Need some suggestions on forum software

panzerkw

I have a site that contains a YaBB forum, which is completely helpless to attack. After suffering a couple of defacing attacks over the weekend, I've decided to invest in some more secure, intuitive forum software. Any suggestions?

Shorty

If you have the money for a license..

VBulletin 2.3.2 (with VBulletin 3 due out anytime).

It's still the best of the lot. VB3 especially is so advanced. Plenty of support sites available to aid with themes, code hacking for custom features and problems

If you want free..

Invision board is the next best thing . Like VB, it has a collection of sites that will help you make it unique to you. Not quite as flexible as VB but it's free.

There are others, but those are the two most advanced and popular. Let me know if you have more specific questions, Il try and answer them

panzerkw

Well I'm most concerned with security really. The old Icrontic was Vbulletin wasn't it before it was compromised? I just hate to have my precious time wasted having to deal with these attacks (just got a 3rd defacing attack, ugh).

hakkkked....

Necropolis

I am no expert in this but isnt the software only as secure as the system its held on?

Shorty

panzerkw said
Well I'm most concerned with security really. The old Icrontic was Vbulletin wasn't it before it was compromised? I just hate to have my precious time wasted having to deal with these attacks (just got a 3rd defacing attack, ugh).

hakkkked....

The old Icrontic was VBulletin. There is nothing wrong with the software, the problem was with the server not being patched and updated agaisnt vulnerabilities.

Vbulletin is very secure in comparison to other BB software (it's been around a long time).

Necropolis_uk said
I am no expert in this but isnt the software only as secure as the system its held on?

Correct. It you house your site on a box with an open telnet port, doesn't matter what you install. Servers are supposed to be locked down tight. What platform is your board running on Panz?

panzerkw

Well I'll have to contact the host company about that. I just wanted something relatively inexpensive that would support some nice page, and I didn't pay much attention to the security features. I didn't think it'd really be necessary. But I guess not, I just want to have a forum so people can see my planes :sad2:

Shorty

Contact your host and find out what you are running.

I've just taken a look at your site and Im curious on board settings?

Have you been through the administration interface and made sure that you have enabled the masses of security options. The "hacks" you are experiencing are not necessarily server attacks. Deleting forums/threads/titles is more like someone figuring out your pass or hacking your SQL. Do you have PHPMyAdmin running and not protected?

You have a PM.

Thrax

What about PHPBB?

Shorty

Thrax said
What about PHPBB?

Another good option lacks support from a few things that Panz would like though.. eg. attachments.

Attachments facility can be hand-coded in, but it's around 20 seperate file edits (last time I did it).

Enverex

Shorty said

Thrax said
What about PHPBB?

Another good option lacks support from a few things that Panz would like though.. eg. attachments.

Attachments facility can be hand-coded in, but it's around 20 seperate file edits (last time I did it).

Attachments in phpBB: Takes about 45 minutes to install it, 30 minutes to try and figure out why it isn't working, 20 minutes of denial trying to make yourself believe it is just a simple problem, then 3 hours to try and remove all the code that was installed :banghead:

I think I may try invision as I have always wanted post icons, which is something phpBB doesn't have.

Not sure why I bother though as no-one visits it

NS

panzerkw

I don't need attachment ability. I'm waiting on word back from the host about the specs and what exactly what sort of security setup is on those servers.