3 ms·

> phpBB has a pretty bad security record Not exactly true. phpBB2 has a bad security record. phpBB3 has been clean since day 1, IIRC.

• ckwalsh 15y ago
  I work with phpBB, and felt a little awkward stepping forth and saying this, so I'm glad somebody did. phpBB3 has had a couple tiny problems, but nothing that could be used to attack users of a site or propagate an issue.
  • calloc 15y ago
    And still many people will refuse to use phpBB or have anything to do with it because of its checkered past.
    • drivebyacct2 15y ago
      I won't use phpbb or vbulletin or any of them because they feel cludgy. I don't want signatures. Two lines of text shouldn't occupy 500 pixels on my screen. And conversations among tons of people don't make sense when displayed at one hierarchy. Reddit and HN have spoiled me, any sort of unmoderated single-hierarchy forum is a chore anymore.
      • streptomycin 15y ago
        I'm out of the loop I suppose... what software would you use for, say, a support forum or something? I still use phpBB, and it works, but I agree it feels cludgy.
        • StavrosK 15y ago
          I'd use the reddit/HN codebase, or a reddit/HN clone.
        • jordanlev 15y ago
          You might like Vanilla Forums better: http://vanillaforums.org/ http://vanillaforums.org/
• jbk 15y ago
  Not exactly, there was one issue on 3.0.7, which made the 3.0.7-pl1 to be release quite soon. But, I have to say that we are very pleased about phpBB3 security...
  • 1880 15y ago
    Ah, yes, that. I didn't remember it, since it was solved in a few hours and it was not a horrible security hole, just a problem with permissions in feeds: www.phpbb.com/community/viewtopic.php?t=2014195