015	8
	251 Days and the Clock Stops ;-) Locked	Clock Stops 5 Feb 2009	Tim Hunt 6 Feb 2009	1
	3.1.4 - new security Announcement: MDL-57597 and MDL-57596 competency Locked	Monica Franz 22 Mar 2017	Monica Franz 24 Mar 2017	7
	300 login error Locked	m question 25 July 2014	m question 25 July 2014	0
	400+ Existing Users Enrolled into Course Locked	JM Erestain 24 July 2021	JM Erestain 24 July 2021	0
	404 after 10 failed logins Locked	David Kennedy 2 Dec 2010	David Kennedy 7 Jan 2011	6
	644 unacceptable for .xml files (and others) on litespeed? Locked	Garth Brady 15 July 2021	Pedro Camacho 5 Sept 2021	1
	A 15 year old student put Moodle down Locked	Bernat Martinez 23 May 2014	Dave Perry 30 May 2014	23
	A directory is unprotected. Locked	Mario Gharib 3 Oct 2023	Brett Dalton 4 Oct 2023	2
	A required parameter token was missing Locked	Ross Quinnell 26 Oct 2018	Ross Quinnell 30 Oct 2018	2
	a user with student privilege change another user's password Locked	esty wexler 27 Nov 2017	Mathew Gancarz 29 Nov 2017	1
	Ability for "view only" on PDFs Locked	Rachael Gaunce 28 Apr 2020	Rick Jerz 28 Apr 2020	4
	About Drupal + Moodle integration Locked	Raviteja Yarlagadda 16 Dec 2015	Ken Task 16 Dec 2015	1
	About JQuery Locked	Mahmood Naderan 11 June 2020	Ilya Tregubov 12 Feb 2021	10
	About MSA-09-0019 Locked	Sebastien M. 27 Oct 2009	Howard Miller 28 Oct 2009	6
	About the OAuth 2 services Locked	Cheryl Tsai 31 Oct 2017	Cheryl Tsai 28 Dec 2017	2
	Academic integrity discussions Locked	Joseph Thibault 7 Feb 2023	Joseph Thibault 8 Feb 2023	2
	ACCESS CONTROL IN MOODLE Locked	r ma 29 Sept 2010	Aaron Wells 1 Oct 2010	3
	Access Logs Locked	John Rebtho 1 June 2009	Sudeep Nayak 22 Feb 2016	3
	Access Moodle webservice using SAML Token Locked	Nitin Khubani 16 Sept 2015	Nitin Khubani 17 Sept 2015	1
	Access privileges on front page Locked	neil hamilton 19 Feb 2009	E. L. Cooper 30 Mar 2009	3
	Access Reserved to Moodle Maintenance Mode Locked	Rui Costa 7 Aug 2018	Mary Cooch (personal account) 7 Aug 2018	1
	Access rights to catagorys in moodle Locked	Andy Burrows 28 Jan 2014	Andy Burrows 29 Jan 2014	11
	Access to label's files prevented by user's rights? Locked	Philippe Decloitre 24 June 2015	T W 11 Nov 2016	2
	Access to lesson activities Locked	Joe Chacha 6 May 2017	Joe Chacha 6 May 2017	0
	Access to Moodle Locked	Lance Hinds 10 Jan 2018	Ray Lawrence 11 Jan 2018	5
	Access to Moodle Locked	Александр Бедов 11 May 2023	Александр Бедов 21 May 2023	8
	Access to Moodle with SSO and manual enrolment Locked	Mel Newell 13 Nov 2024	Maresa M. 13 Nov 2024	1
	Access to moodledata files Locked	elog wo surname 7 June 2010	Bartosz Cisek 30 June 2010	2
	access to server lost Locked	Hicham Doumali 9 Mar 2016	Hicham Doumali 18 Mar 2016	3
	Access to SharePoint files via Moodle Mobile? Locked	Frank Burger 21 Mar 2020	Jorge Farfan 14 Apr 2020	1
	Access where there should none be Locked	Ulrich Eckardt 9 Nov 2020	Ulrich Eckardt 9 Nov 2020	0
	Accessing external http sites from an https moodle URL Locked	Richard Whitfield 16 July 2009	Richard Whitfield 16 July 2009	0
	Accessing files in moodledata folder with out logging in Locked	Michael Rhodes 26 Jan 2010	Michael Rhodes 26 Jan 2010	0
	accessing moodle from another site without logging in again Locked	tim lambert 15 Sept 2015	Jon Bolton 16 Oct 2015	1
	accessing question bank Locked	Ali Rajabpour Sanati 26 June 2013	Ali Rajabpour Sanati 23 July 2013	5
	Accidently took away all admin abilities- HELP Locked	Carolyn Minks 7 Nov 2009	Carolyn Minks 13 Nov 2009	8
	Accoumts with the name anonfirstname Locked	Giovanni Martinez 11 Aug 2013	Giovanni Martinez 13 Aug 2013	4
	Account lockout Locked	J Arn 14 May 2013	Helen Foster 15 May 2013	1
	Account lockout threshold? Why is the default no? Locked	Billy Zwiener 30 May 2019	Billy Zwiener 2 June 2019	3
	Account on moodle.org got spam email Locked	Jerry Lau 22 July 2011	Helen Foster 22 July 2011	2
	account setup Locked	ivan breziansky 3 Aug 2009	ivan breziansky 3 Aug 2009	8
	Active Directory - Using subdomains Locked	J. Dalton Humpf 12 Jan 2021	J. Dalton Humpf 12 Jan 2021	0
	Active Directory Passwords Locked	Dan Short 15 Nov 2013	Dan Short 25 Nov 2013	2
	Active Directory Security Locked	Neil Griffiths 15 Oct 2005	Neil Griffiths 15 Oct 2005	0
	Activity completion and GDPR compliance Locked	Flotter Totte 25 Mar 2019	Flotter Totte 25 Mar 2019	2
	Add Cloudflare turnstile to prevent spam robots registration Locked	Hossein K 23 June 2024	Marcus Green 23 June 2024	1
	Add Custom Salt to Unique Salt for Better Hashed Password? Locked	Paul Lindgreen 17 Feb 2018	Iñaki Arenaza 18 Feb 2018	2
	Add new field form in ../user/policy.php Locked	Gisele Brugger 22 Aug 2009	Gisele Brugger 22 Aug 2009	0
	Add security mecanism SSL to handle user connection on Moodle/CIMA Locked	chhivhorng ly 6 Nov 2008	chhivhorng ly 25 Nov 2008	7
	Added security maybe along the lines of side certificates Locked	Edward Murray 18 Oct 2012	Edward Murray 18 Oct 2012	0
	Added unique login plug-in normally installation,but not work Locked	Kelvin Cheung 23 Nov 2013	Kelvin Cheung 23 Nov 2013	0