phpBB Security Issue
- Thread starter Leo Ghost
- Start date
2
_20_
When has phpbb not had security issues?
2
_20_
Gimgak said:
It's just like, every time I see someone posting about forum software security issues it's always phpBB. lol
It's because it's used a lot 😉
Other softwares aren't immune from exploits, I remember a giant exploit in mybb a while ago that let you access the admin account through cookies - now that's a pretty big security risk.
Other softwares aren't immune from exploits, I remember a giant exploit in mybb a while ago that let you access the admin account through cookies - now that's a pretty big security risk.
CyberFreak
Legendary Typer
_h_ said:
Yeah, maybe phpBB2 but not phpBB3. Have a look how many security problems there has been in phpBB3 and then compare it to some other softwares and then come to a decision. Alot of people live on the fact that phpBB2 was pretty crap securitywise and think phpBB3 is the same which it isn't.
@Fowler
It would be common hope that with time less exploits would be found, and thus far that's proven correct woth phpBB3 compared to phpBB2. That's not to say, however, that at some point a series of exploits may not be discovered in phpBB3 rendering it less secure than phpBB2 was. There are a lot of "private" groups out there who know a lot about exploiting. Just because an exploit isn't posted on milw0rm doesn't mean it's not there.
As has been said before, all scripts face exploits and at any time as technology constantly changes, new ones may be discovered.
It would be common hope that with time less exploits would be found, and thus far that's proven correct woth phpBB3 compared to phpBB2. That's not to say, however, that at some point a series of exploits may not be discovered in phpBB3 rendering it less secure than phpBB2 was. There are a lot of "private" groups out there who know a lot about exploiting. Just because an exploit isn't posted on milw0rm doesn't mean it's not there.
As has been said before, all scripts face exploits and at any time as technology constantly changes, new ones may be discovered.
CyberFreak
Legendary Typer
I never said it will never and never had any security issues but just if you compare the known issues between softwares you will see phpBB3 isn't as bad as people claim. Whenever people think of phpBB they always think back to phpBB2 and the santy worm and think the are still that bad as so far phpBB3 has been nothing like that.Leo Ghost said:
Expired Account
Seasoned Veteran
Santy worm wasn't phpBB's fault I believe. It was a php problem and also phpBB2 had an update just in time before being attacked from the Santy worm.
CyberFreak
Legendary Typer
http://news.bbc.co.uk/1/hi/technology/4117711.stm
"The malicious program exploits a vulnerability in the widely used phpBB software."
It was an issue with phpBB2. A release was released before the Santy Worm started by the looks of it ( http://www.phpbb.com/community/viewtopi ... 4&t=244451 ) but because so many people were using out of date installations the problem seemed alot more serious and that was what gave phpBB the bad reputation that people won't forget.
"The malicious program exploits a vulnerability in the widely used phpBB software."
It was an issue with phpBB2. A release was released before the Santy Worm started by the looks of it ( http://www.phpbb.com/community/viewtopi ... 4&t=244451 ) but because so many people were using out of date installations the problem seemed alot more serious and that was what gave phpBB the bad reputation that people won't forget.
froggyboy604
Seasoned Veteran
Thanks, I go update my board with phpBB3 now.
horseclick
New Arrival
updating my board, thanks
If you have the latest phpbb2 installed that wouldn't be a problem since it wouldn't be affected by that anyway.froggyboy604 said:
Not to say that the latest (2.0.23?) may not be safe either, would have to check that.
CyberFreak
Legendary Typer
phpBB2 is no longer supported and there no doubt is alot of issues in that. phpBB2 was not built with security in mind unlike phpBB3 was.
froggyboy604
Seasoned Veteran
Gimgak said:
I plan to update my forum in my Sig to phpBB3 someday. But, I did update my very inactive forum on my other site http://johnsonyip.com/phpbb3/ to the latest version of phpBB3.
Affiliates
