Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Anyway to keep on using moodle-1.5.3 just for forum viewing purpose only Locked	Trizit Benjaboonyazit 28 Mar 2010	Frank Ralf 1 Apr 2010	5
	IP Filter for a resource or an activity Locked	Trevor Li 28 Mar 2014	Marina Glancy 16 June 2014	2
	Notification Messages Locked	Trevor Clay 5 Oct 2011	Jack Watson 3 Dec 2011	5
	Moodle and Google SSO Problem Locked	Trevor Fidler 21 Aug 2009	Trevor Fidler 21 Aug 2009	0
	Moodle SSO using LDAP Locked	Trayton Mitchell 5 Feb 2016	Visvanath Ratnaweera 6 Feb 2016	5
	Teacher's Intranet Locked	Travis Wilhelm 20 Aug 2009	Jon Witts 25 Aug 2009	6
	certain paths available in url without logging in Locked	Training Portal 31 Jan 2020	Ken Task 31 Jan 2020	1
	Safety of Data from Hackers Locked	Tradebloc Tim Clark 23 Dec 2021	Michael Hawkins 7 Jan 2022	2
	Configuring Moodle for HTTPS and Adding users manually Locked	Tracy Castleberry 3 Feb 2011	John Bonner 26 Apr 2011	4
	Manager role not function as expected Locked	Trace James 24 Sept 2015	Trace James 29 Sept 2015	14
	Login errors form unknown users every 5-7 minutes? Locked	Tony Chilvers 12 Sept 2014	Tony Chilvers 12 Sept 2014	0
	log in screen Locked	Toni Phillips 27 Sept 2013	Emma Richardson 27 Sept 2013	1
	User Policy and agrement Locked	Tone Engebretsen 6 Jan 2019	Ralf Hilgenstock 14 Jan 2019	1
	Lesson password Locked	Tomislav Gaborovic 14 June 2012	Tomislav Gaborovic 14 June 2012	0
	Data registry and data deletion Locked	Tomasz Czernak 9 Oct 2018	Andrew Lyons 10 Oct 2018	1
	Plugins DB and external services (GDPR related) Locked	Tomasz Muras 29 Mar 2018	Andrew Lyons 30 Mar 2018	1
	Auditing passwords Locked	Tomasz Muras 12 Jan 2015	Tomasz Muras 12 Jan 2015	0
	help, bulk user deletion does not work Locked	Tom E 14 Feb 2022	Tom E 14 Feb 2022	0
	Viewing other students' grades - possible security issue Locked	Tom Smith 4 Oct 2021	Randy Thornton 6 Oct 2021	3
	Cannot delete users (bulk) Locked	Tom E 29 July 2021	Tom E 29 July 2021	0
	Dialogue box when forced to change the password Locked	Tom Connolly 21 Apr 2020	Emma Richardson 22 Apr 2020	3
	My students don't have email!!!! Locked	Tom Connolly 14 Mar 2020	Visvanath Ratnaweera 17 Mar 2020	2
	File permissions on webroot vs installing plugins Locked	Tom Smith 6 Feb 2018	Ken Task 6 Feb 2018	1
	Captcha alternatives? Locked	Tom Litchfield 24 Feb 2016	Visti Larsen 4 Aug 2016	7
	Moodle created passwords made easier Locked	Tom Wootton 17 Jan 2015	Tom Wootton 18 Jan 2015	2
	Admin Notification for self registration users with their details Locked	Tom Farrow 12 Sept 2014	Tom Farrow 12 Sept 2014	0
	Hide All Email Addresses From Everyone Locked	Tom Wootton 29 May 2014	Guillermo Madero 29 May 2014	3
	Need help on student's assignment become searchable on google scholars Locked	tom tom 27 Dec 2013	tom tom 27 Dec 2013	0
	Anonymous Evaluations Compromised Locked	Tom Brown 12 Mar 2013	Tom Brown 13 Mar 2013	3
	SSL Subdomain and Moodle Redirection Locked	Tom Reid 5 Nov 2010	John Bonner 18 Mar 2011	4
	Preventing certain roles from seeing resources Locked	Tom S 31 Aug 2010	Colin Fraser 20 Sept 2010	1
	Dumb question about changing passwords Locked	Tom Connolly 14 Apr 2010	Chris Collman 14 Apr 2010	4
	Backup of user data Locked	Tobias Hänel 15 Aug 2018	Mary Cooch 17 Aug 2018	3
	Moodle -Admin Password reset Locked	Tobias Foppen 10 Aug 2011	Marcus Green 10 Aug 2011	1
	Restrict usernames to be only numeric characters Locked	Tinashe Nyambudu 23 Mar 2015	Tinashe Nyambudu 24 Mar 2015	2
	Moodle security Locked	Tina Jones 29 Apr 2009	Frances Bell 1 May 2009	1
	ycfkurl reported Locked	Timothy Bolton Milhas 27 July 2017	Tristin Mock 31 Jan 2018	2
	Question about sanitizing inputs in Moodle Locked	Timothy Kaemmerer 25 June 2011	Timothy Kaemmerer 25 June 2011	2
	Hacking and security - what is the ultimate htaccess? Locked	Timothy Takemoto 8 Feb 2009	Bartosz Cisek 24 Mar 2009	16
	Password policy error message displays in English Locked	Tim Bahula 18 July 2022	Tim Bahula 18 July 2022	0
	DSAR's and Redaction Locked	Tim Gildersleeve 18 May 2018	Tim Gildersleeve 21 May 2018	2
	data privacy plugin 3.3.5 hanging in cron Locked	Tim Gildersleeve 9 May 2018	John Packiaraj 21 Nov 2018	11
	Windows PowerShell of AD Users to JSON Endpoint Fails to Upload Data Locked	Tim West 17 Oct 2016	Tim West 17 Oct 2016	0
	accessing moodle from another site without logging in again Locked	tim lambert 15 Sept 2015	Jon Bolton 16 Oct 2015	1
	What is a security issue? Locked	Tim Hunt 18 Feb 2014	Michael de Raadt 19 Feb 2014	1
	SSL Certificate for Moodle Locked	Tim Childe 24 Jan 2014	Howard Miller 3 Feb 2014	5
	How to login to Moodle using SSO of WindowsACS Locked	Tim van Steenbergen 23 Sept 2013	Dave Perry 23 Sept 2013	1
	SAML via simplesamlphp via windowsAzures ACS to idprovider Locked	Tim van Steenbergen 18 Sept 2013	Tim van Steenbergen 19 Sept 2013	1
	Gone wrong with vhost-definition when installing simpleSAMLphp Locked	Tim van Steenbergen 13 Sept 2013	Tim van Steenbergen 17 Sept 2013	4
	LDAP allowing students teacher access with any password Locked	Tim Rolands 18 Nov 2009	Ger Tielemans 18 Nov 2009	2
	Format of the security coding guidelines Locked	Tim Hunt 6 Nov 2009	Martin Dougiamas 9 Nov 2009	2
	How to add/allow "unsecure" code examples as text in Moodle pages Locked	Til Edward 11 Oct 2016	Til Edward 15 Oct 2016	9
	More info about security updates Locked	Tiffany Morgan 23 Dec 2014	Tiffany Morgan 29 Dec 2014	2
	Identity Verification Locked	Thomas Beard 7 Feb 2020	Dan Marsden 18 Feb 2020	4
	Plugins security and privacy Locked	Thomas Barna 31 Mar 2017	Jon Bolton 31 Mar 2017	2
	Security Fixes / Weekly Builds Locked	Thomas College 27 Oct 2014	Thomas College 28 Oct 2014	4
	guest access without password Locked	thomas tomporowski 3 Jan 2013	thomas tomporowski 3 Jan 2013	0
	Minimal update against MDL-17799? Locked	Thomas Robb 18 Feb 2009	Tim Hunt 19 Feb 2009	4
	Block moodle for unenrolled users Locked	Theo Radiere 23 Nov 2020	Theo Radiere 24 Nov 2020	2
	Rendering random page after \lib\requirejs.php\8708709\	Test Account 28 Mar 2024	Mary Cooch 2 Apr 2024	16
	Force users to change their password	Terry David 1 Aug 2023	Helen Foster 1 Aug 2023	3
	How easy is it to hack a Moodle site? Locked	Teresa Fryer 13 Nov 2019	Tim Hunt 5 Dec 2019	8
	Background info to / clarification on CVE-2017-7298? Locked	Temp Account 16 May 2018	Temp Account 16 May 2018	0
	Database encryption Locked	Ted Long 18 Mar 2018	Mathew Gancarz 21 Mar 2018	1
	How do I prevent some users from enrolling themselves in some courses? Locked	Ted Osborne 4 June 2014	John Gifford 5 June 2014	6
	Disallow Student Uploads Locked	Ted Canji 6 Oct 2010	Ted Canji 6 Oct 2010	0
	Password Issue with moodle 3.4.6 Locked	Tech Academy 13 Apr 2019	Tech Academy 13 Apr 2019	0
	Show/Hide Password on Login Screen Locked	Tay Moss 4 Nov 2022	Tim Hunt 9 Nov 2022	1
	unwanted links Locked	tatiana ramiro 26 Aug 2013	Richard Oelmann 27 Aug 2013	2
	unknown apaches's log entries Locked	tatiana ramiro 27 July 2012	tatiana ramiro 30 July 2012	3
	Login Problem Locked	Tania Hackett 21 Mar 2011	Tania Hackett 21 Mar 2011	0
	Enforcing password rules with manual account creation Locked	Tammy Ellis 19 June 2009	Rachel Cooper 10 Nov 2009	3
	Define roles by IP address Locked	Tamar Alania 14 Sept 2018	Tamar Alania 14 Sept 2018	0
	Linked Instances accross networks Locked	Taffy Brecknock 10 July 2013	Taffy Brecknock 10 July 2013	0
	IP blocker error when access via html script Locked	T K 17 Dec 2018	T K 17 Dec 2018	0
	Change Student Login Email	Symon Looc 2 Jan 2024	Helen Foster 2 Jan 2024	1
	Code review scan via fortify Locked	Syed HameedUllah 5 Oct 2021	Michael Hawkins 21 Oct 2021	3
	Manual Login Locked	Syed Ali 24 Apr 2019	Ken Task 24 Apr 2019	5
	SSL implementation on Moodle Locked	Syed Ali 20 Feb 2018	Syed Ali 22 Feb 2018	7
	How to make sure Accounts get not shared? Max 3 IPs for 1 user Locked	Sven Faltin 24 Oct 2016	James McLean 26 Oct 2016	1
	Video protection in Moodle	Suvathi Raja 12 Sept 2023	Rick Jerz 12 Sept 2023	1
	Input data field validation Locked	Sushma R 27 Dec 2022	Tim Hunt 13 Jan 2023	1
	Google is indexing content when Opentogoogle is disabled Locked	Susana L. 20 Nov 2019	John Provasnik 27 Nov 2019	1
	How can I disable Notifications page when login as admin? Locked	susan cheng 3 Oct 2012	susan cheng 3 Oct 2012	0
	LDAP Error Locked	suresh Sundaram 22 Feb 2011	Jason Adams 22 Feb 2011	1
	Application was allowing internal Directories enumeration Locked	Sunny Adhatrao 14 Oct 2021	Sergio Rabellino 14 Oct 2021	3
	Input in URL reflected in response Locked	Sunny Adhatrao 28 June 2021	Sunny Adhatrao 28 June 2021	0
	Logs not displaying user name and information Locked	Sunitha Appikatla 28 Apr 2011	Guillermo Madero 10 June 2011	1
	Using flash files related Locked	suneeta panda 11 Jan 2012	Matt Bury 13 Jan 2012	5
	Files and uploads Locked	Sultan Mehmood 30 June 2020	Michael Hawkins 1 July 2020	1
	Multiple login Locked	Suleiman Umar 13 May 2015	Suleiman Umar 18 May 2015	6
	($SESSION->session_test) value becomes null Locked	sujeet kumar 21 Mar 2011	sujeet kumar 21 Mar 2011	0
	moodlesession variable got rejected	Sujata Kumari 15 June 2023	Ken Task 16 June 2023	1
	Admin Access Level Issue Locked	Suhail Baloch 15 Dec 2009	Jon Witts 16 Dec 2009	1
	What type of user has rights to manage enrollment with csv Locked	Sue Holtz 24 May 2011	Dennis Skelton 11 Nov 2011	4
	Security of users - removing First and Last name registration requirements Locked	Sue M. 18 July 2010	Marcus Green 21 Aug 2012	7
	Give acces to all courses to the head of the school Locked	Sub Subran 21 Jan 2012	Sub Subran 21 Jan 2012	2
	Password policy and authentication plugins	Stuart Anderson 6 Oct 2023	Stuart Anderson 9 Oct 2023	3
	Security issue help beofre login Locked	Stuart Milligan 7 July 2010	Stuart Milligan 7 July 2010	0
	where to locate moodledata folder Locked	Stuart Whiting 16 Dec 2009	Jon Witts 17 Dec 2009	1