Pages:
Author

Topic: Who installs SMF anyway? (Read 4112 times)

sr. member
Activity: 462
Merit: 250
It's all about the game, and how you play it
September 12, 2011, 01:06:30 PM
#23
I didn't know phpbb3 has had critical security issues.

That's like saying you didn't know that linux or osx has security issues the ones for windows are just best known because it's most popular not because any of the three is inherntly more secure
legendary
Activity: 1358
Merit: 1002
September 12, 2011, 12:43:48 PM
#22
I didn't know phpbb3 has had critical security issues.

Because it hasn't, at least recently.

http://www.cvedetails.com/vendor/1529/Phpbb.html

And if you see the details here http://www.cvedetails.com/vulnerability-list/vendor_id-1529/Phpbb.html you'll see that the most serious exploits are in modules and not on PHPBB itself.
legendary
Activity: 1190
Merit: 1004
September 12, 2011, 12:21:59 PM
#21
I didn't know phpbb3 has had critical security issues.
sr. member
Activity: 462
Merit: 250
It's all about the game, and how you play it
September 11, 2011, 08:43:27 PM
#20
Any forum software is going to have attack vectors the more public bitcoin becomes (and this forum) the more likely we are to actually be attacked regardless of what's being run.
sr. member
Activity: 336
Merit: 250
September 11, 2011, 07:48:43 PM
#19
I'm telling ya, vbulletin is the way of the future!!!
full member
Activity: 210
Merit: 100
firstbits: 121vnq
September 11, 2011, 07:26:39 PM
#18
My vote goes to phpbb3 since I've used it before and it never seems to have security issues. It also has nice features and nice themes.

phpbb always has major security issues because it is so widely used (and it is php). It's a much easier forum software to customize and administer, but I don't think it is particularly secure.
sr. member
Activity: 336
Merit: 250
September 11, 2011, 11:00:45 AM
#17
I think one mod that should definitely be considered is some sort of post "voting" system, where if a post gets enough negative votes it gets automatically hidden. Should take care of much of the trolling that has been going on lately.
legendary
Activity: 1358
Merit: 1002
September 11, 2011, 10:56:32 AM
#16
I would recomend not adding too many mods to phpbb3 though because that's where it all goes wrong.

Or to any other forum script Wink The MODs are always the problem Cheesy
legendary
Activity: 1190
Merit: 1004
September 11, 2011, 10:29:22 AM
#15
I would recomend not adding too many mods to phpbb3 though because that's where it all goes wrong.
hero member
Activity: 560
Merit: 500
September 11, 2011, 10:26:17 AM
#14
phpBB 3.0.9 all the way.
legendary
Activity: 1190
Merit: 1004
September 11, 2011, 10:21:14 AM
#13
My vote goes to phpbb3 since I've used it before and it never seems to have security issues. It also has nice features and nice themes.
hero member
Activity: 560
Merit: 501
September 11, 2011, 06:43:24 AM
#12
XenForo! XenForo! XenForo!
legendary
Activity: 1470
Merit: 1006
Bringing Legendary Har® to you since 1952
September 11, 2011, 06:24:17 AM
#11
You get what you pay for.  The best forum software is IPB.

P.S.  Welcome back Smiley

Judging by secunia, PHPBB is also fully patched.
http://secunia.com/advisories/product/17998/
legendary
Activity: 1358
Merit: 1002
September 11, 2011, 01:53:12 AM
#10
Well, it's in this times i thank phpbb for their automatic updater that merges file modifications Wink

You guys should really ditch SMF.
sr. member
Activity: 336
Merit: 250
September 11, 2011, 01:37:59 AM
#9
There are some significant custom modifications, and most of the non-custom mods don't have 2.0 versions.

Now that hosting isn't a problem, I'm going to use the donation money to hire people to improve the forum. Maybe we'll move to some totally different forum software.

Dang, thats unfortunate. vBulletin or IPB are probably your best two options if you do decide to transition to new forum software, and don't mind having to pay the annual license fee. I peter vb because the newer versions of IPB are bloated with a load of unnecessary features. Its simple and straightforward.

I'm pretty sure that newer versions of the commercial forum solutions allow you to import data from other forum software. You can definitely get 3rd party solutions to convert the SMF mysql database into a format useable by other forum packages.
Vod
legendary
Activity: 3668
Merit: 3010
Licking my boob since 1970
September 11, 2011, 01:26:29 AM
#8
You get what you pay for.  The best forum software is IPB.

P.S.  Welcome back Smiley
administrator
Activity: 5222
Merit: 13032
September 11, 2011, 01:24:31 AM
#7
Believe me, I know how you feel. I ran several forums with a number of thousand members each, and every time it came to update the software it was an absolute nightmare. The modifications you have done, are they plugin's or hardcoded into the SMF code? Because most plugins should be updated to support the newer editions. It would just be a matter of reinstalling.

Though, if you have made significant hard-coded changes to the forum scripts... well, better you than me that's all I'll say.

There are some significant custom modifications, and most of the non-custom mods don't have 2.0 versions.

Now that hosting isn't a problem, I'm going to use the donation money to hire people to improve the forum. Maybe we'll move to some totally different forum software.
sr. member
Activity: 336
Merit: 250
September 11, 2011, 01:22:04 AM
#6
Moving to 2.0 would be a major pain because this forum uses many modifications.

Believe me, I know how you feel. I ran several forums with a number of thousand members each, and every time it came to update the software it was an absolute nightmare. The modifications you have done, are they plugin's or hardcoded into the SMF code? Because most plugins should be updated to support the newer editions. It would just be a matter of reinstalling.

Though, if you have made significant hard-coded changes to the forum scripts... well, better you than me that's all I'll say.
administrator
Activity: 5222
Merit: 13032
September 11, 2011, 01:11:14 AM
#5
vBulletin is by far the BEST forum software out there. SMF is plagued with security bugs.

I guess we should prepare to be hacked again? As of the moment this forum is 1.1.14. I don't know anything about SMF so there could be a reason for it, however there appear to be newer versions of SMF without going to 2.0. I could see not going to 2.0 if you don't feel it's ready for prime time but there are apparently 1.0 updates so why not use those?

The forum's software is still officially supported:

As of today, 1.1.14 is no longer the stable branch of SMF, as SMF 2.0 is being released as we speak. 1.1.14 will remain in maintenance stage, and it will continue to be supported for security and major/critical functionality fixes, only it will not receive new features, nor minor bug fixes or improvements.

Moving to 2.0 would be a major pain because this forum uses many modifications.
Pages:
Jump to: