Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	How someone hacked a "course" listing that is porn Locked	Stuart Carduner 26 May 2009	Martin Dougiamas 28 May 2009	4
	Allow Teachers to reset password Locked	Stijn Kersten 29 Apr 2014	Stijn Kersten 30 Apr 2014	2
	GDPR plugins: display consent option on first screen? Locked	Stewart Carswell 22 May 2018	Stewart Carswell 22 May 2018	0
	Setting up a user group for a helpdesk account Locked	Stewart Layzell 25 Jan 2012	Stewart Layzell 25 Jan 2012	0
	SSL implementation on Moodle 2.7.x Locked	Steven Borch 18 June 2018	Steven Borch 19 June 2018	2
	Do I need a secure https logon? Locked	Steven Fitzgerald 9 June 2014	Dave Perry 9 June 2014	1
	locked out! Locked	steven corner 18 July 2012	Rachel Fransen 9 Nov 2012	2
	Vulnerability Scans - False Positives? Locked	Steve Mo 25 Apr 2022	Michael Hawkins 26 Apr 2022	5
	User Access to Courses by Device and Number of Login Sessions Locked	Steve Gemar 21 Dec 2013	Rob Willemse 25 Jan 2014	1
	Courses for Teachers...... Enrol one by one by one Locked	Steve Audus 12 Sept 2013	Zeid Fanous 24 Sept 2013	18
	Disabling Right Click Locked	Steve Howe 2 Apr 2013	Rick Jerz 6 Apr 2013	12
	Use the no login feature for the admin user Locked	Steve Massicotte 5 Oct 2012	Steve Massicotte 6 Oct 2012	2
	Moodle 2.x + mod_auth_tkt Locked	Steve Fister 24 Apr 2012	Steve Fister 24 Apr 2012	0
	IP Blocked Out of Moodle Locked	Steve Cook 31 Aug 2011	Deleted user 31 Aug 2011	1
	spam messages being sent through MOODLE Locked	Steve Gilmore 14 June 2011	Helen Foster 6 July 2011	3
	Ads underneath course offerings Locked	Steve Waigand 3 Jan 2010	Chris Collman 8 Mar 2010	4
	HTTP Security - allowframembedding randomly resets to no Locked	Stephen Lambert 29 Dec 2022	Stephen Lambert 29 Dec 2022	1
	Content Security Policy (CSP) and inline scripts Locked	Stephen Hooley 9 Mar 2022	Luis de Vasconcelos 19 Oct 2022	6
	Passwords and User Uploads Locked	Stephen Oxlade 12 July 2019	Stephen Oxlade 12 July 2019	0
	Privacy Policy - Different Languages Locked	Stephen Oxlade 19 Oct 2018	Ralf Hilgenstock 14 Nov 2018	5
	Teachers account compromised and course files deleted Locked	Stephen Bloomer 8 Mar 2013	Steve Kleine 8 Mar 2013	5
	Restrict Access to Courses (Moodle 1.9) Locked	Stephen Martin 15 June 2011	Stephen Martin 5 July 2011	4
	Is password salt needed with LDAP authentication? Locked	Stephen Bloomer 28 Oct 2010	Stephen Bloomer 29 Oct 2010	2
	Change password for Admin account Locked	Stephen Bloomer 25 Nov 2009	Paul Fynn 14 Dec 2009	6
	Recovery after being hacked. Locked	Stephen Lambert 30 July 2009	cor kuijt 3 Aug 2009	9
	Eliminating cerain characters from Moodle-generated passswords Locked	Stephanie Worden 16 Mar 2021	Stephanie Worden 16 Mar 2021	0
	SSL is not ok with moodle Locked	stephane ngov 16 June 2015	Ken Task 16 June 2015	2
	Make course unsearchable Locked	steph . 13 June 2012	steph . 13 June 2012	0
	Example of a intrusion into Moodle Locked	Stellan Kinberg 23 Sept 2009	Timothy Kane 20 Jan 2010	6
	login page Locked	Stefan Lippke 24 Apr 2020	Stefan Lippke 18 May 2020	2
	Security of LDAP caching of passwords Locked	stefan weber 20 Jan 2020	stefan weber 23 Jan 2020	2
	Can logging be turned off for individual courses? Locked	stefan weber 5 Dec 2019	stefan weber 5 Dec 2019	0
	cannot delete some users Locked	stefan weber 20 May 2019	Luis de Vasconcelos 21 May 2019	4
	Deleted users still show up in Forum thread overview Locked	stefan weber 22 Feb 2019	Alan Schrock 25 Feb 2019	5
	dataprivacy tool blocking cron job from running Locked	stefan weber 24 Jan 2019	stefan weber 24 Jan 2019	0
	Restrict teacher's ability to backup courses including userdata? Locked	stefan weber 17 Dec 2018	stefan weber 18 Dec 2018	2
	Is there a way to completely delete users including all their data? Locked	stefan weber 18 Sept 2018	stefan weber 5 Apr 2019	24
	GDPR / data registry / data deletion plugins - questions, discussion and experiences Locked	stefan weber 7 Aug 2018	Howard Miller 7 Aug 2018	1
	were can I find exhaustive documentation on the GDPR data registry? Locked	stefan weber 25 May 2018	stefan weber 29 May 2018	2
	restrict guest access for courses in a specific category Locked	stefan weber 10 Aug 2017	Louise H 10 Oct 2018	6
	My homepage (frontpage) before login is only showing the login module Locked	Stefan Stefansson 6 Sept 2016	Stefan Stefansson 6 Sept 2016	2
	Cannot read WP salted passwords via External database authentication Locked	Stavros Filippidis 28 Apr 2020	Leon Stringer 2 June 2020	1
	reCAPTCHA stuck in a loop has locked me out	Stacy Just 5 Dec 2023	Ken Task 8 Dec 2023	3
	Moodle 1.9 auto unenrolment? Locked	SS Khew 22 May 2013	Helen Foster 22 May 2013	1
	Same moodle server to cater both Intranet & Internet Locked	Sreepathy T L 23 Apr 2018	Ken Task 25 Apr 2018	9
	Admin user has only teacher permissions Locked	Srdan Dukic 12 Oct 2010	Emanuel Delgado 12 Oct 2010	1
	Moodle with Ms active directory(Lapd) single sign-in Locked	Spyros Savvanis 19 May 2014	Dave Perry 19 May 2014	3
	How do I restrict users from changing their profile pictures	Sonny Herrick 3 Nov 2023	Sonny Herrick 7 Nov 2023	5
	security overview: default role for all users not change Locked	sonia sonia 8 Jan 2015	Mahmut TEKER 17 Feb 2015	1
	Changing system email for receiving notification on attempts to login Locked	Son TRAN 22 June 2021	Son TRAN 23 June 2021	2
	File type extensions Locked	Soha Gamal 26 Mar 2015	Soha Gamal 26 Mar 2015	0
	Does Moodle call home? Locked	Soen Trueman 21 Nov 2020	Randy Thornton 30 Oct 2021	10
	encrypted videos moodle Locked	Social Geographic Media 22 Mar 2021	Social Geographic Media 22 Mar 2021	0
	Authentification to download attachments Locked	Slaven Marsic 7 Oct 2019	Visvanath Ratnaweera 7 Oct 2019	3
	myphp & Admin username/pass Locked	Skyler Crandall 22 Jan 2020	Ken Task 22 Jan 2020	7
	Single link Locked	Sir Leo 18 July 2011	Lars-Olof Krause 19 July 2011	2
	Setting Enrolment Key in 2.4 Locked	Simukai Rukuni 18 Feb 2013	Derek Chirnside 19 Feb 2013	1
	Profile - Mobile App Block: How to hide last access to website Locked	Simon Gebert 25 Mar 2021	Simon Gebert 29 Mar 2021	1
	Making passwords simpler Locked	Simon Carr 26 Oct 2012	Mary Cooch 26 Oct 2012	1
	Security to moodledata folder Locked	Simon A 4 Jan 2010	Visvanath Ratnaweera 12 Mar 2010	1
	Delete users without Data Deletion enabled Locked	Silvia Pinheiro 18 Jan 2021	Silvia Pinheiro 18 Jan 2021	0
	View Permissions Locked	Sigal Rashba 11 May 2014	Nikki LM 12 May 2014	1
	Force users to change password in first login (LDAP settings) Locked	Siamak Alavi 28 Nov 2012	Siamak Alavi 28 Nov 2012	0
	Performance info only for admins (3.11) Locked	Shufeng Bai 15 Oct 2021	Shufeng Bai 15 Oct 2021	1
	Delete Moodle users data completely	Shoun Paul 16 May 2023	Shoun Paul 16 May 2023	0
	Making students invisible to each other. Locked	Shoned Jones 31 May 2016	Richard Oelmann 1 June 2016	2
	SMTP Error with sending email Locked	Shin Okada 22 Aug 2009	Shin Okada 24 Aug 2009	1
	insert JavaScript via ATO Locked	Shimon Nagar 15 Mar 2015	Shimon Nagar 15 Mar 2015	0
	Get username from core_user_get_users_by_id Locked	Shi Qiao Yu 8 Sept 2012	Roger Studner 10 Oct 2012	2
	Moodlebot...What is it!? Locked	Sherry Stafford 3 June 2015	Sherry Stafford 3 June 2015	2
	Uploading files to user profiles Locked	sherri g 11 June 2013	Jordi Fontseca 21 Aug 2014	3
	Recaptcha Ley Locked	Sheetal Uplenchwar 25 Nov 2013	Helen Foster 26 Nov 2013	1
	Moodle session tickets not expiring when closing the browser Locked	Shaun Conway 9 Oct 2015	Simon Rediss-Whitfield 3 Nov 2015	3
	API test for Moodle (v2.6) with Postman Locked	Shantanu Mitra 25 Nov 2017	Shantanu Mitra 25 Nov 2017	0
	Moodle platform and security. Making the move. Locked	Shane Mundee 6 Jan 2016	Bret Miller 12 Jan 2016	4
	Server CPU performance overhead Locked	Shamal Sabah 12 Nov 2017	Dan Bennett 15 Nov 2017	4
	Moodle Security checks Locked	Shad Rashed 9 Nov 2021	Michael Hawkins 10 Nov 2021	1
	/repository/ directory visible via browser Locked	Shad Rashed 26 Sept 2021	Shad Rashed 26 Sept 2021	2
	Security checks and Default role for all users Locked	Séverin Terrier 15 May 2020	Nicolas Martignoni 12 June 2020	3
	Maximum Time per Day Locked	Seth Mengal 29 July 2013	Howard Miller 16 Feb 2016	12
	HTTPS SSL Proxy Dropdown Menu Issues Locked	Seth Whitworth 24 Aug 2012	Seth Whitworth 25 Aug 2012	2
	Site Hacked Locked	Seth Dickens 15 June 2009	Jon Witts 18 June 2009	17
	Students contact details hiden from each other Locked	Selma Limbo 9 July 2018	Emma Richardson 9 July 2018	1
	Trojan found Locked	Seif Fateen 24 Feb 2010	Seif Fateen 25 Feb 2010	6
	Everyone has full access to my site since a crash last week - permissions not respected Locked	Sébastien Petit 1 Apr 2015	Sébastien Petit 1 Apr 2015	1
	About MSA-09-0019 Locked	Sebastien M. 27 Oct 2009	Howard Miller 28 Oct 2009	6
	Removing Timestamps in Tests and Assignments Locked	Sebastian H. 17 June 2015	Sebastian H. 17 June 2015	0
	ClamAV upgrade may be required Locked	Sean Farrell 12 Apr 2010	Jon Witts 20 Apr 2010	2
	Notifications regarding Data Privacy requests processing Locked	seaghan moriarty 27 Feb 2019	seaghan moriarty 27 Feb 2019	0
	prevent guest from seeing course summary Locked	Scott Brim 7 Sept 2015	Scott Brim 7 Sept 2015	1
	Implementing SSL (https) Locked	Scott Chillemi 18 Dec 2013	Andrew Lyons 1 Jan 2014	2
	Vulnerability scanning Locked	Scott Karren 20 Nov 2013	Tim Hunt 20 Nov 2013	1
	How do I know SSL is working? Locked	Scott Johnson 11 Nov 2011	Visvanath Ratnaweera 22 Nov 2011	1
	Help! Locked Out Of Moodle Due To SSL Error Locked	Scott Custer 10 June 2011	Guillermo Madero 21 June 2011	1
	Unusual security setup help needed Locked	Scott Severn 8 Oct 2008	Scott Severn 8 Oct 2008	0
	Admins Forced password change? moodle 1.9.7 Locked	Saujanya Patel 22 Dec 2009	Frank Ralf 29 Dec 2009	4
	Unexpected maintenance mode message may be hacked Locked	Satinderpal Singh 2 July 2021	Satinderpal Singh 2 July 2021	0
	Security for Online services Locked	sasa lk 10 July 2014	sasa lk 10 July 2014	0
	SSL issue in moodle home page. Locked	sarendar vennapureddy 31 May 2019	Visvanath Ratnaweera 7 Feb 2020	8
	Upgrading Apache, OpenSSH, and OpenSSL packages Locked	Sarath P 23 Nov 2022	Ken Task 23 Nov 2022	1