One big reason why I hate phpBB

compuXP · 03-19-2006, 07:21 PM

http://www.issociate.de/board/post/3...eing_prepared_

Says a mass hacking of phpBB forums may be about to happen...

A bot has registered on thousands of phpBB boards around the web. The danger is that all phpBB has to do is announce a new vulnerability and BOOM - thousands hacked with one POST command button from a malicious user.

What fun, eh?

-Matt

Mad Cat · 03-19-2006, 08:25 PM

compuXP, it's all about configuring.

When you're buying commercial forum script (vBulletin, IPB) - you're getting all "out-of-the-box" but you spend money.
When you're working with free phpBB - please, be so kind to configure it properly.

Nothing is free in this world :rolleyes:

kenni · 03-19-2006, 08:39 PM

If i had the bot under my command, i woudn't be awaiting any bugs on phpBB. I'll be too busy spamming forums :p

Just out of curiosity.. is anything like this happening for vbulletin :rolleyes:?

compuXP · 03-20-2006, 02:43 AM

No, nothing like this is happening for other forum software. Even if you configure your forum, it doesn't change its security much. Also, phpBB is out of the box software, too, but the paid ones just happen to be powers of times better.

Also, SMF is pretty safe. (Then again, I'm very biased FOR smf)

Mad Cat · 03-20-2006, 08:37 AM

compuXP, kenni, let me do not agree with you.

CAPTCHA check on registering will stop bots (well, I heard about bots that can pass it, but it can also be configured to level up security).

You can deny posting without registering and almost all bots will fail on your phpBB copy.

Also, you can deny access from known spammer IP subzones.

And one more is flood-deny: you can set up an extension which will not let user make posts faster than entered time value (usually 1 minute).

All this consumes time, I understand. But if you have more time than money - phpBB is your choice.

AMH · 03-26-2006, 05:40 PM

Not the first time. Google still bans the word PHPBB because of the last exploit. PHPBB is nice but yes, it is not very secure!

compuXP · 03-26-2006, 07:33 PM

Still, your forum software's insecurity should not force you to have to go to the trouble of banning IPs, etc. A good forum software should be secure and that's all there is to it.

mark1230 · 04-12-2006, 12:29 PM

i think phpb is a free servise and wise one i have it one for my free website
www.webdir.mobstop.com

amitpatel_3001 · 04-12-2006, 05:59 PM

Seems i have to worry now about my forum

But i have email activation option so i dont think that the Bot can register now

compuXP · 04-12-2006, 08:02 PM

Bots can activate via email; it's pretty easy. It signs up at a forum then checks the email a few seconds later. The latest message with the phrase "activate" or "activation" in it, usually, contains a link. In PHPBB, this is the first link in the email (or second, can't remember). It follows the link and viola.

amitpatel_3001 · 04-14-2006, 06:29 PM

omg thats dangerous
Shall i keep image verification on now?

compuXP · 04-18-2006, 01:09 AM

Yes, yes, keep it on.

Better yet, switch to SMF.

dre · 04-22-2006, 02:22 AM

Your right, the bot IS caple of registering at phpbb forums.

just take a look --> http://www.google.com/search?hl=com&q=FuntKlakow
Personalized Results 1 - 10 of about 363,000 for FuntKlakow

QWI · 04-23-2006, 09:46 PM

I had this phantom user register on one of my forums, i simply deleted the user, banned the ip address and banned the email address.

Albert Tai · 04-29-2006, 10:49 PM

I don't think anyone would ever want to hack your phpbb plus if you configure your security setting properly will able to protect your phpbb. Plus you got to be very experience at hacking to able to hack Phbb. or you could go with another kind of forum the one that is free like simple machine or the one that cost money. It depends.

03-19-2006, 07:21 PM	#1
compuXP Retired Member Join Date: Dec 2005 Posts: 139	One big reason why I hate phpBB http://www.issociate.de/board/post/3...eing_prepared_ Says a mass hacking of phpBB forums may be about to happen... A bot has registered on thousands of phpBB boards around the web. The danger is that all phpBB has to do is announce a new vulnerability and BOOM - thousands hacked with one POST command button from a malicious user. What fun, eh? -Matt __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

03-19-2006, 08:25 PM	#2
Mad Cat Member Contributor Join Date: Mar 2006 Posts: 247	Re: One big reason why I hate phpBB compuXP, it's all about configuring. When you're buying commercial forum script (vBulletin, IPB) - you're getting all "out-of-the-box" but you spend money. When you're working with free phpBB - please, be so kind to configure it properly. Nothing is free in this world :rolleyes:

03-19-2006, 08:39 PM	#3
kenni Registered Member Join Date: Dec 2005 Posts: 1,543	Re: One big reason why I hate phpBB If i had the bot under my command, i woudn't be awaiting any bugs on phpBB. I'll be too busy spamming forums :p Just out of curiosity.. is anything like this happening for vbulletin :rolleyes:? __________________ Wanna thank someone? Give 'em a rep. More info.

03-20-2006, 02:43 AM	#4
compuXP Retired Member Join Date: Dec 2005 Posts: 139	Re: One big reason why I hate phpBB No, nothing like this is happening for other forum software. Even if you configure your forum, it doesn't change its security much. Also, phpBB is out of the box software, too, but the paid ones just happen to be powers of times better. Also, SMF is pretty safe. (Then again, I'm very biased FOR smf) __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

03-20-2006, 08:37 AM	#5
Mad Cat Member Contributor Join Date: Mar 2006 Posts: 247	Re: One big reason why I hate phpBB compuXP, kenni, let me do not agree with you. CAPTCHA check on registering will stop bots (well, I heard about bots that can pass it, but it can also be configured to level up security). You can deny posting without registering and almost all bots will fail on your phpBB copy. Also, you can deny access from known spammer IP subzones. And one more is flood-deny: you can set up an extension which will not let user make posts faster than entered time value (usually 1 minute). All this consumes time, I understand. But if you have more time than money - phpBB is your choice.

03-26-2006, 05:40 PM	#6
AMH Junior Member Join Date: Mar 2006 Location: Somewhere in Asia Posts: 66	Re: One big reason why I hate phpBB Not the first time. Google still bans the word PHPBB because of the last exploit. PHPBB is nice but yes, it is not very secure! __________________ Modem Drivers Codecs

03-26-2006, 07:33 PM	#7
compuXP Retired Member Join Date: Dec 2005 Posts: 139	Re: One big reason why I hate phpBB Still, your forum software's insecurity should not force you to have to go to the trouble of banning IPs, etc. A good forum software should be secure and that's all there is to it. __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

04-12-2006, 12:29 PM	#8
mark1230 Junior Member Join Date: Apr 2006 Posts: 77	Re: One big reason why I hate phpBB i think phpb is a free servise and wise one i have it one for my free website www.webdir.mobstop.com

04-12-2006, 05:59 PM	#9
amitpatel_3001 Junior Member Join Date: Jan 2006 Location: India Posts: 36	Re: One big reason why I hate phpBB Seems i have to worry now about my forum But i have email activation option so i dont think that the Bot can register now __________________ Directory with 120000+ Backlinks - Business Directory SEO Services Company

04-12-2006, 08:02 PM	#10
compuXP Retired Member Join Date: Dec 2005 Posts: 139	Re: One big reason why I hate phpBB Bots can activate via email; it's pretty easy. It signs up at a forum then checks the email a few seconds later. The latest message with the phrase "activate" or "activation" in it, usually, contains a link. In PHPBB, this is the first link in the email (or second, can't remember). It follows the link and viola. __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

04-14-2006, 06:29 PM	#11
amitpatel_3001 Junior Member Join Date: Jan 2006 Location: India Posts: 36	Re: One big reason why I hate phpBB omg thats dangerous Shall i keep image verification on now? __________________ Directory with 120000+ Backlinks - Business Directory SEO Services Company

04-18-2006, 01:09 AM	#12
compuXP Retired Member Join Date: Dec 2005 Posts: 139	Re: One big reason why I hate phpBB Yes, yes, keep it on. Better yet, switch to SMF. __________________ Retired Moderator/Member/Friend/Helper - it was great working with all of you!

04-22-2006, 02:22 AM	#13
dre wo0h0o Join Date: Dec 2005 Location: Birmingham, UK Posts: 457	Re: One big reason why I hate phpBB Your right, the bot IS caple of registering at phpbb forums. just take a look --> http://www.google.com/search?hl=com&q=FuntKlakow Personalized Results 1 - 10 of about 363,000 for FuntKlakow __________________ Scrizzle.com - Dre's Blog Enjoy Yourself! SEOContest2008 Myspace Proxy

04-23-2006, 09:46 PM	#14
QWI Junior Member Join Date: Apr 2006 Posts: 12	Re: One big reason why I hate phpBB I had this phantom user register on one of my forums, i simply deleted the user, banned the ip address and banned the email address. __________________ www.quickwhois.co.uk

04-29-2006, 10:49 PM	#15
Albert Tai Permanently Banned Contributor Join Date: Apr 2006 Location: Ontario, Canada Posts: 1,010	Re: One big reason why I hate phpBB I don't think anyone would ever want to hack your phpbb plus if you configure your security setting properly will able to protect your phpbb. Plus you got to be very experience at hacking to able to hack Phbb. or you could go with another kind of forum the one that is free like simple machine or the one that cost money. It depends. __________________ Albert Tai Submit your links to Webz.in Rep people on this forum if they helped you

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Need Backlinks For I Hate Forumer	ForumZClub	Advertise your website	2	10-24-2006 01:05 PM
phpbb issue	UnKnown	Programming	2	09-24-2006 03:12 PM
Getting Banned for no reason?	xpertcoder	Adsense	19	07-10-2006 10:24 PM
Damn! Dropped out of the Index.. FOR NO REASON!	Jamneely	Google	2	06-20-2006 07:34 AM
For those of you who don't hate the RIAA, you should start...	monkeyjump	Webmaster News	3	12-18-2005 04:57 PM