Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	GuardianKey - A new plugin of Security Locked	Gesiel Bernardes 17 Dec 2018	Gesiel Bernardes 17 Dec 2018	0
	robo accounts HELP Locked	Gerry Jenkins 5 Mar 2013	Gerry Jenkins 6 Mar 2013	2
	Privacy in an LTI tool provider Locked	George Schaathun 12 July 2019	George Schaathun 13 Jan 2020	2
	Bug bounty by Detectify Locked	George Mihailov 24 Apr 2018	Marina Glancy 24 Apr 2018	1
	Moodle Security - Set up basics - Help Locked	George Bradford 30 Mar 2009	George Bradford 30 Mar 2009	2
	Policy.php change script Locked	Geoff Goode 8 Feb 2010	Geoff Goode 8 Feb 2010	0
	Scroll Bars Missing in Browser Security Window Locked	Gentle Mark 17 Jan 2012	Gentle Mark 17 Jan 2012	2
	SMTPAPI header error Locked	Gayan Yasantha 21 Mar 2022	Gayan Yasantha 21 Mar 2022	0
	moodledata folder location Locked	Gavin McKay 11 June 2012	Doug Moody 12 June 2012	11
	HTTP Authentication Locked	Gary Harris 16 Dec 2009	Ken Task 17 Dec 2009	2
	mymoodle.com/config.php Locked	Garth Brady 29 Aug 2022	Ken Task 30 Aug 2022	1
	644 unacceptable for .xml files (and others) on litespeed? Locked	Garth Brady 15 July 2021	Pedro Camacho 5 Sept 2021	1
	Moodle & Content Site Policy (CSP) - XSS Locked	Garth Brady 18 Feb 2021	Garth Brady 18 Feb 2021	0
	Moodle with htaccess Locked	Garry Hill 24 Apr 2010	Garry Hill 24 Apr 2010	0
	Building in SHA-256 hashing for javascript Locked	Garrett Boone 22 Oct 2018	Dan Marsden 25 Oct 2018	15
	Password salting by default? Locked	Garret Gengler 31 Mar 2009	Garret Gengler 7 Apr 2009	7
	Windows Server 2003 & WAMP Production Level Security Locked	Gareth J Barnard 29 Oct 2008	Gareth J Barnard 29 Oct 2008	0
	Ubuntu SSL Login Locked	Gareth Harle 18 June 2009	Gareth Harle 18 June 2009	0
	Question about Data deletion report in data privacy Locked	Gaius Augustus 19 May 2021	Gaius Augustus 19 May 2021	0
	ISO 27001: Input data validation and Control of internal processing Locked	Gael Lams 26 May 2014	Tim Hunt 6 June 2014	6
	GDPR and cookie policy Locked	Gabri Z 12 May 2021	Gabri Z 13 May 2021	2
	"Guest user has logged in" ? Locked	g k 7 July 2016	Ken Task 9 Jan 2017	2
	display php errors Locked	g k 20 July 2011	g k 22 July 2011	2
	Disabling right-click Locked	g k 29 June 2010	Dusan Ristic 13 Apr 2011	4
	SAML2 METADATA RequestedAttribute Locked	Fx Boulanger 12 May 2022	Visvanath Ratnaweera 12 May 2022	1
	How to restrict users who are not using office's computer? Locked	Fung Tony 10 Feb 2017	Jon Bolton 23 Feb 2017	3
	Security Issue of Moodle Locked	Freddy Mok 24 Nov 2009	Marcus Green 26 Nov 2009	4
	Some students unable to login. Error "...with ID2." Locked	Fred Frazelle 15 Jan 2015	Fred Frazelle 15 Jan 2015	2
	reCaptcha Preventing User Registration Locked	Fred Roller 24 Apr 2014	Jez H 29 Apr 2014	6
	Sending secure mail using phpmailer Locked	Frans Zwijnenberg 21 Dec 2020	Frans Zwijnenberg 23 Dec 2020	5
	Recommendations for the permissions on the server Locked	Franky Vallori 16 July 2018	Visvanath Ratnaweera 17 July 2018	1
	Bugs: Code Injection in Moodle? Locked	Franky Vallori 10 July 2018	Tim Hunt 10 July 2018	1
	Facebook contacted me. I have 48hours to comply. What do I do? Locked	Frankie Kam 16 May 2011	Frankie Kam 20 May 2011	11
	Some joker posted this in my shoutbox on my homepage. What's he trying to do??? Locked	Frankie Kam 10 May 2011	Frankie Kam 10 May 2011	2
	Someone tried to plant a backdoor trojan in my Moodle site Locked	Frankie Kam 12 Mar 2011	Frankie Kam 12 Mar 2011	0
	Using Windows Media Player to play offline videos: Security RISK? Locked	Frankie Kam 5 Mar 2011	Frankie Kam 15 Mar 2011	8
	Access to SharePoint files via Moodle Mobile? Locked	Frank Burger 21 Mar 2020	Jorge Farfan 14 Apr 2020	1
	Guest access to courses Locked	Frank Burger 6 Feb 2020	Frank Burger 8 Feb 2020	6
	Login authentication Locked	Frank Vanden Bosch 11 Oct 2012	Frank Vanden Bosch 11 Oct 2012	0
	Spam infected Moodle sites Locked	Frank Ralf 13 May 2009	Frank Ralf 6 Oct 2009	14
	Security issue with email change Locked	François Lizotte 19 Oct 2019	François Lizotte 24 Oct 2019	2
	Getting weird anonymous account created in one of our Moodle sites Locked	François Lizotte 12 June 2013	Silvia Camacho 13 May 2015	3
	sshd Not Running \| Moodle v2.4 Locked	Francois Evans 9 Feb 2013	Visvanath Ratnaweera 12 Feb 2013	1
	HP's fortify on demand security review: "Session Token Passed in Query String" Locked	Franco Pomidoro 1 Sept 2014	Franco Pomidoro 2 Sept 2014	4
	Hide password config.php / Ocultación de contraseña config.php Locked	Francisco Bellas Aláez 29 July 2010	Francisco Bellas Aláez 30 July 2010	4
	HTTPS Conversion Tool Problematic Domains Locked	Francis Lorenzo Guingao Doydora 25 Jan 2021	Francis Lorenzo Guingao Doydora 25 Jan 2021	0
	How to fix "Some internal paths are publicly accessible" in Security Report	Francis Greaves 29 Mar 2024	Francis Greaves 29 Mar 2024	0
	Confidentiality policy for forum / posts sent Locked	Francis Vendrell 4 Apr 2019	Francis Vendrell 4 Apr 2019	0
	DIfferent users see different courses in Moodle 2 Locked	Francis Vila 26 Jan 2011	Francis Vila 26 Jan 2011	0
	Restricting access to administration Locked	Fouzi Sukhilala 28 July 2011	Fouzi Sukhilala 28 July 2011	0
	Moodle plugin security checklist	Flotter Totte 2 July 2023	Flotter Totte 2 July 2023	0
	.../local/ folder visible - security risk?	Flotter Totte 25 June 2023	Brett Dalton 30 June 2023	6
	Data export and GDPR comliance Locked	Flotter Totte 25 Mar 2019	Flotter Totte 26 Mar 2019	3
	Activity completion and GDPR compliance Locked	Flotter Totte 25 Mar 2019	Flotter Totte 25 Mar 2019	2
	"locking" Moodle Update page	Florian Tolk 24 Oct 2023	Florian Tolk 24 Oct 2023	2
	Handling 40x errors Locked	Florian Leupold 17 Feb 2022	Florian Leupold 17 Feb 2022	0
	Enrolment key - person assigned to provide information Locked	Fiona Watts 29 Mar 2011	Fiona Watts 29 Mar 2011	0
	Selecting Component Model Security for Moodle Locked	Fin Lee 6 Oct 2011	Fin Lee 6 Oct 2011	0
	Fake login attempts Locked	Filippo Caburlotto 1 Feb 2023	Ken Task 3 Feb 2023	14
	moodledata security testing Locked	Filippo Carnevali 14 May 2014	Guillermo Madero 15 May 2014	1
	Moodledata security check Locked	Filippo Carnevali 14 May 2014	Guillermo Madero 15 May 2014	1
	Encrypted Password Locked	Fifie Sha 24 Sept 2010	Thế Huân Đoàn 6 Oct 2010	3
	My Site has been hacked. HELP Locked	Fergal McCann 18 Oct 2014	Guillermo Madero 21 Oct 2014	7
	Is it safe to create system roles to restrict the access to blocks? Locked	Federica Marra 19 June 2015	Tim Hunt 19 June 2015	1
	ssl problem Locked	FaRzad Shami 6 Mar 2019	Martin Williams 30 Apr 2019	1
	Difference between _WEEKLY and _STABLE wrt security Locked	Faris Raouf 18 May 2009	Dan Poltawski 23 May 2009	1
	restrcition d'acces au site moodle par IP Locked	Faouzi Maddouri 19 Feb 2013	Faouzi Maddouri 1 Mar 2013	2
	SQL-Injection Locked	Fabienne Neveu 14 Feb 2017	kim Rechter 19 July 2017	8
	Prevent guests from viewing forums Locked	Ezequiel Uberti 11 June 2014	Catherine Pinnell 4 July 2014	1
	Guest being able to enter a course (course frontpage) but not able to access resources Locked	Ezequiel Uberti 13 May 2014	Ezequiel Uberti 13 May 2014	0
	Content sanitizing? Locked	Ewout ter Haar 7 Apr 2020	Ewout ter Haar 7 Apr 2020	0
	How to properly delete users from moodle? Locked	Everton Leite 15 July 2021	Everton Leite 15 July 2021	0
	Moodle Site is marked with malicious software from Google Locked	EVEA UPE 9 Jan 2023	Ken Task 14 Jan 2023	12
	Privacy concerns using the Google Document Converter (annotate a pdf) Locked	Eva E 7 Nov 2017	Sergio Rabellino 26 Nov 2017	4
	Moodle Salting Locked	ETH Zürich 14 Nov 2009	Ger Tielemans 21 Nov 2009	50
	a user with student privilege change another user's password Locked	esty wexler 27 Nov 2017	Mathew Gancarz 29 Nov 2017	1
	Cannot find 'loginhttps' in mdl_config Locked	Esli Verheggen 10 Sept 2020	Esli Verheggen 10 Sept 2020	1
	Error 403 Locked	Eslam Adel 11 June 2021	Ken Task 11 June 2021	1
	Moodle Security Plugin Locked	Erwin Ancheta 10 Feb 2015	Erwin Ancheta 11 Feb 2015	2
	How do I disable TeX and algebra filters completely? Locked	Erlyn Baack 2 Apr 2009	Helen Foster 2 Apr 2009	1
	using gnupg when sending emails Locked	Erik Diewald 16 July 2009	Dan Poltawski 16 July 2009	1
	Reset admin password Locked	eric yullu 30 Mar 2021	eric yullu 30 Mar 2021	1
	DDOS Protection Locked	Eric Katchan 18 Sept 2020	Eric Katchan 18 Sept 2020	0
	HTTPS login on and off campus Locked	Eric Albert 15 Sept 2014	Eric Albert 17 Sept 2014	2
	Permissions in 2.7 for Plugin Installer Locked	Eric Albert 29 Aug 2014	Eric Albert 10 Sept 2014	4
	I am running sync_users with LDAP integration and it is missing a user Locked	Eric Ward 3 June 2013	Eric Ward 3 June 2013	2
	Stimutaneous Login Plug-In Locked	Eric Polatty 4 Aug 2009	Hubert Chathi 4 Aug 2009	1
	Force password change after period of time Locked	eraldo giraz 15 Oct 2010	eraldo giraz 15 Oct 2010	0
	User policies > Show user identity field ignored when exporting grades Locked	Eoin Campbell 7 June 2018	Eoin Campbell 7 June 2018	0
	Changing an email address Locked	Endaf Edwards 20 Oct 2010	Endaf Edwards 20 Oct 2010	2
	Alternatives to enrolment keys? Locked	Endaf Edwards 13 Oct 2010	Tim Hunt 13 Oct 2010	2
	Alternative to clear text password in Moodle configuration? Locked	Emre Sevinç 8 Nov 2010	Matteo Scaramuccia 11 Nov 2010	9
	Re: Spammers Using Self Registration Locked	emmanuel oertle 25 Jan 2015	Chris Wharton 26 Jan 2015	4
	Guest Access to Calendar Locked	Emma Richardson 29 Sept 2017	Dean Montgomery 14 Oct 2017	1
	Moodle Site Malware infected - please help! Locked	Emma Richardson 13 Nov 2012	Mary Cooch 10 Feb 2013	9
	Upload of Files - Clam Locked	Emma Irwin 8 Feb 2012	Andrew Lyons 8 Feb 2012	1
	yui library Locked	Emanuel Delgado 27 Oct 2010	Emanuel Delgado 27 Oct 2010	2
	Improved SPAM detector (GSOC2009 proposal) Locked	Eloy Lafuente (stronk7) 24 Mar 2009	Priyanka M 4 Apr 2011	5
	Access to moodledata files Locked	elog wo surname 7 June 2010	Bartosz Cisek 30 June 2010	2
	Restricting Access by Cohort Locked	Elizabeth Ford 1 Mar 2019	Zoran Jančić 15 Mar 2019	1