phpBB 3.0.6 RC3 Review

[cityStatic]

So I'm reviewing phpBB 3.0.6 RC3 today.

The categories I'm reviewing:

Appearance
Simplicity
Security (CAPTCHA included)

Appearance: 9/10

I like phpBB, but I'm not fond of the large text. (Might just be my browser though) Also, the first time you start up the ACP, it just shows a white screen with links.

Simplicity: 7/10

Easier than past versions of phpBB, but not as easy as most webmasters want it to be.

Security: 10/10

All I can say is "WOW". CAPTCHA settings are awesome.

I will do a larger review when 3.0.6 is fully released.

Not very proud of this short review though...

 

[CyberFreak]

It might be worth noting that spam isn't really classed as security. Security is more about if there any exploits which could result in the forum being compromised. Spam is more of a pest and an annoyance rather then security. Same with human trolls causing trouble on sites by posting pointless crap. They are spamming and being idiots but that is not classed as a security problem.

 

[cityStatic]

Well, the bots might (they occasionally do) try to haxzorz into the admin account, but that isn't that common. Either way, I'm sad about the lack of length of that "review".

 

[CyberFreak]

Those aren't spam bots though. CAPTCHA stops spammers not these little hacking bot things. CAPTCHA doesn't stop these bots you are talking about. As CAPTCHA only stops spam bots and as spam bots aren't classed as a security issue, it should be reviewed as security as it officially isn't a security problem. It is more of a pain in the arse rather then a security issue.

 

[PcGuy]

As fowler said, you also need to worry about holes in the system that could allow a hacker to get into any important areas of your site such as the admin panel.

But dont get me wrong, i do think phpbb 3 has excellent security and i have never really heard of any major hackings with it 🙂

 

[CyberFreak]

Most phpBB3 hackings are done through outdated cpanel or other scripts on the server. phpBB.com got taken down due to a security problem in the mailing list they used (can't remember the name of it but it is well known and used by many). The software in itself is secure but it is only as secure as the the server it is on really. For example you could make the front of your house very secure so no one can break into it but it is no good if you leave the back door unlocked as your house will still probably get broken into. If people can't get in through the front, they try the back. That is why a good host is also important.

 

[AnAccount]

Any one know when the official version of 3.0.6 will come out? I'm actually getting excited for when ProPHPBB does an update. Hopefully we can have some better mods and features than we have now.

 

[Jaosals]

I think the official one was originally supposed to be released in September, but still nothing really yet...

 

[AnAccount]

I think the official one was originally supposed to be released in September, but still nothing really yet...

I expect they're still trying to make it stable enough for the communities to use... *shrugs*.

 

[CyberFreak]

The phpBB team never release an estimate of the release date. They never said September or any date. The members may make speculations on the release date but they don't release actual dates. They always say it will be done when it is done.

It won't be much longer though. There doesn't look like there is going to be another RC.

 

[AnAccount]

The phpBB team never release an estimate of the release date. They never said September or any date. The members may make speculations on the release date but they don't release actual dates. They always say it will be done when it is done.

It won't be much longer though. There doesn't look like there is going to be another RC.

There's usually only two or 3 RC's anyway before they're released, aren't there? Or could there sometimes be more?

 

[CyberFreak]

Usually there is only 1 or 2 RC's although because this is going to be a big release there is an extra one. What makes me think that there isn't going to be a new 4th RC is this - http://code.phpbb.com/repositories/revision/5/10228

If something big is found then there will be another RC.