Web Hosting Talk







View Full Version : phpbb is a secure one?


creativeartist
07-04-2008, 12:45 AM
Helllo

How secure is phpbb??.I have heard from my friends that phpbb will make hacking to server easier.Also they have told about bots

How secure and reliable is phpbb.

The Universes
07-04-2008, 01:06 AM
Whenever a issue is found with phpBB, the dev team works to patch that problem and release an update. Assuming you update it, you should be fine. You can further harden it by running an application firewall like mod_security. I wouldn't say phpBB is the most secure php based forum software, but its still pretty good.

The bot problem, aka spam, has to do with the fact that the captcha has been broken. There are mods for phpBB that increase the effectiveness of the captcha.

What are you comparing phpBB to?

vibrokatana
07-04-2008, 01:06 AM
Back in the phpBB2 days it had a few exploits and lead to a lot of sites being hacked.

A large portion of it has been written for version 3, so it shouldn't have many issues. The new version is pretty nice, I messed around with it for awhile and it is a vast improvement over v2.

computist2007
07-04-2008, 01:57 PM
Back in the phpBB2 days it had a few exploits and lead to a lot of sites being hacked.

A large portion of it has been written for version 3, so it shouldn't have many issues. The new version is pretty nice, I messed around with it for awhile and it is a vast improvement over v2.

We specialize in phpBB development and yes phpBB 2 was very insecure and had a big problem with bots. Multiple SPAM prevention mods were created for it but only few were effective. phpBB3 was a complete rewrite of phpBB2. It has a very good captcha that still needs to be tweaked a little but in general security is very good. Let me know if you need any customization or have any specific questions.

RF|Matt
07-07-2008, 02:59 PM
How secure PHPBB3 is, is directly proportional to how up to date it is. Given that nothing is 100% secure.

Footzilla
07-08-2008, 05:34 PM
I have seen alot of forum's getting hacked. A week ago my friend's phpbb forum got hacked. It's much easier to hack phpbb than hacking vB or IPB.

Chaos King
07-08-2008, 08:01 PM
I have seen alot of forum's getting hacked. A week ago my friend's phpbb forum got hacked. It's much easier to hack phpbb than hacking vB or IPB.

Is that opinion or fact though?

It depends again on the circumstances. The fact that phpbb is open source makes it more open to exploits which also means that exploits can get fixed faster.

vB and IPB being commercial software, not that many people have access to the source code (legally) so when a exploit is found, it can possibly take longer to fix.

computist2007
07-08-2008, 08:50 PM
Is that opinion or fact though?

It depends again on the circumstances. The fact that phpbb is open source makes it more open to exploits which also means that exploits can get fixed faster.

vB and IPB being commercial software, not that many people have access to the source code (legally) so when a exploit is found, it can possibly take longer to fix.

Absolutely, it is much easier to hack an open source application then a commercial one. That's just a fact. However, PHP itself is probably more of a threat and if you keep on top of the latest service releases open source can be pretty good.

creativeartist
07-09-2008, 02:23 PM
Most of the web designers fear to use PHPBB.They recommands Vbulletin.I m not sure how secure is that one? :(

Chaos King
07-09-2008, 02:30 PM
Most of the web designers fear to use PHPBB.They recommands Vbulletin.I m not sure how secure is that one? :(

The bottom line is that if you use any software that is well maintained and updated, it will be secure.

So whether you pick IPB, vB or phpBB, your site will be secure as long as you keep your forum updated to the latest version on a hardened server and network.

computist2007
07-09-2008, 02:38 PM
The bottom line is that if you use any software that is well maintained and updated, it will be secure.

So whether you pick IPB, vB or phpBB, your site will be secure as long as you keep your forum updated to the latest version on a hardened server and network.

I will second this. It's like managing security for a server. You stay on top you're in good shape, you slack - your server is compromised.