Security and privacy | Moodle.org

Forums
Documentation
Downloads
Demo
Tracker
Development
Translation
Search

Search
Moodle Sites

Moodle.org

How to keep your Moodle site secure and methods for increasing privacy.

Please do not post security scans or vulnerability findings in this public forum. Any potential vulnerabilities can be submitted via the Security Submission form, which adheres to our Security Procedures and Responsible Disclosure Policy.

Documentation: Security, Security FAQ and Increasing privacy in Moodle

Before starting a new discussion topic, please check the Security FAQ and try a forum search.

DO NOT REPORT NEW VULNERABILITIES HERE!

New security issues should be reported in the Moodle Tracker with an appropriate security level.

List of discussions. Showing 100 of 1796 discussions
Status	Discussion	Started by	Last post	Replies	Actions
	How to prevent session hijacking in Moodle	Jyoti M 22 Sept 2023	Brett Dalton 2 Oct 2023	11
	MOODLE REGISTRATION Locked	Jyoti Madkar 4 Mar 2014	Emma Richardson 4 Mar 2014	2
	Site policy agreement - force scroll Locked	Justina Torres 11 Dec 2012	Justina Torres 21 Dec 2012	3
	Apache2 won't start after switching to using wildcard certs Locked	Justin Vaughn 16 Sept 2022	Justin Vaughn 16 Sept 2022	0
	Category visibility for authorized only ? Locked	Justin Nguyen 3 Aug 2012	Justin Nguyen 3 Aug 2012	0
	Logging out of Moodle & Sesskey Locked	Justin Mastic 26 May 2010	Justin Mastic 26 May 2010	0
	Changing EVERY Learner's Password in one action? Locked	Justin Bender 27 Apr 2010	Justin Bender 30 Apr 2010	7
	public and registered user course permissions Locked	Justas Pranskaitis 4 Dec 2012	Justas Pranskaitis 4 Dec 2012	0
	Counter argument required Locked	Just H 19 Nov 2013	Marcus Green 19 Nov 2013	5
	looking for vulnerable (old) plugins for Moodle Locked	Jurgen Gaeremyn 19 Nov 2018	Dan Marsden 19 Nov 2018	1
	any risks to report all PHP errors on production ? Locked	Julien Boulen 13 May 2020	Julien Boulen 13 May 2020	2
	create an option to prevent xss injection ? Locked	Julien Boulen 1 June 2017	Marina Glancy 6 June 2017	1
	Guest access permissions Locked	Julie Lindsay 5 Oct 2013	Julie Lindsay 5 Oct 2013	0
	New account username and email enumeration	Julian Pool 15 June 2023	Julian Pool 15 June 2023	0
	Invalid permissions detected in $CFG->dataroot directory, administrator has to fix permissions Locked	Jukka Kylliäinen 5 June 2018	Jukka Kylliäinen 5 June 2018	0
	Clamav and non standard modules Locked	Jukka Vähäaho 1 Aug 2011	Jukka Vähäaho 1 Aug 2011	0
	log in issues Locked	Jude douglas 5 Oct 2019	Jude douglas 5 Oct 2019	0
	Moodle version Locked	Juanjo Florido 19 Apr 2010	Tim Hunt 26 Apr 2010	2
	How to see who changed letter grades site-wide? Locked	Juan F 17 Nov 2015	John Provasnik 7 Dec 2015	3
	MSA-11-0038 and MSA-11-0037 have the same change link Locked	juan Diaz 27 Oct 2011	Michael de Raadt 27 Oct 2011	2
	my site hangs Locked	juan vi 2 Mar 2011	juan vi 2 Mar 2011	0
	Security announcements policy Locked	Juan Segarra Montesinos 20 May 2009	Martin Dougiamas 28 May 2009	1
	Changing the login page via a redirect Locked	Josiah Carberry 14 Feb 2022	Josiah Carberry 14 Feb 2022	0
	Moodle Security Alerts - SPAM Locked	Joshua Hagan 15 Jan 2018	Ken Task 15 Jan 2018	1
	The Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext (BREACH) Locked	Joshua Devey 24 June 2015	Damyon Wiese 25 June 2015	2
	HTTPS via certbot and bitnami image on AWS question	Joseph Thibault 1 June 2023	Ken Task 10 June 2023	4
	Academic integrity discussions Locked	Joseph Thibault 7 Feb 2023	Joseph Thibault 8 Feb 2023	2
	Keeping Members of Paid Courses from Sharing Login Credentials Locked	joseph zabrosky 11 June 2015	joseph zabrosky 13 June 2015	10
	Your thoughts on this hypothetical situation (how to prevent and identify) Locked	Joseph Thibault 20 Sept 2014	Dan Marsden 18 June 2015	8
	Ads displayed Moodle sites where none should be (a browser issue actually) Locked	Joseph Thibault 12 Apr 2014	Joseph Thibault 12 Apr 2014	0
	moodle systematically remove users Locked	jose Campos 2 June 2014	jose Campos 2 June 2014	0
	LDAP server authentication Locked	Jorge G. C. 16 Sept 2019	Jon Bolton 3 Oct 2019	12
	How can hide options of each menu Locked	Jorge Silva 25 Mar 2013	Jorge Silva 25 Mar 2013	0
	Running spamcleaner.php Locked	Jorge González Alonso 9 May 2009	Martin Dougiamas 28 May 2009	1
	TeX-Filter updated - cvs listing ist shown in my site Locked	Jörg Höpfner 5 Apr 2009	Jörg Höpfner 6 Apr 2009	4
	Remove login link from pages or disable logging in for users Locked	Jordan Floyd 17 Mar 2011	Leticia Dark-rose 21 June 2016	4
	Moodle 3.6.1+ (20181210) issue with tool_policy Locked	Joost Elshoff 25 Jan 2019	Joost Elshoff 25 Jan 2019	2
	Last login information on user profile Locked	Joost Elshoff 9 July 2018	Ray Lawrence 10 July 2018	1
	Switch from https to http Locked	Joost Bosschert 1 Dec 2014	Dave Perry 1 Dec 2014	3
	Intermittent: This course does not allow public access Locked	Jonny Barnstorf 30 Aug 2011	Jonny Barnstorf 30 Aug 2011	0
	Migrating my Moodle Site From HTTP to HTTPS Locked	Jonathan Christoper Go 30 Apr 2018	callum Wood 2 May 2018	3
	Apache_Log4j_2_Vuln_v2-O Locked	Jonathan Broks 5 Jan 2022	Michael Hawkins 6 Jan 2022	2
	Resetting Admin Password from the Backend Locked	Jonathan Lance 14 July 2021	Jonathan Lance 17 July 2021	3
	Hide other students from Recent Activity Report Locked	Jonathan Rabson 22 Sept 2012	Jonathan Rabson 27 Sept 2012	3
	Admin lost ability to assign roles Locked	Jonathan McKeever 11 Dec 2010	Mary Cooch 11 Dec 2010	9
	Data privacy plugin and quizzes Locked	Jonas Asa. 13 Sept 2018	Jonas Asa. 14 Sept 2018	3
	change tool_policy plugin's template texts Locked	John Karistinakis 3 Feb 2021	John Karistinakis 4 Feb 2021	2
	hide sender's IP address on contact form Locked	John Karistinakis 2 Feb 2021	Jon Bolton 2 Mar 2021	1
	cannot login with any user Locked	John Karistinakis 5 Jan 2021	John Karistinakis 7 Jan 2021	5
	How can we disable attemp button when browser is closed Locked	John Dafielmoto 3 July 2020	Visvanath Ratnaweera 11 July 2020	1
	Automated Security Testing Locked	John Papworth 13 Nov 2019	Michael Hawkins 14 Nov 2019	3
	Redis Sessions Locked	John Rickard 10 Feb 2017	John Rickard 10 Feb 2017	0
	Security overview, some questions and question on backup Locked	John Rambo 20 Apr 2016	Emma Richardson 20 Apr 2016	4
	Additional security measures for Moodle Locked	John Rambo 1 Apr 2016	Matt Bury 13 Apr 2016	8
	Hiding email addresses in Moodle 2.6 forums Locked	John Edmiston 9 Oct 2014	Randy Thornton 3 Dec 2016	3
	HTTP to HTTPS converter for external content Locked	John Okely 5 Aug 2014	John Okely 4 May 2015	14
	Disabling Login HTTPS Locked	John Okely 20 June 2014	John Okely 5 Jan 2015	25
	verifying security patches Locked	john saylor 25 Mar 2014	john saylor 25 Mar 2014	0
	Can I make an unlisted page? Locked	John Addis 16 Jan 2014	Richard Oelmann 16 Jan 2014	1
	https login Page Blank Locked	John Romain 5 Jan 2012	John Romain 6 Jan 2012	4
	What about preventing multiple log-ins by the same login and password in Moodle? Locked	John Stremp 1 Nov 2011	Krizny Kishnek 10 Nov 2012	15
	Students changing their first and last name Locked	John Russo 3 Mar 2011	John Russo 3 Mar 2011	5
	Can Moodle 2 use a shared SSL certificate? Locked	John Bonner 21 Dec 2010	John Bonner 2 Apr 2011	8
	Identifying users browser? Locked	John Stevens 25 May 2010	Howard Miller 26 May 2010	8
	'send me details via email' Forgotten Password email address Locked	John Riley 8 May 2010	Worth Bishop 9 May 2010	1
	Moodle security patching documentation Locked	John Grobler 6 May 2010	John Grobler 10 May 2010	3
	Is the Cron script a security threat? Locked	John Bonner 13 Sept 2009	John Bonner 26 Sept 2009	5
	.htaccess files hacked Locked	John Bonner 20 July 2009	John Bonner 27 July 2009	1
	Access Logs Locked	John Rebtho 1 June 2009	Sudeep Nayak 22 Feb 2016	3
	Trojan:JS Type Obfuscation Exploits Locked	John Macklin 22 May 2009	Helen Foster 22 May 2009	1
	Course editing by a non-creator Locked	John Kihoro 23 Apr 2009	Ray Lawrence 14 May 2009	4
	Face recognition Authentication in Moodle.	Johan Blanco 5 Apr 2023	Joseph Thibault 8 June 2023	9
	Security of external manifests Locked	Johan Meerkerk 23 Mar 2014	Johan Meerkerk 25 Mar 2014	2
	SAML auth with users pulled via LDAP Locked	Joel Coehoorn 14 Dec 2016	Keiron Walsh 22 Sept 2017	1
	Moodle 3.4 improvements related to data protection/GDPR Locked	Joe Cape 17 Nov 2017	Joe Cape 17 Nov 2017	0
	Access to lesson activities Locked	Joe Chacha 6 May 2017	Joe Chacha 6 May 2017	0
	Allow view-only access to user list Locked	Joe Behymer 15 Nov 2012	Randy Thornton 2 Dec 2016	5
	https enabled in one of the settings Locked	Joe Bliton 14 Sept 2009	Jon Witts 19 Sept 2009	3
	Saving Remote System Access Information Locked	Joe Favero 27 Mar 2009	Hans B0s 28 Mar 2009	1
	Can I get user sesskey via javascript somehow? Locked	Jock Coats 12 Oct 2021	Jock Coats 12 Oct 2021	3
	How to show a label to a not logged user and hide it from a logged user Locked	João Paulo Souza Soares 17 Mar 2020	John Provasnik 18 Mar 2020	2
	Prevent piracy - add watermark with user username to videos Locked	Joana Pauperio 21 July 2020	Matt Bury 22 July 2020	1
	Profile picture changes on specific user Locked	Joan Llimiñana 16 May 2019	Joan Llimiñana 21 May 2019	4
	Suppression of advice about php register_global at documentation Locked	Joan Cervan 18 Jan 2019	Joan Cervan 18 Jan 2019	0
	Restricting login through portal only Locked	Joan Van Duzer 13 Jan 2015	Dave Perry 13 Jan 2015	1
	student is not allowed to enter from a device different from the device he entered for the first ... Locked	Jo Jo 29 Sept 2020	Visvanath Ratnaweera 30 Sept 2020	2
	400+ Existing Users Enrolled into Course Locked	JM Erestain 24 July 2021	JM Erestain 24 July 2021	0
	Corrupted php files Locked	jlh 437 11 Feb 2009	jlh 437 19 June 2009	12
	Moodle reverse proxy and URL replace.php not working Locked	jitendra Phull 6 Apr 2019	Ken Task 17 Apr 2019	11
	restricting usage of pdf file Locked	Jirka Hladis 17 May 2014	Guillermo Madero 21 May 2014	16
	Role that allow to manage users Locked	Jiri Princ 17 Feb 2011	Jiri Princ 17 Feb 2011	0
	Security overview - Allow EMBED and OBJECT tags? Locked	Jim Courter 14 Apr 2020	Jim Courter 14 Apr 2020	0
	SSL proxy causes formatting error - Formal White theme Locked	Jim Moen 4 Aug 2013	Jim Moen 4 Aug 2013	0
	task: download all submissions is possible even when you only are allowed to assess one Locked	Jeus Perez 9 Feb 2017	Dave Perry 13 Feb 2017	2
	Edit PHP warning Locked	Jet Batung Bakal 21 Oct 2009	M. N. 24 Oct 2009	1
	ANTI VIRUS for SECURITY "UPLOADING DATA" Locked	Jet Batung Bakal 19 Oct 2009	Jon Witts 25 Nov 2009	6
	Securing my Moodle Locked	Jet Batung Bakal 19 Oct 2009	Jet Batung Bakal 21 Oct 2009	4
	Moodle and Digital Certificates Locked	Jesus Diaz Vico 14 Feb 2010	Jon Witts 16 Feb 2010	3
	Helping Users Recover Passwords Locked	Jessica Rocheleau 13 Dec 2020	Mawan A. Nugroho 31 Dec 2020	5
	Security Differences Between Moodle LMS and MoodleCloud Locked	Jessica Rocheleau 5 Dec 2020	Jessica Rocheleau 5 Dec 2020	0