Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Can't change a password for the student Locked	Jesse Techno 3 Feb 2017	Jesse Techno 3 Feb 2017	2
	Advice please! Is Moodle safe? Locked	jesse magees 30 Apr 2015	Visvanath Ratnaweera 7 Jan 2016	16
	Hide student email address from teachers? Locked	Jesse Bye 17 Nov 2010	Piotr Kowalski 10 Feb 2011	1
	Securing the platform and databases best approach? Locked	Jerry Lau 23 Sept 2018	Jerry Lau 2 Oct 2018	7
	Httpoxy vulnerabilities in php addressed? Locked	Jerry Lau 28 July 2016	Ken Task 29 July 2016	1
	Account on moodle.org got spam email Locked	Jerry Lau 22 July 2011	Helen Foster 22 July 2011	2
	Site admin Locked	Jerin das 13 Aug 2013	Emma Richardson 13 Aug 2013	1
	data deletion for user context does not work	Jeremy Schulz 22 Feb 2024	Jeremy Schulz 27 Feb 2024	1
	Autodelete expired Users Locked	Jeremy Schulz 17 Feb 2022	Jeremy Schulz 17 Feb 2022	0
	Automating GDPR Data Request approval Locked	Jeremy Virgo 30 Oct 2019	Michael Hawkins 30 Oct 2019	1
	Password reset options Locked	Jeremy Schweitzer 4 Dec 2009	Jeremy Schweitzer 4 Dec 2009	0
	Restricting Users without Enrolment Key Locked	Jerald Fernando 22 June 2011	Jerald Fernando 22 June 2011	0
	password requirement too complex Locked	jenny clarke 10 Apr 2014	Guillermo Madero 11 Apr 2014	2
	CVE-2021-44228 / log4j 0-day vulnerability Locked	Jennifer Volk 13 Dec 2021	Tim Hunt 14 Dec 2021	7
	Change password policy Locked	Jennifer Lam 7 Apr 2021	Randy Thornton 10 Apr 2021	4
	Changing Content on Alternate login URL Locked	Jennifer Belisle 24 Sept 2018	Jennifer Belisle 24 Sept 2018	0
	monitoring course changes Locked	Jennifer Meyer 15 May 2018	Jennifer Meyer 15 May 2018	0
	monitoring course changes Locked	Jennifer Meyer 15 May 2018	Jennifer Meyer 15 May 2018	3
	Hiding Student Names from Graders Locked	Jennifer Holder 25 Apr 2018	John Provasnik 27 Apr 2018	1
	reCAPTCHA page and security Locked	Jennie Lawrence 20 Oct 2008	ETH Zürich 23 Oct 2008	3
	Security for docs and videos in moodle Locked	Jenn MapMaven 29 Aug 2018	Jenn MapMaven 29 Aug 2018	0
	Multiple AD fields at login with LDAP Locked	Jeffrey Jones 6 Feb 2011	David Tredinnick 11 Feb 2011	3
	Hacked site Locked	Jeffrey Kimoto 21 Oct 2010	Helen Foster 21 Oct 2010	1
	Gnu Anubis - Any knowledge of this SMTP message submission daemon for GPG? Locked	Jeff Lewis 27 Oct 2022	Jeff Lewis 27 Oct 2022	0
	Securing activity "files"? Locked	Jeff M 12 July 2019	Jeff M 14 July 2019	4
	Limit Course Access by Special LDAP Attribute Locked	Jeff Jones 31 Mar 2018	Jeff Jones 31 Mar 2018	0
	Have I been hacked? Locked	Jeff Richards 29 May 2012	Jeff Richards 29 May 2012	0
	Reports > security overview question Locked	Jeff Wood 19 July 2011	Jeff Wood 19 July 2011	0
	LDAP and security Locked	Jedidiah Rex 28 July 2012	Visvanath Ratnaweera 9 Aug 2012	2
	Plugin support for privacy API (split from EU General Data Protection Regulation (GDPR) compliance) Locked	Jean-Michel Védrine 20 May 2018	Jean-Michel Védrine 20 May 2018	3
	Password protection Locked	jd hamrick 1 Oct 2011	Adi Tedjasaputra 3 Oct 2011	4
	my moodle redirect to https and trailing slash Locked	JC Dodo 26 Aug 2013	Brian walker 18 Dec 2013	3
	Require Moodle Security Audit Certificate	Jbs Shadap 23 Mar 2024	Mary Cooch 2 Apr 2024	22
	Clear text password in config.php - Can it be encrypted in 3.11 Locked	Jayamurugan Ravichandran 12 Dec 2021	Paul Holden 11 Feb 2022	9
	How do I fix this? Locked	Jay McLellan 17 Feb 2012	Marcus Green 19 Feb 2012	3
	Downloaded files identified as dangerous Locked	Javier Tejera 10 Aug 2022	Ken Task 14 Aug 2022	12
	Security Check Error: \..* files should not be public	Jason Press 1 May 2023	salma khan 23 June 2023	2
	XML-RPC: "Should be installed/enabled" Warning Locked	Jason Press 11 Sept 2022	Jason Press 23 Nov 2022	11
	solution to Change password in moodle when authenticated via LDAP Locked	jason liu 13 June 2022	jason liu 13 June 2022	0
	Switching to SSL broke Moodle (request for advice/help) Locked	Jason Hollowell 17 July 2021	Jason Hollowell 17 July 2021	7
	Creating a non-gradeable student role - Audit. Locked	Jason Carson 27 June 2014	Jason Carson 27 June 2014	0
	How to block printing of my html pages Locked	jason steer 9 Jan 2013	jason steer 9 Jan 2013	0
	Calendar in v2.1.0 Locked	Deleted user 12 Aug 2011	Dan Marsden 12 Aug 2011	1
	LDAP - 404 Locked	Jason Adams 22 Feb 2011	Jason Adams 22 Feb 2011	1
	Giving a Select 'Site Config' options to Roles Locked	Deleted user 16 Nov 2010	Deleted user 16 Nov 2010	0
	Hacked? (AddFreeStats link embedded on my front page) Locked	Jason Hollowell 13 June 2010	Howard Miller 18 June 2010	11
	Passing credentials to Moodle Locked	Jason Brandt 20 May 2010	Jason Brandt 20 May 2010	0
	Restrict user access to courses Locked	Jason Yeung 22 Mar 2010	Chris Collman 23 Mar 2010	3
	Report Access Locked	Jason Brandt 28 July 2009	Jason Brandt 28 July 2009	0
	Google document converter and privacy/GDPR Locked	Jari Vilkman 11 Sept 2020	Jari Vilkman 11 Sept 2020	0
	config.php and .js files are hacked Locked	Jarek . 27 May 2010	Jarek . 28 May 2010	5
	moodledata in cgi-bin unsave? Locked	Janno Bend 23 Jan 2013	Ray Morris 29 Jan 2013	1
	Login as a Guest not working Locked	Janice Calcei 6 Feb 2009	Janice Calcei 9 Feb 2009	3
	XSS Trusted Users list longer than it should be given our settings Locked	Deleted user 11 Aug 2018	Deleted user 19 Oct 2018	3
	Basic user role setup Locked	Jan Malte Gerth 11 Apr 2010	Jan Malte Gerth 11 Apr 2010	0
	When logging in, I'm getting a "logout/cancel" popup every time Locked	Jan Waginski 4 Oct 2018	Jan Waginski 8 Oct 2018	3
	Why is it possible to allow actions for sub-roles, even if one didn't has the permission himself? Locked	Jan Eberhardt 20 Dec 2013	Tim Hunt 20 Dec 2013	1
	Problems with sessions (1.9.9 -> 1.9.12+) Locked	Jan Bartsch 15 July 2011	Jan Bartsch 15 July 2011	0
	Cannot Login to Moodle Website Locked	Jan Combrink 27 May 2009	Ruwan Wickramarachchi 17 Oct 2010	10
	Enable "Require the Use of Safe Exam Browser" on SCORM package Locked	Jamison Hyman 16 July 2013	Jamison Hyman 30 July 2013	10
	Limit number of IP Addresses per User Locked	Jamie Zelenak-Hyre 27 Feb 2020	Jamie Zelenak-Hyre 3 Mar 2020	2
	Why do passwords have to be so difficult??? Locked	Jamie Smith 1 July 2010	Glenys Hanson 19 Aug 2010	16
	Alert User if Locked Caps Locked	Jamie Tinley 12 Aug 2009	Steve Bilton 2 Aug 2012	9
	User able to change course completion option and activity module Locked	James Peter 17 May 2021	Michael Hawkins 1 June 2021	3
	Moodle cron jobs detect as suspicious activity Locked	James Peter 23 Dec 2020	Ken Task 18 May 2021	5
	Invalid sesskey Problem Locked	James Quinones 9 Sept 2020	Kate James 20 Apr 2021	1
	https & sensitive info Locked	James Brown 27 Apr 2018	Visvanath Ratnaweera 2 May 2018	5
	GDPR Policies Plugin - Any facility for Optional? Locked	James Clarke 26 Apr 2018	Randy Thornton 2 May 2018	4
	Discussing sensitive content in moodle Locked	James Brown 11 Sept 2017	Mathew Gancarz 11 Sept 2017	1
	Cloudflare Locked	James Easton 27 Jan 2015	Visvanath Ratnaweera 10 Feb 2015	6
	Site Policy Acceptance Log Locked	James England 25 Sept 2014	James England 28 Sept 2014	2
	Disabling right-click Locked	James Brown 19 May 2014	Guilherme Garutti 22 Dec 2014	5
	User Profiles Lockdown Locked	James Cracknell 17 July 2012	James Cracknell 17 July 2012	0
	Missing Files unexpected T_CASE Locked	James O'Connor 11 Jan 2012	James O'Connor 11 Jan 2012	0
	Server Notification Security Message & Multiple URL logins Locked	James McDermott 30 May 2011	Louise Kearins 7 Aug 2012	6
	Country field on Self Register Locked	james ashton 29 July 2010	Iñaki Arenaza 20 Nov 2010	4
	Moodle 1.8 SMF 1.1.11 integration Locked	James Jackson 26 Jan 2010	stog muller 12 Jan 2011	3
	"Open to Google" question Locked	James Phillips 6 June 2008	James Phillips 6 June 2008	0
	Government authentication requirement question Locked	Jake Atencio 24 Nov 2009	John Sanga 9 June 2010	2
	Warning: Executable paths can be set in the Admin GUI. Locked	Jaifar Al Shizawi 11 Sept 2017	Jaifar Al Shizawi 12 Sept 2017	4
	setup https via F5 Locked	Jaifar Al Shizawi 13 June 2016	Bret Miller 13 June 2016	2
	Policy type Locked	Jacques Barzic 14 June 2018	Sara Arjona Téllez 15 June 2018	1
	Students can see other students enrolled in a course Locked	Jacques Technologies 8 Dec 2017	Mohamed Gad 10 Sept 2018	1
	Is password policy change "retroactive"? Locked	Jacques LeCavalier 27 July 2017	Emma Richardson 28 July 2017	3
	Sharing Authentication With External Site Locked	Jack O'Neill 20 Mar 2014	Jack O'Neill 20 Mar 2014	0
	Failed to login to my moodle Locked	jabera matogoro 30 Sept 2009	Howard Miller 30 Sept 2009	1
	Active Directory - Using subdomains Locked	J. Dalton Humpf 12 Jan 2021	J. Dalton Humpf 12 Jan 2021	0
	HTTP to HTTPS but on Windows environment Locked	J Guzman 22 Nov 2017	J Guzman 22 Nov 2017	0
	Account lockout Locked	J Arn 14 May 2013	Helen Foster 15 May 2013	1
	dbuser hash for password in config.php? Locked	J C 19 Sept 2011	Wissam Nahas 31 Aug 2016	4
	LDAP Locked	J R 13 Jan 2011	J R 13 Jan 2011	0
	Randomize Passwords Locked	J S 10 Feb 2009	Tim Hunt 10 Feb 2009	1
	Is Moodle OWASP compliant? Locked	Ivica Matotek 9 Apr 2019	Dan Marsden 11 Apr 2019	1
	LDAP Problems Locked	Ivaylo Radev 19 Oct 2012	Ivaylo Radev 19 Oct 2012	0
	Change date of sended file to system by activity assignment Locked	Ivan Kreškóczi 1 Sept 2013	Ivan Kreškóczi 1 Sept 2013	0
	contraseña Admin Locked	ivan artaza 9 Apr 2012	Guillermo Madero 10 Apr 2012	2
	config.php-cron Locked	ivan breziansky 11 Aug 2009	ivan breziansky 13 Aug 2009	2
	user access Locked	ivan breziansky 4 Aug 2009	ivan breziansky 7 Aug 2009	13
	account setup Locked	ivan breziansky 3 Aug 2009	ivan breziansky 3 Aug 2009	8
	all the site notes are visible for the teacher Locked	Isaac Marco Blancas 2 Oct 2015	Jon Bolton 16 Oct 2015	1