Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	Moodle attempting to change password Locked	Chris Knowles 18 Mar 2021	Chris Knowles 22 Mar 2021	4
	SMTP Email password viewing Locked	Chris Swinney 12 July 2019	Visvanath Ratnaweera 12 July 2019	3
	How to protect copyright content (videos): your ideas? Locked	Chris P. 6 Mar 2015	Ray Morris 26 Mar 2015	1
	Create a moodle failover system Locked	Chris P. 6 Mar 2015	Chris P. 6 Mar 2015	2
	Best way of securely separating different clients Locked	Chris Webb 22 Oct 2014	Robin Woodley 2 Mar 2015	1
	SSL, custom domains, general security and platform curiosities Locked	Chris Wagner 22 July 2014	Chris Wagner 22 July 2014	0
	Using local login id Locked	chris stevens 18 June 2014	John Gifford 18 June 2014	1
	How do I setup LDAP or Microsoft AD? Locked	Chris Smith 8 May 2014	Chris Smith 13 May 2014	3
	Registration without email? Locked	chris justus 13 Aug 2011	Doug Moody 19 Aug 2011	2
	Enrolment key does not work Locked	Chris Collman 11 Aug 2010	Chris Collman 11 Aug 2010	9
	In a hosted server, where should moodledata go Locked	Chris Collman 8 Mar 2010	nabil Lachheb 15 Mar 2011	6
	Site policy URL Locked	Chris Lee 19 Aug 2009	Chris Lee 20 Aug 2009	2
	Secure cookies logging me out Locked	Chip Edwards 12 Feb 2010	Chip Edwards 12 Feb 2010	0
	Add security mecanism SSL to handle user connection on Moodle/CIMA Locked	chhivhorng ly 6 Nov 2008	chhivhorng ly 25 Nov 2008	7
	About the OAuth 2 services Locked	Cheryl Tsai 31 Oct 2017	Cheryl Tsai 28 Dec 2017	2
	Security and Risk Assessment for Moodle Locked	CHENG Alan 21 July 2010	CHENG Alan 26 July 2010	2
	download backup via file picker Locked	Deleted user 26 Apr 2020	Ken Task 27 Apr 2020	6
	Site Policy Agreement	Charles McCoy 21 Apr 2023	Mary Cooch 22 Apr 2023	3
	Getting user passwords Locked	Chardelle Busch 22 Aug 2015	Vicke Denniston 2 Oct 2015	3
	Help with AV installation Locked	Cecilia Cicolini 13 Feb 2011	Lars-Olof Krause 14 Feb 2011	1
	Open Access / Student User access Locked	Catherine Seeds 7 Sept 2015	Emma Richardson 7 Sept 2015	3
	Course Category acess through LDAP Locked	Catherine Pinnell 23 July 2014	Catherine Pinnell 23 July 2014	0
	Does Moodle log admin activity? Locked	Cathal O'Riordan 14 Feb 2019	Cathal O'Riordan 15 Feb 2019	2
	Help with redirect from HTTP to HTTPS Locked	Carolyn McIntyre 8 Mar 2017	J Guzman 22 Nov 2017	14
	Filters for discussions Locked	Carolyn Minks 24 Nov 2009	Helen Foster 24 Nov 2009	1
	Accidently took away all admin abilities- HELP Locked	Carolyn Minks 7 Nov 2009	Carolyn Minks 13 Nov 2009	8
	Front page Locked	carole gould 25 Aug 2009	Mary Cooch 25 Aug 2009	1
	Front page Locked	carole gould 25 Aug 2009	carole gould 25 Aug 2009	0
	Uninvited users Locked	Carol Ibanez 1 Oct 2010	Mary Cooch 2 Oct 2010	1
	change admin username to prevent robot attacks? Locked	Carol Booth 8 Feb 2010	Deb Smith 10 May 2011	5
	Hardening the password policy Locked	Carlos Eduardo Angarita Marquez 16 Sept 2011	Carlos Eduardo Angarita Marquez 16 Sept 2011	5
	how to set https just for the login page Locked	Carlos Kiyan Tsunami 8 Sept 2012	Carlos Kiyan Tsunami 8 Sept 2012	0
	hidden spam links Locked	carlos c 10 Jan 2012	Mary Cooch 10 Jan 2012	2
	Hackers in my moodle Locked	Carlo Amore 27 Oct 2009	Howard Miller 27 Oct 2009	1
	Email addresses and bots Locked	Carla Beard 8 June 2011	Guillermo Madero 26 July 2013	4
	SSL Mixed Content Errors Locked	Carl Byerley 21 Nov 2020	Carl Byerley 22 Nov 2020	2
	Restricting site access Locked	Carl Byerley 22 Apr 2019	Ken Task 26 Apr 2019	3
	LDAP signing Locked	Carl Maschke 18 Dec 2013	Carl Maschke 18 Dec 2013	0
	disable SAML Locked	Carl Maschke 10 Dec 2013	Ken Task 11 Dec 2013	5
	Encryption of Files Inquiry Locked	Cariosha Dav 25 Sept 2012	Hubert Chathi 25 Sept 2012	1
	SECURITY WARNING! (moodledata) Locked	Can Yasa 2 June 2016	Can Yasa 2 June 2016	3
	Secure PHP Configuration Settings for Moodle Locked	Calvin Bu 22 Apr 2016	Ken Task 26 Apr 2016	3
	CVE-2020-1692 Locked	callum Wood 28 Feb 2020	Tim Hunt 29 Feb 2020	1
	ClamAV server Locked	callum Wood 12 Dec 2018	Matteo Scaramuccia 21 Dec 2018	2
	ClamAV and FastCGI Locked	callum Wood 2 July 2018	Matteo Scaramuccia 4 July 2018	4
	ClamAV - clamdscan Locked	callum Wood 2 May 2018	callum Wood 4 May 2018	3
	How secure is using admin/tool/uploaduser/index.php Locked	callum Wood 5 Dec 2016	Matt Bury 6 Dec 2016	3
	Forcing password changes Locked	C. J. Turner 29 Apr 2011	Emanuel Delgado 29 Apr 2011	1
	Outstanding Tracker Issue Locked	C Behan 24 Sept 2019	C Behan 25 Sept 2019	3
	Moodle Security Mailing Lists Locked	C Bartlett 9 Sept 2011	C Bartlett 11 Sept 2011	2
	Restricting file types Locked	C Bartlett 28 July 2011	C Bartlett 28 July 2011	0
	Moodle 2.0.3 with ClamAV - Detection Failure Locked	C Bartlett 21 June 2011	C Bartlett 25 June 2011	1
	Urgent Security Issue with moodle and plesk Locked	Burt Polesitter 8 Mar 2012	Faris Raouf 14 Mar 2012	1
	Easy authentication for children and adults? Locked	Brylie Oxley 10 Oct 2014	Brylie Oxley 10 Oct 2014	0
	Pass through single-sigon authentication Locked	Bryan Ward 5 Sept 2015	Bryan Ward 5 Sept 2015	0
	Hippa/Ferpa/intelectual property Locked	Bryan Hilton 5 Aug 2010	Bryan Hilton 5 Aug 2010	2
	No CAPTCHA reCAPTCHA Moodle Locked	Bruno Nogueira 2 July 2015	John Okely 7 July 2015	3
	Security recommendations - code directory permissions Locked	bruce chambr 12 Jan 2015	Tomasz Muras 12 Jan 2015	2
	Google OAuth2 is reporting expired token	Brian Ball 31 Aug 2023	Brian Ball 14 Oct 2023	3
	Google Drive Integration Locked	Brian Ball 18 Mar 2022	Ken Task 18 Mar 2022	2
	Guest Access to Calendar Attachments. Locked	Brian Pool 12 Mar 2020	Brian Pool 15 June 2020	2
	Enrolling Cohorts from Sub-Categories Locked	Brian Gaehring 11 June 2014	John Gifford 23 June 2014	2
	Restricting category Admins from other cohorts Locked	Brian Gaehring 10 June 2014	Brian Gaehring 11 June 2014	2
	Moodle and Mod_Evasive Locked	Brian Y 20 Feb 2014	Howard Miller 25 Feb 2014	1
	Teachers unable to restore automated backup files (error/invalidrestorefile) Locked	Brian Bennett 20 Aug 2011	Brian Bennett 20 Aug 2011	0
	How to block access for CYVEILLANCE Locked	brian avery 12 Aug 2010	brian avery 12 Aug 2010	5
	How to set up best security from the outset - not later.. Locked	brian avery 5 Aug 2010	Chris Collman 11 Aug 2010	3
	tracker "permission violation" and security patches Locked	Brian Jorgensen 4 July 2009	Petr Skoda 4 July 2009	1
	Limited access to one login Locked	Brennan Waters 3 Feb 2012	Mauro Guimarães 24 May 2012	1
	cross domain ajax in script Locked	Bradley Botkin 12 Aug 2016	Bradley Botkin 17 Aug 2016	5
	Can't enable web services for authentication Locked	Brad Smith 1 June 2017	Dave Perry 20 July 2017	3
	New Install: dataroot exposure to web, security issue Locked	Brad PIerce 27 Sept 2014	Brad PIerce 30 Sept 2014	3
	Unlisted courses? Locked	Brad Smith 17 June 2013	Emma Richardson 18 June 2013	1
	Someone viewing course with user id '0' Locked	Boštjan Gabrovšek 25 Jan 2020	Gareth J Barnard 26 Jan 2020	1
	Secure and httponly cookies Locked	Bob Ross 18 Dec 2013	Bob Ross 18 Dec 2013	0
	Help! Admin Permissions gone Locked	Bob Neuner 5 Nov 2011	Bob Neuner 8 Nov 2011	4
	Is there an example on configure Moodle to connect Zimbra LDAP? Locked	Bo Xie 24 Sept 2011	Iñaki Arenaza 26 Sept 2011	2
	Database: Operating system used to Access Moodle Locked	Blaž Podobnik 20 Oct 2020	Ken Task 20 Oct 2020	1
	Restrictions on manual enrolments Locked	Blair F. 9 June 2021	Blair F. 17 Sept 2021	1
	Prevent Teacher Role from Downloading Backup Zip Files Locked	Blair F. 10 June 2010	Howard Miller 13 June 2010	3
	Messages from deleted users stay in group messages Locked	Bjørn Teistung 6 Sept 2021	Bjørn Teistung 6 Sept 2021	0
	H5P: Students result and e-mail shows by changing URL Locked	Bjørn Teistung 23 June 2021	Ilya Tregubov 24 June 2021	3
	unclear CSS - attack Locked	Bjarne Oldsen 5 Nov 2017	Ralf Hilgenstock 25 Nov 2017	4
	Logout to protect privacy Locked	Bit9Labs LLC 4 Aug 2021	Bit9Labs LLC 4 Aug 2021	0
	Account lockout threshold? Why is the default no? Locked	Billy Zwiener 30 May 2019	Billy Zwiener 2 June 2019	3
	Quick Question: Moodle backups and privacy Locked	Bill Johnson 15 May 2020	Marcus Green 17 May 2020	1
	Nessus and PHP upgrade Locked	Deleted user 2 July 2011	Deleted user 2 July 2011	0
	course data directories Locked	Bill Weinheimer 22 Nov 2009	Ger Tielemans 24 Nov 2009	2
	Pre-Req Course Restrictions - Possible? Locked	Beth Haggenjos 6 Aug 2015	Dave Perry 17 Aug 2015	5
	A 15 year old student put Moodle down Locked	Bernat Martinez 23 May 2014	Dave Perry 30 May 2014	23
	GDPR compliance & Moodle Locked	Bente Olsen 17 July 2020	Michael Hawkins 20 July 2020	3
	You are considered to be a digital minor Locked	Bente Olsen 21 Apr 2018	Bente Olsen 22 Apr 2018	4
	CAS and Login As Functionality Locked	Benjamin Derry 14 Nov 2014	Matt Rice 23 Mar 2015	1
	Privacy concens regarding the mobile push notifications Locked	Beni Keller 23 Feb 2018	Beni Keller 5 Mar 2018	16
	mon mot de passe a disparu Locked	benedicte charles 29 Dec 2009	Deleted user 29 Dec 2009	1
	Cross-domain CORS issue Locked	ben ftima wajdi 3 May 2022	jefry arch 10 May 2022	1
	SSO sharing moodle session with react app Locked	ben ftima wajdi 1 May 2022	Dave Perry 11 May 2022	2
	Safe Exam Browser not available for Assignments????	Ben Girard 5 Mar 2024	Visvanath Ratnaweera 8 Mar 2024	10
	Moodle Security Locked	Ben Keough 27 May 2016	James McLean 30 May 2016	5
	SSL Proxy woes Locked	Ben Steeples 27 July 2012	Robin Stark 22 Dec 2016	20