Phpbb 3

[geek]

I was recently asked to look at this forum software and I have to say it is desperately wanting. I can't believe people still use it, there are so many security holes there it ain't funny. Any thoughts?

[PCGUY112887]

Are you serious?

There were many old versions of phpBB 2 that had major security holes, however people did not update their forum software, causing large amounts of damage on many forums around the net.

Ever since then, phpBB has ensured to keep very tight code. When phpBB 3 was in beta, a professional third party code auditing team was brought in to audit the code to ensure they did a good/secure job.

I would say phpBB 3 is one of the most secure piece of PHP based online forum software.

[geek]

Well then it must be the addons or modifications that open it back. However their registration process is wanting. I mean anyone could bypass their captcha.

[PCGUY112887]

The captcha is totally controllable via the admin control panel, by default it's of decent complexity and can be greatly improved with tighter settings. I have yet to observe any auto-registering bots on any phpBB3 forum.

Yes, MOD's can create security risks, however all mods in the "Official Mod Database" have been code audited for security, and are usually regularly maintained.

[bdh734]

Yes, I agree with PCGUY112887, phpBB version 3 is secure out of the box. But when you add mods you are adding code that was not tested with the original release. Therefore the risks are increased. But the community does try to audit and inform of any security risks. I also do not know of any bots that will register and bypass the captcha.

[geek]

I would not call it secure out of the box with so many spam bots walking all over so many of their forums.

[bdh734]

It is secure out of the box...what do you mean spam bots walking all over on so many of their forums?
Explain.

[wilber]

The registration page uses an archaic captcha that can be walked over by spam bots. Better protection is a must.

[Mooryescors]

cash on delivery online prescriptions lovegra

[Pypedyess]

I found this site using google.com. And i want to thank you for your work. You have done really excellent site. Great work, great site! Cheers!

Sorry for offtopic