Live Chat Software by Kayako
How did a Moodle security vulnerability enable remote code execution?
Posted by Thang Le Toan on 20 August 2017 11:11 PM
A series of logic flaws in Moodle enabled attackers to remotely execute code on servers. Expert Michael Cobb explains how the Moodle security vulnerability can be exploited.
A vulnerability found in Moodle, an open source, PHP-based learning management system used by tens of thousands of universities internationally, left servers and their data open to compromise. According to the researcher that discovered the issue, the Moodle security vulnerability is actually made up of several small flaws, and it can enable attackers to execute PHP code on related servers. What does this vulnerability entail, and what can be done about it?
Netanel Rubin, security researcher and CEO of Vaultra, found that by exploiting a series of minor vulnerabilities, he could chain them together to remotely execute code on a server running Moodle.
Moodle is an open source learning management system that stores a lot of sensitive information, like students' grades, tests and private data, making it an attractive target for hackers. The Moodle security vulnerability is tracked as CVE-2017-2641 and Moodle Tracker issue MDL-58010.
The attack works on almost all Moodle versions, so administrators should move to the latest version, version 3.2.2, to fix the problem as soon as possible. Besides updating to the latest version, administrators should also check for any new administrators, plug-ins or templates within Moodle, and search for any new files in the file system in case the server has been compromised.
The coding and logic flaws that contributed to this Moodle security vulnerability are a consequence of the size and complexity of the Moodle system; it contains thousands of files, hundreds of different components and around two million lines of PHP code, written and updated by various different developers at different times.
A new function, update_user_preferences, was added to Moodle to replace the update_users function. It implemented a privilege check, so even if an attacker could change settings using user preferences, it would only work on their own privileges.
While the new function removed the possibility of changing every user attribute, the code failed to check which preference was being changed. The previous function used the setuserpref.php file to check that the preference that needed to be updated was listed in the ajax_updatable_user_prefs array, which defines the preferences that can be changed via Ajax to ensure no critical values can be altered.
Ironically, in an attempt to reduce any potential abuse of the user attribute update function, the new privilege check actually introduced this Moodle security vulnerability. It's possible the developer thought that user preferences could not be exploited to mount a full-scale attack, as they only affect the graphical user interface part of the system.
However, the lack of containment enables an object injection attack to update any row in the entire database, such as administrator accounts, passwords and site configuration. Rubin discovered that this and other false assumptions made during code development could be leveraged to eventually execute PHP code on the server.
Logic flaws can and will occur in any system featuring a large code base, particularly when it's developed over a long period of time by a changing team of developers.
According to Steve McConnell, author of Code Complete, software projects that reach 512,000 lines of code or more can see four to 100 coding errors per thousand lines of code. A typical web application utilizes multiple languages, such as Java, HTML, PHP, Python, CSS, third-party libraries and components, and so on, and there are very few developers that know or understand how to use and integrate each of them without introducing any security vulnerabilities.
To reduce the chances of developers introducing logic flaws or omitting security and validation checks, it should be a requirement that they add a minimum level of in-code comments using an agreed-upon comment style, along with more verbose supporting documentation. Wikipedia has a comprehensive list of comment styles.
Although time spent on commenting and documenting code will slow down development, it will ensure developers making changes in the future can fully understand what a function does, how it does it and what checks are required on the data it handles. It is important that functions receiving data passed by other functions don't carry the assumption that the data has already been validated, as the previous function may have validated it against a different set of requirements or rules.
A good example is a telephone number. A function to retrieve and display a user's telephone number from a database may well accept + and () symbols, but if that function then passes the data to a function that actually calls the number, these characters could cause the function to fail if they are not removed before being processed.
Ask the expert:
How does your enterprise eliminate logic flaws from code development?
Read more »
Moodle Site restore for low-tech users
Posted by Thang Le Toan on 03 July 2016 11:14 PM
This page is a work in progress in November 2010.
There are 3 areas of Moodle that should be backuped and thus can be restored:
The location of these areas can be found in the Configuration file.
Here are some ways to restore typical Moodledata bases such as MySQL
The phpMyAdmin restore process is about as simple as it's backup process. To restore:
Restoring a backup of a MySql database
There are 2 areas which can use the same techniques to backup and restore because they are stored in files and folders"
Read more »
Moodle Site restore
Posted by Thang Le Toan on 03 July 2016 11:13 PM
If you have followed the Site backup instructions and created a backup of a Moodle site, you may need to know how to restore the site backup you created.
There are 3 areas that could be restored individually or together:
The location and names of these areas can be found in the Configuration file.
Command line (linux) restore
Here is a set of basic steps that make up the restore process.
1. Rename the original Moodle directory to something different (so you still have it) and copy the backed up Moodle directory or a newly downloaded Moodle directory in its place.
2. If you are running MySQL, a backup of the database should be a .sql, .gz or .tar.gz file. If it is .tar.gz or .gz you need to extract it until it is an sql file.
tar -xzvf moodlesqlfile.tar.gz
3. If you are running mysql, import the SQL file back into a newly created database on the MySQL server. Be careful here, some backups try to import right back into the same working database that Moodle is connected to. This causes database problems that damage a Moodle installation. The best thing to do is make a new database, restore the backed up database into it, and change the Moodle config.php file to connect to this new database (this way you still have the original database).
Once you have created the new database:
mysql -p new_database < moodlesqlfile.sql
For other databases, follow their instructions for restoring a backup.
Tools for site backup and restore
Tools for backing up data files
Restore with phpMyAdmin
Restoring a backup of a MySql database
What are the pros and cons of course versus site backups?
Site backups are recommended in order to have all data saved with the best confidence and the shortest recovery time.
For a site administrator, automated course backups are more expensive in terms of time, CPU usage and storage. The recovery time to have a site running again takes longer than a site backup. However, teachers and site administrators might find a course backups as a way to create a "fresh" copy of a course that can be re-used (in older versions of Moodle, in newer versions see Import course data) or as a method to distribute a course(s) to other Moodle sites.
Why is my automated course backup much smaller in size than my manual course backup?
This is an intentional design decision. Because of the way files are stored in Moodle 2.x, there is no need to include the files in the backup if you are planning to restore them to the same Moodle site. Leaving them out saves huge amounts of disk space and makes the backup procedure much faster.
What data is not contained in course backups?
By selecting all the options when setting up the backup you can include almost all the data in the course. However you should be aware of the fact that some things are not backed up:
Why is there no "all/none" feature when selecting items to backup?
This was enabled in MDL-32705 and is available in Moodle 2.3.2 onwards.
The process ends with: "Error: An error occurred deleting old backup data". What should I do?
This part of the backup (or restore) procedure tries to delete old info, used in previous executions, performing the following tasks:
For points 1 & 2, there are various ways of repairing tables, including using MySQL Admin.
For point 3 see below:
The error message states that the "directory not empty" and gives the path to that directory. If you go there with an FTP program you can see what is there and clean up. It could be just some empty subfolders that were leftover. Deleting these has been able to help. One can also delete the dir "moodledata/temp/backup" completely. That can take a bit longer but may solve several problems at once.
The process ends with: "XML error: not well-formed (invalid token) at line YYYY". What can I do?
This problem can appear at any point in the restore process. It's caused when the XML parser detects something incorrect in the backup file that prevent correct operation. Usually, it's caused by some "illegal" characters added in the original course due to some copy/paste of text containing them (control characters, or invalid sequences...).
The best method to handle this issue is:
Also, if possible, it's highly recommended to solve those problems in the original course too from Moodle itself. Once "repaired" there, problems will be out if you create new backup files in the future.
The process ends with: "moodle xml not found at root level of zip file". What can I do?
If you are restoring from a zip file backup make sure the moodle.xml file is at the root level. To ensure this:
If the backup file is guaranteed to be correct, check paths to external files (zip, unzip). Incorrect settings also lead to this error message (see the Using Moodle forum discussion moodle.xml not found in root... and MDL-14812).
The process ends with: "An error occurred while copying the zip file..."
This problem is most likely caused by a permissions issue in the destination directory. Backup files are copied to "XXX/backupdata" under your dataroot directory (where XXX is the id of the course being backed up).
The problem could also be caused by a disk being full, though this is far less likely.
To obtain precise information about what's happening, you can enable debug messages in Administration > Server > Debugging (select the maximum level - DEVELOPER) and/or check the web server error logs.
I Still get an XML error. How can I clean the borked XML file?
In some cases XML backup files may contain characters causing the restore process to abort, even after the steps described in the previous question. In such cases you may want to try the following:
java -jar atlassian-xml-cleaner-0.1.jar moodle-unclean.xml > moodle.xml
What does "Some of your courses weren't saved!!" mean?
There are three possible causes of this problem:
Why are some courses being skipped?
Course backups automatically skip courses which are unavailable to students and have not been changed in the time period specified in 'Skip courses not modified' in Settings > Site administration > > Courses > Backups > Automated backup setup (by default 30 days).
Why does restore stop, rather than completing?
Attempting to restore a course to an older version of Moodle than the one the course was backed up on can result in the restore process failing to complete. To ensure a successful restore, make sure that the version of Moodle you are restoring the course to is the same, or newer, than the one the course was backed up on.
If it stop unexpectedly with no errors shown try again with Debugging switched on. Any errors you now see can help experts in the support forums diagnose your problem. You can also check the discussion links in the See also section below for further advice.
Restore stops with the message "Trying to restore user xxxx from backup file will cause conflict"
This message is displayed when:
If 1, 2 and 3 are all true, the restore process stops in order to prevent the backup user xxxx's activities (forum posts, quiz attempts, assignment uploads, etc) from being associated with the target site user xxxx.
These checks and behaviour were introduced in Moodle 1.9.x and continue being valid under 2.0. It's common for the user in question to be the "admin" user (which exists in practically all Moodle installations).
There are two possible methods to make the xxxx users match (and avoid the conflict):
a) Modify the backup archive users.xml file and make the email or firstaccess fields match the ones in target site.
Method a) is recommended so the restore process will match both xxxx users and all activities in the backup file belonging to xxxx will be associated to the already existing target site user xxxx user.
NOTE: When using method a) be aware that the moodle-filename-backup.mbz is a zip file and can be renamed to moodle-filename-backup.zip and unzipped. When editing is complete, rezip and then rename using the original file name with the "*.mbz" extention.
Inter-activity links must be absolute (full) URLs e.g.
in order to be processed properly during backup and restore. Any relative URLs e.g.
will result in broken links when the course is restored.
I have a very large course, over 2GB, and the backup process stops.
Larger courses can be restored in Moodle, but sometimes it needs a bit of tweaking to get it right. Moodle backup files are *.mbz fies and can be renamed to zip files. They can be unzipped, then edited, rezipped and restored. It does not matter if you are using a Linux or Windows or Mac server, a local host or anything else, the technique is the same.
The editing comes in two different ways, one is the resources, activities, quizzes, images. video files and so on are listed, written and referred to in the moodle.xml file. You can find the starting point and the end point of each resouce that you can delete out of the xml file.
The xml might look something like this:
<file id="111"> <contenthash>b11ac9bc0cebee17acfd28d13b548331f76645bc</contenthash> <contextid>21</contextid> <component>mod_resource</component> <filearea>content</filearea> <itemid>0</itemid> <filepath>/</filepath> <filename>howtomakeatimemachine.flv</filename> <userid>4</userid> <filesize>1092320586557</filesize> <mimetype>video/flv</mimetype> <status>0</status> <timecreated>12345432123</timecreated> <timemodified>12345432123</timemodified> <source>howtomakeatimemachine.flv</source> <author>Fred Nurks</author> <license>allrightsreserved</license> <sortorder>0</sortorder> <repositorytype>$@NULL@$</repositorytype> <repositoryid>$@NULL@$</repositoryid> <reference>$@NULL@$</reference> </file>
When editing, make sure all this is deleted, everything between the <file></file> tags.
The second part of editing is locating the actual resouce if it is an image, a separate file or video then deleting it. Really large mbz files tend to have a lot of videos, often flv files, or uncompressed images, like tiffs. They can be found, and deleted easily, in the directory tree of the backup.
You can then rezip the edited file, rename it to an mbz and, if you have edited it right, it should restore. You can use the original file to break down really large backups over and over into four or five smaller mbz files, as many as you like.
It is recommended that you test the technique first on a smaller file, it is easier to follow and gets you used to xml structuring and so on. Say one course with a couple of pages, a number of different image types, a couple of videos will help you immensely.
You do not have to worry about permissions in Windows or Xos servers, or concern yourself with editing rights usually. However, you may be required to ensure you are the owner fo the files being edited.
NOTE: Before re-zipping, check to make sure you have removed all references to the pages/files/resources you have deleted in the moodle-backup.xml file as well. here msay be none, but check anyway.
How can I extract original files from a Moodle backup file?
If you really want to get original files from the backup file (an ".mbz" file) you downloaded (using the backup and restore feature), you can do so in much the same way as is suggested above.
The backup file can actually be opened with any zip/unzip program you can download. Once you open the file, you need to extract:
The files.xml file. The files directory (folder).
Next step would be to open the "files.xml" file in a text editor, and:
Search for the name of each file you want to get. Take note of the value of the corresponding contenthash tag. In the "files" folder you extracted, locate the file whose name is the same as the value of the contenthash and which will always be located in a folder whose name corresponds to the two first characters of the file name.
For example, let's assume there is a "backup_courses-120730.mbz" file of which the "files.xml" file and the "files" folder have been extracted. There is a PDF file named "Leadership.pdf" that is required for another purpose.
Open the files.xml file and:
1. Search for the string "Leadership.pdf", which in this case is found under the following <file id...> group tag:
<file id="12345"> <contenthash>fb6cf43a9b2d432403c70a2cb4c340dbb6225631</contenthash> : <filename>Leadership.pdf</filename> : <license>allrightsreserved</license> <sortorder>1</sortorder> </file>
2. Take note of the corresponding contenthash value: fb6cf43a9b2d432403c70a2cb4c340dbb6225631.
3. As the first two characters of the contenthash are "fb", open the "fb" folder inside the "files" directory (which was previously extracted), and there is a file named "fb6cf43a9b...". Rename that file as "Leadership.pdf", and then move it to another location. Repeat this for all the files required, using the correct contenthash value of course.
What happens if I restore a backup containing an assignment from Moodle 2.2 and older?
The assignment activity module was completely rewritten in Moodle 2.3. Thus, assignments from Moodle 2.2 and older (e.g. from Moodle 1.9) need to be upgraded in order to continue being usable. See the section 'Restoring course backups from Moodle 2.2 and older' in Assignment upgrade tool for details of what to do
Read more »
MOODLE Site Backup for Low-tech Users
Posted by Thang Le Toan on 03 July 2016 10:51 PM
This page is written for Moodle site administrators who are interested in learning about site backup and restore process, but who are not familiar with code, command lines or website administration. For others please see Site backup.
A complete Moodle site backup involves 3 things: the Moodle code, the moodledata folder and the MySQL tables. A course backup and download off site is always a best practice but it only involves parts of the moodledata folder and SQL table.
Read more »
Creating SCORM Content
Posted by Thang Le Toan on 11 May 2016 09:14 AM
Moodle does not generate scorm content. Moodle presents the content in SCORM packages to learners, and saves data from learner interactions with the SCORM package.
Others use SCORM authoring software to generate SCORM packages. This process is easier for non-technical users, but not as foolproof.
Find existing SCORM packages
You can find SCORM packages on Moodle.net Please feel free to add yours to the database.
Before Investing in SCORM Authoring Software
Please be aware that vendors can edit entries on this wiki page. No SCORM authoring software is without bugs, and some have significant issues when used with Moodle. Just because products are listed on this page does not mean that Moodle.org either supports or endorses them. Be sure to test all products extensively before purchase, and be sure that the built-in Moodle authoring tools will not meet your needs. Also take the time to search for past issues with a particular product in the Using Moodle SCORM forum, and read the rest of the Moodle SCORM documentation.
Many of these products piggyback on Powerpoint®, or present talking head video to a learner. Powerpoint presentations and talking heads do not promote social learning. It is valuable to consider, before embarking upon SCORM development, whether your organization wants to limit itself to the pedagogical approaches provided by the SCORM API.
In addition, an authorware production model, in which non-programmers produce content using graphical user interfaces, can present issues because non-programmers do not understand some of the basic tenets of the Web. It is a good idea to educate authorware users about best practices with regard to issues such as file size, file naming conventions, how to publish images for the Web, and so forth, before turning them loose with an authorware product.
Tools for Authoring
Here is a list of tools to create SCORM packages, both open source and commercial. Moodle is a modular authoring tool for courses but at this time does not create SCORM packages.
Creating Reusable Content in SCORM 2004 Video Webinar
This is the perfect video webinar for instructional designers who need to start developing e-learning content for use in a SCORM 2004-compliant LMS. Available when you need and where you need it, this webinar will give you a basic understanding of how to start developing reusable content. While intended for a SCORM 2004 audience, many of the considerations for re-use can be utilized by SCORM 1.2 developers.
You are advise to watch the above videos on ADL's SCORM 2004 Video Webinar wesite.
eXe OPEN SOURCE SCORM Development Package
The eXe project is developing a freely available Open Source authoring application to assist teachers and academics in the publishing of web content without the need to become proficient in HTML or XML markup. Resources authored in eXe can be exported in IMS Content Package, SCORM 1.2, SCORM 2004 or IMS Common Cartridge formats or as simple self-contained web pages.
The new eXeLearning:
The original project:
ScenariChain Opale / OpaleSup
Website and community : http://scenari-platform.org/projects/scenari/en/pres/co/
Xerte OPEN SOURCE SCORM Development Package
The Xerte Project provides a full suite of open source tools for elearning developers and content authors producing interactive learning materials.
Standalone tool: Xerte http://www.nottingham.ac.uk/xerte/
Online tool: Toolkits http://www.nottingham.ac.uk/xerte/toolkits.aspx
Freeware not OpenSource
CourseLab is a free program but is not open source. Feb 2009 current version is 2.4. Received an eLearnings Best of 2007 award.
CourseLab version 2.4 has a few bugs. First is with audio. Sometimes (for some reason not known to CourseLab) the audio will restart, creating an echo effect. You will need to un-check the "autostart" mark of the Video object (vidoe object is used to insert audio too)and then define an action on some event that fits the case (for example on the slide's afterdisplay event) choose METHOD (yourvideoobject, PLAY. this will play the audio after the slide is displayed.
Another issue is with FireFox browsers displaying graphics with CourseLab. It is stated in user's manual that some objects utilize Explorer-specific features and author should avoid using them, if he wants to use the course in multi-browser environment. These are: Gradient Box and all AutoShapes. AutoShapes are VML-objects and VML (Vector Markup Language) is not supported by FireFox. SVG (Scalable Vector Graphics - another vector format) could be the good alternative, but there are still problems with displaying inline SVG-objects in both Gecko-family and IE. (from CourseLab Support)
If these FireFox/Image display problems are not an issue then be sure to install the latest browser plug-ins. If you present content to non-IE users, do not use this authoring package.
There are some problems with Moodle configuration see http://moodle.org/mod/forum/discuss.php?d=96338#p425335
Easygenerator has a free edition but it is not open source. SaaS based platform in connection to a windows application. Collaborative and special thanks to adaptive options for courses, lot of features like powerpoint import, WYSIWYG interface, Template based. Is now on version 8.3. Use the HTML publication to the web, school/university intranet, blog, Facebook or your app. Use Scorm 1.2 or 2004 for any LMS. SCORM, You can track and trace learners’ results through Scorm or Xapi. Using easygenerator ensures your developed courses will be optimized for any device: desktop, tablet or smartphone. Create content once and publish courses for any l device without having to recreate the course. Publish to a website, blog, Facebook or app and track and trace learners advancements through TinCan (Xapi). Easygenerator comes with multiple question types to help create the most engaging courses: Multiple Choice, Multiple select, Drag and Drop Text and fill in the blanks. Co-Author with multiple domain experts, invite subject matter experts to review your course without requiring additional licences. Build Instructional sound courses fast with easygenerator templates: Quiz, Examn, Adaptive Learning templates and the simple course template.
Free QuizMaker by iSpring
With a free, full-featured QuizMaker by iSpring you can quickly develop Flash-based quizzes and surveys. Easy and fast, it ensures rapid authoring of True/False, Multiple Choice and Multiple Response quizzes and surveys. In addition, you can enhance quizzes with audio, video, images and formulas. View sample quizzes. Advanced functions allow you to insert slides with additional info, and create random sequencing of questions and possible answers in a question.
Quizzes and surveys created with Free QuizMaker are compatible with SCORM 2004 R3 standard and can be easily integrated with Moodle CMS.
With iSpring freeware you can create SCORM-compliant e-learning courses that can be integrated with Moodle CMS. Easy for both experts and non-tech users, iSpring Free works as a PowerPoint add-in, accurately converting PowerPoint presentations into Flash courses. Use PowerPoint to its fullest advantage as iSpring features:
iSpring Free with its ease of use, conversion accuracy and SCORM compliance is a great choice considering that it can be used free of charge commercially and non-commercially.
SCORM 2004 authoring tool. Entirely free.
Free software for creating elearning courses with flash interactivity. Website here: http://www.udutu.com/ and an explanatory video here: http://www.udutu.com/my_udutu_video.html It is free to sign up and make the courses - there are many customisable templates enabling users to import images/video/audio/etc and incorporate them into scored questions of varying formats. The finished course can be exported as SCORM 2004 or SCORM 1.2 compliant -again for free and then hosted on a Moodle or other site. (The courses can also be hosted on the udutu site, either for free but with a watermark or for a fee) Quite intuitive to use and offering many features, it is however dependent on good connection to the site as it is created online. Also doesn't seem to like working in Opera.
Reusable eLearning Object Authoring and Delivery - NB it is rather technical and may only be suitable for those with an understanding of HTML and the underlying SCORM specification.
One problem with Reload is that it sometimes places the imsmanifest file 2 directories deep in the published SCORM package. For the solution to this issue, see https://docs.moodle.org/en/SCORM_FAQ#Manifest_not_found_error
Use Articulate Storyline (Features) or older tools like: Articulate Presenter '09, coupled with Articulate Quizmaker '09, is a solution in developing SCORM content for Moodle. Both Articulate Presenter '09 and Articulate Quizmaker '09 are SCORM certified by an independent ADL certification expert (both SCORM 1.2 AND SCORM 2004). This means that Articulate Presenter '09 and Quizmaker '09 will seamlessly report results to Moodle by uploading the published project as a SCORM package. With the complete suite of products from Articulate, you'll be able to quickly create e-learning courses from PowerPoint and develop interactive content, quizzes, assessments, and surveys.
Here is a screencast  to show you how to upload and track from Articulate Quizmaker '09 in Moodle.
To learn more about the products from Articulate, go to http://www.articulate.com and download a 30 day trial of any of the products including: Articulate Presenter '09, Articulate Quizmaker '09, Articulate Engage '09, and Articulate Video Encoder '09.
Note: Articulate products run only in Windows. There is no Mac or Linux version.
The Atlantic Link product suite is a rapid, collaborative eLearning tool that creates Flash based eLearning content. This can export SCORM compliant modules which will run smoothly within moodle. It allows the creation of quizes, slideshows and software emulation.
You can find out more information about the Atlantic Link products at http://www.atlanticlinkglobal.com/
This is a commercial screen-recording product for producing demonstrations and tutorials. It has SCORM compliant output as an option, and permits quizzing and branching. The SCORM output option creates a single .zip file that is appropriate for uploading into a SCORM activity for Moodle. Retail price for Camtasia is US$299, but non-profit educational discounts of about 50% are offered. 30 day trials are also available.
Note: only the Windows client has SCORM output ability. The Mac OSX version does not.
More information can be found at http://www.techsmith.com/products.asp
Adobe's Captivate software allows you to create fully functioning interactive lessons with quizzes, scoring, and integration (via SCORM) with Moodle. You can create anything from a simple slide show, to a complete branching software simulation or evaluation, all delivered via Flash without learning any code. It is the most straight-forward package and makes it a lot of fun to work with - even adding closed-captioning is really easy! Adobe have a page on Captivate here:  - the latest version is Captivate 7.0.
One difficulty with Captivate is that it tends to save important reporting values to a string in suspend_data, rather than in lesson_status, lesson_location, and the like. This makes it more difficult to write custom reports, or to debug interactions.
dominKnow award-winning HTML5-compliant collaborative authoring tool can publish AICC, SCORM 1.2 up to SCORM 2004, ADLNet's Experience API (also known as the Tin Can API), web, and exe packages (Print available in March 2012). Claro's web based collaborative content creation tool can be accessed by authors using Firefox, IE, Chrome and Safari on any platform. Learners and reviewers are able to use any browser or tablet device to access content. Sporting an easy to use interface based off the Microsoft Ribbon toolbar, Claro includes all the basic content creation features, as well as things like screen recordings, image editing, and extensive interactions. Besides content creation, it is a collaborate environment that enables content developers and reviewers to work together using a central repository with reusable content. See Claro's full feature list
Composica is a social e-learning authoring system that offers real-time collaboration among team members and provides a powerful programming- free WYSIWYG environment to create and deliver high-quality interactive e-learning content with embedded social media.
Composica offers extensive multimedia support, including central repository, thousands of media files, customizable media player, built-in audio recording, automatic narration synchronization and mashups with leading external services such as YouTube, Google, Twitter, Facebook and more.
The system provides large variety of fully customizable e-Learning interactions which can be integrated into a test or a game and communicated to the LMS via SCORM 1.2 / 2004.
Composica encourages authoring teams to share knowledge and remove development bottle-necks through a unique groupware environment, powerful tasks system and task reports, project blog, comments, community dashboards and built-in chats.
In addition, Composica includes Social Media tools, to create a real learning community around each course - learners can share knowledge with others, learn from each other, comment on anything, rate everything and more. For more information see: http://www.composica.com/features/
ContentGenerator.net SCORM functionality
Software was successfully used at the CambsMoodle.org conference on July 10th 2008 - every teacher at the workshop was able to get their SCORM game uploaded and working. The software doesn't create extensive courses, but instead trackable interactive Flash games such as Fling the Teacher and Teacher Invaders.
With Coral Presenter, a plugin for PowerPoint, users can easily add audio and video files, as well as quizzes to create more engaging and interactive e-learning presentations. A ribbon menu, slide-level call-outs, attachments and links, custom tabs and one-click publishing are just some of the unique features of Coral Presenter. Coral will convert your content to Flash format and bundle all neccessary files and data for publishing to Moodle or any other SCORM 1.2 compliant LMS. Completion tracking can be set either by number of slides viewed or by quiz scores.
Coral Presenter was developed to work with Microsoft PowerPoint 2007, PowerPoint XP and PowerPoint 2003. Download a free trial at http://www.coral-learning.com/downloads.
DemoCreator is a Flash-based screen recording software which allows users to generate screencast by recording computer screen. It's mainly used to create desktop tutorials and Web-based presentation for distance learning and training. The SCORM or AICC output package for LMS is also available. More information can be found at http://www.sameshow.com/demo-creator.html.
Easygenerator has a free and a paid version. SaaS based platform in connection to a windows application. Collaborative and special thanks to adaptive options for courses, lot of features like powerpoint import, WYSIWYG interface, Template based. Is now on version 8.3. Use the HTML publication to the web, school/university intranet, blog, Facebook or your app. Use Scorm 1.2 or 2004 for any LMS. SCORM, You can track and trace learners’ results through Scorm or Xapi. Using easygenerator ensures your developed courses will be optimized for any device: desktop, tablet or smartphone. Create content once and publish courses for any l device without having to recreate the course. Publish to a website, blog, Facebook or app and track and trace learners advancements through TinCan (Xapi). Easygenerator comes with multiple question types to help create the most engaging courses: Multiple Choice, Multiple select, Drag and Drop Text and fill in the blanks. Co-Author with multiple domain experts, invite subject matter experts to review your course without requiring additional licences. Build Instructional sound courses fast with easygenerator templates: Quiz, Examn, Adaptive Learning templates and the simple course template.
Flypaper for eLearning
Create, share, edit, collaborate and track Flash content without touching a single piece of code with Flypaper™ Pro Flash content creation software.
Output content as SWF, SCORM, EXE, HTML,High Definition Video or on mobile devices.
Helius Presenter (previously PointeCast Publisher) is a PowerPoint plug-in that automatically converts your PowerPoint XP/2002, 2003 and 2007 presentations into a highly compressed Flash presentation. The Pro version allows you to import and edit audio, import video, and create quizzes and surveys. It's SCORM 1.2 or 2004 compatible. It seems close to Articulate Presenter in terms of functionality but at considerably less cost. Free 15 day trial available from site: http://www.helius.com/products/scorm.php
Create eLearning courses in HTML5 for viewing on iPads and other mobile devices with iSpring Converter. Installed as a PowerPoint add-in, the converter is very easy to learn and use. It allows you to easily turn your PowerPoint presentations into interactive eLearning courses in HTML5.
iSpring Converter accurately preserves even the most advanced animations, transition effects, embedded audio and embedded video. In addition, the converter provides its own features of inserting YouTube video and Web Object, which can help you create an outstanding eLearning course. Finally, iSpring Converter keeps the interactivity of your course by supporting triggers, on-click animations and hyperlinks. View sample HTML5 presentation
Once you are done fine-tuning your eLearning course, you can publish it for your LMS. iSpring Converter generates SCORM 1.2, SCORM 2004 (2nd, 3rd and 4th editions) and AICC-compliant eLearning courses. You can specify the number of rated slides for your course, set the duration and select timeout actions. For the highest compatibility, upload your eLearning courses to iSpring Online LMS.
Visit the iSpring website to learn more about iSpring Converter, view demo courses and download a 30-day fully functional trial version.
Сreate high-impact eLearning courses with iSpring Pro, professional software that streamlines e-learning authoring. Whether you work in PowerPoint 2003, 2007 or 2010, iSpring will help you to transform regular PowerPoint presentations into SCORM-compliant Flash courses ready for integrating with Moodle CMS. iSpring Pro is extremely easy-to-use and allows you to stay focused on eLearning content creation rather than software mastery!
iSpring-created courses preserve the most advanced effects and interactivity of your original PowerPoint presentation including hyperlinks, custom aspect ratio for slides and trigger animations. iSpring Pro also allows the addition of voice and video narration, course branding with customized player and presenter info. Plus, you can additionally protect your content protection with a watermark, password, time limit and playback restriction on set domains only. View sample presentations.
iSpring Pro integrates perfectly with iSpring QuizMaker and iSpring Kinetics. Available as a Suite, iSpring products allow the creation of courses with quizzes and interactions then integrating them with Moodle LMS.
Visit the iSpring website to learn more about iSpring Pro, view demo courses and download a 30-day fully functional trial version.
Here is a step-by-step instruction on how to integrate iSpring-made courses with Moodle CMS.
Whether you are experienced or new to quiz creation, with iSpring QuizMaker you'll find it easy to create thought-provoking quizzes and surveys. Creating quizzes of 23 question types is as easy as filling out the form. You can check your work instantly with a live preview option and publish your quiz into a SCORM-compliant package ready to be uploaded and tracked with Moodle CMS. You can:
Even though iSpring QuizMaker has a lot to offer, all its features are intuitively designed into a single window for a hassle-free quiz authoring experience!
gomo is multi-device e-learning authoring tool. It is the easiest way to create beautiful learning which look sand feels bespoke, for content that suits your needs perfectly.
Easily create interactive content - Video, audio, graphic and text content are just a drag and drop away with gomo's intuitive user interface for fast, flexible content creation.
Knowledge Anywhere's ICE Tool - Instructional Content Editor Tool
Create and publish SCORM-compliant courses with WYSIWYG tool, that are ready to be uploaded into any LMS. The Instructional Content Editor Tool offers many features including streaming video, pre-made page templates, storyboard export to Word function, language translation and many more. Anyone can create a high quality learning course easily. Learn more at http://www.knowledgeanywhere.com/ShowPage.aspx?pkContentID=102
Lectora Inspire makes online course development fast and simple. Bundled with the leading flash content creation, screen capture, and recording software, Lectora’s powerful authoring tools empower you to quickly create dynamic video and Flash eLearning content.
Publish options include: SCORM and AICC-compliant Learning Management Systems, HTML, CD and a variety of mobile devices.
Note: Inspire is a bundle that includes Camtasia and Snap! for outputting SCORM. It runs only in Windows, not a Mac.
The power of Lectora, online. Enable teams of course developers, designers and subject matter experts to easily create, modify and collaborate on course content. Instantly view real-time changes and streamline your project life cycle.
Work with your Macintosh! 30-day free trial
Publish options include: SCORM and AICC-compliant Learning Management Systems, HTML, CD and a variety of mobile devices.
Microsoft Learning Development System
Free tool from Microsoft that allows you to create SCORM resources using drag and drop.
"The LCDS is a free tool that enables the Microsoft Learning community to create high-quality, interactive, online courses. The LCDS allows anyone in the Microsoft Learning community to publish e-learning courses by completing the easy-to-use LCDS forms that seamlessly generate highly customized content, interactive activities, quizzes, games, assessments, animations, demos, and other multimedia."
This is an internal Microsoft tool. Has a few bugs and can crash.
NOTE READ the Help info. To upload to Moodle you will need to zip up your working directory then upload using the 'Add SCORM / AICC' from add resource option in your course
"Mohive makes it possible for more people to design custom e-learning content thanks to a unique platform that simplifies each step of the development process. The only solution on the market to feature an integrated project management tool, Mohive makes it possible to cut production lead times considerably, especially when many different people are involved."
PowerpointForce is a MS windows program, which converts PowerPoint(2003/2007) slides into flash with different additional features and brings to you professional rapid flash-based presentations in the matter of minutes. SCORM 1.2 or 2004 compatible. Free 14 days trial, tutorials, examples are available from site: http://www.elearningforce.com/products/Pages/PowerPointForce.aspx
PowerQuizPoint - Quiz Creator
Create a Flash-Based Quiz from PowerPoint in two steps. PowerQuizPoint easily create interactive Macromedia Flash Quizzes from within PowerPoint. PowerQuizPoint is a convergence of power features in PowerPoint and Macromedia Flash. Flash Quizzes created with PowerQuizPoint is web ready. Insert interactive Quiz slides directly into PowerPoint presentations and Publish them to Macromedia Flash format.
PowerQuizPoint PowerPoint Quiz Maker provides options like insert your questions with up to 4 choices per Questions, Separate slides for correct and incorrect answers and Question Bank facility.
QuizCreator is a powerful Flash quiz maker that enables trainers and educators to easily create SCORM compliant Flash quizzes with images, sounds, narrations and Flash animations to engage learners through the learning process and offers flexible results tracking and score reporting toolkit.
It supports 9 question types:True/ False, Multiple Choice, Multiple Response,Fill in the Blank, Drag and Drop-Matching,Drag and Drop-Sequences,Word Bank,Click Map and Essay. You could publish you quiz for Flash, Word, Excel or LMS.
QuizForce is a MS Windows program that provides a comprehensive but easy-to-use set of tools for creating highly customized Flash-based quizzes and surveys for non-programmers. SCORM 1.2 or 2004 compatible. Free 14 days trial, tutorials, examples are available from site: http://www.elearningforce.com/products/Pages/Quizforce.aspx
Snap! by Lectora
For USD$99, create engaging Flash content in minutes (PowerPoint Plugin). Absolutely no learning curve and no more breaking the bank. Snap! by Lectora truly reinvents the term ‘rapid’ by providing you with easy-to-use e-Learning software to create stunning courses, presentations, and fun Flash content.
Publish options include: SCORM and AICC-compliant Learning Management Systems, HTML, and a variety of mobile devices.
SoftChalk packages your lesson in either a standard zip format or in SCORM format. If you package your lesson using the SCORM format, you can re-use your content in any learning management system that supports SCORM (with no need to revise the content). Additionally, the SCORM standards allow your content to work automatically with specific components of the course management system (for example the gradebook), and to track whether a student has completed the lesson.
SoftChalk is very simple to use. Find more information at http://softchalk.com/
STT Trainer from Kaplan IT Learning is a complete solution for creating software simulations, electronic user performance support, and documentation to train employees on critical web-, windows, and java-based business software. It can create SCORM compliant packages that can be used withing the moodle system.
You can find out more details about STT Trainer at http://www.stt-trainer.com/
[Moodle 1.9 / ToolBook Instructor 9.01] Tracking and bookmarking work well. The content should be exported using the SCORM 1.2 option; AICC and SCORM 2004 do not seem to work properly. Scoring works and is viewable within the tracking details, but does not transfer correctly into the Gradebook. see http://www.toolbook.com
TutorPro's TutorAuthor NG is a professional software application for quickly creating interactive lessons, training, demonstrations, and simulations. Anyone who needs to develop online product demonstrations, software simulations for e-learning, or online tutorials for user support will find TutorAuthor NG an ideal solution. TutorAuthor NG includes everything you need to capture actions in any application and instantly create a 3D life like simulation. The application is equally at home creating 'soft-skill' tutorials such as new employee introductions, company policy, in fact anything that can be taught electronically.
If you use TutorAuthor NG to create e-learning content, you can add realistic, fully interactive question slides, buttons, click boxes, and text entry boxes, and much more. TutorAuthor NG is SCORM 1.2, SCORM 2004, and AICC compliant, allowing effortless integration with any compliant Learning Management System (LMS).
More information can be found at http://www.tutorpro.com/Products/TutorAuthor_Next_Generation_
Qarbon's ViewletBuilder is cost-effective, comparatively easy to learn, and used by many thousands of corporate, educational, and government professionals since 1999. On Mac OSx and Windows PCs, it is used to create compelling, interactive online tutorials for distance learning and user support. ViewletBuilder Enterprise includes ViewletQuiz, for creating interactive assessments and surveys.
ViewletBuilder Pro, ViewletQuiz, and ViewletBuilder Enterprise are fully SCORM 1.2, SCORM 2004, and AICC compliant.
Qarbon.com provides the highest level of support and training for its customers.
More information and fully functional evaluation downloads are available at: http://forum.qarbon.com/viewtopic.php?f=3&t=1007&p=3118#p3118
Wimba Create (formerly Course Genie)
A commercial tool allowing you to convert Word documents into CMS ready content. It's particularly suited for non-technical teachers who have large documents to display on Moodle and allows embedding of video, sound etc. When downloaded to your computer it generates a toolbar in Word giving options to enable easy conversion of the file to clean html pages which include navigation and interactive features. It claims to work on Windows 2000, Windows XP or Windows Vista Word 2000, XP, 2003 or 2007 and the official site is: http://www.wimba.com/products/wimbacreate/ .
Wimba Create documentation can be found at: http://www.wimba.com/services/support/documentation#wCr
Convert PowerPoint to Flash and upload the courses to Moodle. Note that this is not a free tool, rather there is a free trial version of the full software. Output from the trial version has a watermark on it.
Some overly detailed instructions available here: http://www.sameshow.com/powerpoint-to-flash/howto3.html
Read more »