Forum Moderators: phranque

Message Too Old, No Replies

Discussion Board Suggestion

         

ravenx

1:14 am on May 16, 2007 (gmt 0)

10+ Year Member



Hello. Ive been running phpBB before and it got hacked 2 times. Now I just dont feel like going through the same again. Anyone knows of any other like software I could use. I know about invision and vBulletin, but I want something for free. Thank you.

celgins

1:27 am on May 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



But I want something for free.

Don't we all! :)

Seriously, you may want to investigate why your phpBB install was hacked. No matter the forum or who created, any application can be hacked.

Did you remove phpBB's setup files once the installation was complete?

Many hackers will exploit these files because they already know the names and their locations.

ravenx

4:28 am on May 16, 2007 (gmt 0)

10+ Year Member



Yes, I did remove all the installation files.

lammert

6:40 am on May 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



This will be a difficult search. If open source discussion board software has many useful features, it will be used for many sites. If the software is used on many sites, it will be subject to attacks by hackers.

If you want a discussion board for free, you either have to select some unknown piece of software with not so many interesting features, or stay with the mainstream products (like phpBB) and commit yourself to regular updating when bugfixes and security fixes are released.

thecoalman

1:15 pm on May 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Did you remove phpBB's setup files once the installation was complete?

Many hackers will exploit these files because they already know the names and their locations.

Phpbb exits if the install directory is present. That of course doesn't help if the vulnerability is elsewhere, a quick tip if you're running phpbb. Password protect the admin folder with .htaccess or equivalent. This will at least add another layer of security for the most important files.

and commit yourself to regular updating when bugfixes and security fixes are released

Emphasis on that, I've been running phpbb for about 3 years and haven't had any problems. I'm on the update mailing list so as soon as a update is released I know immediately. I don't frequent the phpbb forum much but every post I have seen there about a forum getting hacked was because it was an outdated version, usually a very outdated version.

Note that phpbb2 went through a thorough security audit a few months back and is probably about as secure as can be expected.

physics

4:45 pm on May 16, 2007 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I haven't tried this out yet but have been dying to.

bbPress is forum software with a twist from the creators of WordPress.

Have you ever been frustrated with forum or bulletin board software that was slow, bloated, and always got your server hacked?
...


[bbpress.org...]