Security notifications

Moodle has set up a dedicated site, which you can find at https://moodle.org/security/, that deals with security issues. If you register your Moodle site, which is highly recommended, your e-mail address will automatically be added to the security alerts mailing list, which gives you advanced notice of vulnerabilities and updates a couple of days prior to public release. To set this up, go to Registration, fill in the required information, and click on the Register with Moodle.org button.

Moodle notifications

When you click on the Notifications link in the Site administration section, Moodle will display any potential issues with your site. This link is also used to initiate the installed Moodle updates and plugins (refer to Chapter 8, Moodle Plugins).

Three messages are displayed in the following screenshot; the first two issues would clearly fall into the security category:

Moodle monitors failed login attempts in its log file, as described in Chapter 10, Moodle Logging...