Security and privacy

How to keep your Moodle site secure and methods for increasing privacy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next

Discussion	Started by	Last post	Replies
EU General Data Protection Regulation (GDPR) compliance	Martin Dougiamas 17 May 2017	Prince Namdev 9 Jul 2019	100
SECURITY WARNING! Locked	สมศักดิ์ เหมาะสมัย 3 Jul 2009	E. L. Cooper 3 Jul 2009	1
Timelimit access to authorize portlal part Locked	Александр Александр 2 Jun 2009	Александр Александр 2 Jun 2009	0
Grades and new roles behaviour Locked	Zoran Jancic 17 Feb 2012	Zoran Jancic 22 Feb 2012	3
How to prevent user to access the course without unenroll? Locked	Zoran Jancic 23 Feb 2012	Zoran Jancic 2 Mar 2012	3
Problem with "Force users to log in" option Locked	Zoran Jancic 24 May 2018	Zoran Jancic 28 May 2018	1
Deleting user accounts for users that are not using the system anymore	Zoran Jancic 15 Mar 2019	Zoran Jancic 15 Mar 2019	0
Is thar any way to make Moodle site at least basicly GDPR compliant?	Zoran Jancic 18 Mar 2019	Zoran Jancic 18 Mar 2019	0
Moodle 2.9 apache can access moodle files Locked	Zola Anderson 15 Oct 2016	Tim Hunt 15 Oct 2016	1
Suspended accounts on App vs Browser	zohir meddane 23 Jan 2020	Juan Leyva 24 Jan 2020	3
course file access without login into moodle Locked	zizo zizo 24 Mar 2014	Richard Oelmann 27 Mar 2014	5
Maintenance Mode Locked	Zee Sef 3 Aug 2015	Ken Task 3 Aug 2015	1
Create new User via Webservice Locked	Zadok Lindt 13 Feb 2018	Lê Tú 30 May 2018	6
Do not want to show all courses/course permission...please help Locked	yuki yuki 18 Oct 2010	sudha m 20 Oct 2010	2
Topic based permission settings possible? Locked	yuki yuki 18 Oct 2010	Sean Farrell 24 Nov 2010	1
Locked out by the SSL setting :( Locked	Youssef Akkari 26 Nov 2009	Youssef Akkari 26 Nov 2009	2
Need to block access to my Tags/search.php Locked	Yossi Koren 21 Oct 2014	Ken Task 21 Oct 2014	1
Folder Password in Moodle Locked	Yonten Jamtsho 17 Mar 2017	Mary Cooch 17 Mar 2017	1
SSL setup issues on Moodle 3.2.3 Locked	Yogesh Nahar 7 Jun 2017	Harsh Patel 15 Dec 2017	4
logs Locked	Yanislav Galyov 17 Feb 2009	Tim Hunt 17 Feb 2009	3
What is the impact of technology on privacy and security? Locked	xy8797 xy8797 27 Dec 2012	xy8797 xy8797 27 Dec 2012	0
ClamAV and Cwatch Locked	Wynand Louw 28 Dec 2018	Wynand Louw 29 Dec 2018	4
Internet Explorer cannot load 'Edit Profile' page #MDL-10296 revisited. Locked	Worth Bishop 14 Jan 2010	Worth Bishop 15 Jan 2010	6
spam Locked	worawat wasanapreecha 21 Nov 2013	Helen Foster 21 Nov 2013	1
Bot registered Locked	worawat wasanapreecha 29 Nov 2013	Helen Foster 16 Dec 2013	2
ClamAV Plugin Config Paths Locked	Wolf Ventir 21 Nov 2018	Wolf Ventir 28 Nov 2018	3
Removal of loginpasswordautocomplete Headaches	Wolf Ventir 26 Feb 2019	Wolf Ventir 26 Feb 2019	0
Course Categories Page Public	Wolf Ventir 14 May 2019	Wolf Ventir 15 May 2019	4
MySQL SSL Connection? Locked	William Voyek 11 Aug 2009	Mohammed Mohammed 7 Feb 2016	4
Changing Password Settings Locked	William Hazell 7 Aug 2012	Derek Chirnside 4 Oct 2012	4
Restrict Access to Categories By User Locked	William Workman 7 Jan 2016	John Provasnik 28 Feb 2017	5
Hide contents of course catgegories Locked	Whitney Lowe 7 Jul 2012	Whitney Lowe 7 Jul 2012	0
Allow (Deny access) in Browse list of users Locked	Wes Sykes 13 Jul 2010	Blair F. 28 Apr 2016	4
Move to secure protocol (https) issues Locked	Wes Matchett 2 Feb 2017	Ken Task 8 Feb 2017	8
Another guest access question Locked	Wendy Tocci 20 Dec 2012	Wendy Tocci 20 Dec 2012	0
2.7.1 hacked Locked	Wendi Daniels 6 Feb 2015	Visvanath Ratnaweera 10 Feb 2015	12
2.7.1 Permissions Locked	Wendi Daniels 8 Feb 2015	Wendi Daniels 9 Feb 2015	1
2.7.1 .htaccess files Locked	Wendi Daniels 9 Feb 2015	Wendi Daniels 9 Feb 2015	0
Falling out of supported releases? Locked	Wen Hao Chuang 22 Nov 2017	Mathew Gancarz 22 Nov 2017	1
New users - disable "required" fields Locked	Warren McCullough 20 Mar 2011	Mary Cooch 20 Mar 2011	1
Authenticating Access to Large Amount of Static Data Locked	Warren Toomey 11 Apr 2014	Warren Toomey 12 Apr 2014	2
How can I configure restrictions to some file extensions uploads Locked	Walter Alrusso 19 Feb 2009	Walter Alrusso 19 Feb 2009	0
Unauthorized person created an account Locked	Walter Byrd 15 Dec 2017	Walter Byrd 17 Dec 2017	4
Questionnaire module Locked	voodoo voodoo 25 Nov 2009	Mary Cooch 25 Nov 2009	3
HTTP Content on SLL access? Locked	Volkan Senguel 29 Jul 2010	Volkan Senguel 29 Jul 2010	0
How to remove the static http from the html code? 1.91 Locked	Volkan Senguel 6 Feb 2011	Volkan Senguel 7 Feb 2011	2
How to prevent multiple login with same ID with moodle 3 Locked	Vivian Bognini 7 Nov 2017	Vivian Bognini 7 Nov 2017	0
If you believe technologies will protect your privacy, think twice! Locked	Visvanath Ratnaweera 10 Feb 2015	Visvanath Ratnaweera 12 Feb 2015	2
Insecure dataroot (yet again) Locked	Visvanath Ratnaweera 14 Nov 2015	Visvanath Ratnaweera 15 Nov 2015	13
Corrections to the Moodle landscape as a result of the Facebook's breaches	Visvanath Ratnaweera 27 Mar 2018	Visvanath Ratnaweera 25 Oct 2019	9
Could a quickly changing client IP upset the log in process? Locked	Visvanath Ratnaweera 22 Aug 2018	Visvanath Ratnaweera 24 Aug 2018	3
The perils of the BIG "helping" school IT Locked	Visvanath Ratnaweera 19 Nov 2018	Visvanath Ratnaweera 20 Nov 2018	1
Self enrolment Locked	Visi Alaminos 9 Sep 2011	Visi Alaminos 9 Sep 2011	3
Vulnerabilities in Moodle code scan	Vinod Kumar Aleti 17 Jul 2019	Eu Wee TAN 22 Nov 2019	17
Weak SSL Cipher Suites are Supported - Version-1.9.5 Locked	Vinod Kumar 27 Apr 2015	Vinod Kumar 10 May 2015	26
Session and Cookie Locked	Vinod Kumar 7 May 2015	Daniel Paulo 4 Aug 2015	1
Missing Secure Attribute in Encrypted Session (SSL) Cookie Locked	Vinod Kumar 13 Apr 2016	Vinod Kumar 13 Apr 2016	2
Moodle guest autologin redirect to login page Locked	Vincent Dewez 6 Oct 2014	Helen Foster 7 Oct 2014	1
Cross-Site Request Forgery (CSRF) in Moodle default pages - help Locked	Vincent Gullotta 21 Feb 2015	James McLean 25 Feb 2015	15
Administrator Logging??? Locked	Vincent Gullotta 2 Oct 2015	Chris Wharton 5 Oct 2015	3
User deletion request for plugins - forum posts	Vincent VEBER 17 May 2019	Vincent VEBER 17 May 2019	0
Moodle don't display youtube embedded videos Locked	Vinay Khandalkar 5 Jun 2013	Mark Donnelly 14 Jun 2013	1
Setting up Moodle using Windows Server 2008R2 Locked	Viki Markwell 15 Feb 2013	Viki Markwell 18 Feb 2013	2
How to avoid accessing courses list as guest? Locked	Victoria Sanz 6 Apr 2010	Darko Miletić 19 May 2010	5
OSSEC blocks ajax call Locked	Venizia Venizia 2 Feb 2019	Venizia Venizia 2 Feb 2019	0
Allowing students anonymous access to others work Locked	Velson Horie 1 Apr 2015	Velson Horie 1 Apr 2015	0
Keep track of changes Locked	Vasilis F. 4 Jun 2010	Vasilis F. 4 Jun 2010	2
Multiple password for Quiz Locked	vancool black 7 Jun 2015	Rick Jerz 7 Jun 2015	1
Privacy of Participant Details across Teachers Locked	Val Evans 16 Jun 2009	Val Evans 16 Jun 2009	1
does administrators see who "anonymous" are? Locked	val val 3 Jan 2013	val val 3 Jan 2013	0
"coursecontact" only after login? Locked	Uwe Klemm 20 Mar 2011	Uwe Klemm 20 Mar 2011	0
Why Does Moodle Have a Plugin Installer If It Is Considered Unsafe? Locked	Uwe Stange 9 Oct 2017	Uwe Stange 9 Oct 2017	0
Manager role with system role - only view site page forum, search for users too Locked	Usman Arshad 27 Apr 2017	Usman Arshad 27 Apr 2017	2
our doamin says Reported Attack Page??? Locked	umesh chavan 3 Jan 2011	Clive Gould 3 Jan 2011	1
Could not find or create directory Locked	umesh chavan 12 Feb 2011	umesh chavan 12 Feb 2011	0
Course Creator change password access Locked	uk nites 23 Feb 2011	Darko Miletić 24 Feb 2011	1
quiz records error? Locked	Tzafi Z 30 Apr 2015	Richard Oelmann 30 Apr 2015	1
License Key Locked	Tyler Musser 19 Oct 2013	Tyler Musser 19 Oct 2013	0
Moodle not displaying errors Locked	Tyler Whiteley 15 Jan 2016	Richard Oelmann 24 Jan 2016	3
LDAP Authantication	Tumediso Sebonego 8 Apr 2019	Leon Stringer 15 Apr 2019	3
Anyway to keep on using moodle-1.5.3 just for forum viewing purpose only Locked	Trizit Benjaboonyazit 28 Mar 2010	Frank Ralf 1 Apr 2010	5
Moodle and Google SSO Problem Locked	Trevor Fidler 21 Aug 2009	Trevor Fidler 21 Aug 2009	0
Notification Messages Locked	Trevor Clay 5 Oct 2011	Jack Watson 3 Dec 2011	5
IP Filter for a resource or an activity Locked	Trevor Li 28 Mar 2014	Marina Glancy 16 Jun 2014	2
Moodle SSO using LDAP Locked	Trayton Mitchell 5 Feb 2016	Visvanath Ratnaweera 6 Feb 2016	5
Teacher's Intranet Locked	Travis Wilhelm 20 Aug 2009	Jon Witts 25 Aug 2009	6
Configuring Moodle for HTTPS and Adding users manually Locked	Tracy Castleberry 3 Feb 2011	John Bonner 26 Apr 2011	4
Manager role not function as expected Locked	Trace James 24 Sep 2015	Trace James 29 Sep 2015	14
Login errors form unknown users every 5-7 minutes? Locked	Tony Chilvers 12 Sep 2014	Tony Chilvers 12 Sep 2014	0
log in screen Locked	Toni Phillips 27 Sep 2013	Emma Richardson 27 Sep 2013	1
User Policy and agrement Locked	Tone Engebretsen 6 Jan 2019	Ralf Hilgenstock 14 Jan 2019	1
Lesson password Locked	Tomislav Gaborovic 14 Jun 2012	Tomislav Gaborovic 14 Jun 2012	0
Auditing passwords Locked	Tomasz Muras 12 Jan 2015	Tomasz Muras 12 Jan 2015	0
Plugins DB and external services (GDPR related) Locked	Tomasz Muras 29 Mar 2018	Andrew Nicols 30 Mar 2018	1
Data registry and data deletion Locked	Tomasz Czernak 9 Oct 2018	Andrew Nicols 10 Oct 2018	1
Dumb question about changing passwords Locked	Tom Connolly 14 Apr 2010	Chris Collman 14 Apr 2010	4
Preventing certain roles from seeing resources Locked	Tom S 31 Aug 2010	Colin Fraser 20 Sep 2010	1
SSL Subdomain and Moodle Redirection Locked	Tom Reid 5 Nov 2010	John Bonner 18 Mar 2011	4
Anonymous Evaluations Compromised Locked	Tom Brown 12 Mar 2013	Tom Brown 13 Mar 2013	3
Need help on student's assignment become searchable on google scholars Locked	tom tom 27 Dec 2013	tom tom 27 Dec 2013	0

1 (current)
2
3
4
5
6
7
8
9
10
…
15
Next