»How to protect your phpBB forum against hackers«

smoki:

stuggleing with this bit chmodded the as you have suggested but its refuseing to work properly!

What does it say?

posted by knn

in-my-opinion.org -> Technology, Computers, Science, Internet -> Software by the admin -> How to protect your phpBB forum against hackers

hi

posted by Terrer

I just don't get it

Here is this guy (knn) trying to help us by suggesting extremely reasonable security measures. Why are guests like 'anonymous2' and 'Just my Opinion' attacking him? It is so ridiculous and childish to quibble over words when there is a tangible benefit to be had from this post. What's wrong with people? If you hate the added security just don't implement it on your forum. It's that simple. Change passwords and backup by the hour because you obviously have nothing else to do.

posted by jayray999

Re: We live in the best of all worlds & I just don't get

For the record I am unbiased here, so if I am sticking up for anyone it has nothing to do with who is who and how and where. Personally I agree with knn about phpBB forums, I find the place unfriendly myself, so this should give you some kind of idea that indeed I am not one of them coming to "ATTACK" anyone!

My sense about this whole thread is an "attack" on phpBB which originated with knn. He/she may not have intended it to look that way but how I interpret it is an "attack".

Anyone who knows me knows that my first priority in the internet world is security, and I've "attacked" some software companies for their so called security programs that just don't rate even being looked at. I'm opinionated and I don't hide my opinions. I call it as I see it and this whole conversation to me is an "attack" and God help anyone who states their opinion because if they don't agree with the original author (knn) their posts are "attacked".

A forum that gets 2000 posts a day isn't even really going to care about losing a few hundred posts because they've backed up often enough that there isn't much lost. That is if they care enough about their forums and members to do a backup often enough.

Again, if you care about your forums you will change your password on a constant basis also. If you don't then ask yourself how much your site means to you because it ain't much if you are not willing to go to all lengths to protect it!

Backup, hmm, My Network Places is an excellent and fast way to back up all your files and phpMyAdmin is the best place to optimize and back up your entire database. It's actually really simple if you think about it. To give you an idea of the size of my forums, my database is over 30mb at present and I back up at least once a day.

It's fine and dandy to talk about security, but make sure you know what you are talking about before you talk about it. I'm a programmer from way back, 1985/86 when I started. I programmed computers before Windows existed, I programmed an entirely user friendly system that was similar to Windows 3.1 in those days, fully password protected. Computers didn't have hard drives when I started programming, and you used a 5 1/4" floppy. Those were the days of MSDos, dBase, Lotus123, Wordstar, etc.

Nothing else to do? If you wanna believe that then go right ahead! But to be honest with you I, at a moments notice, could get a phone call to go out and fix a computer than is so badly infected because of lack of computer security. One of my clients could have some changes needed on their websites. The list of mods that need to be rewritten in order to work in a phpBB modded forum is endless! Someone could request my help via remote assistance as something has gone wrong with their computer. Someone is looking for a computer and off I must go to find the best deal in town or price the cost of a custom built computer like the one I use and built myself. Not to mention the two phpBB forums that I must keep backed up and constantly adding to them. And then of course there is the help given right on my forums. Nothing else to do? ROFLMAO Give me a break!

posted by Just my Opinion

A small backup you have

Just my Opinion:

A forum that gets 2000 posts a day isn't even really going to care about losing a few hundred posts because they've backed up often enough that there isn't much lost.

I don't know why you can make such a claim. Neither is it OK for any forum to lose hundreds of posts, nor is there any automaticity to backup often when you have a bigger forum.

Just my Opinion:

Backup, hmm, My Network Places is an excellent and fast way to back up all your files and phpMyAdmin is the best place to optimize and back up your entire database. It's actually really simple if you think about it. To give you an idea of the size of my forums, my database is over 30mb at present and I back up at least once a day.

And my backups for this small forum here are 500 Megabytes. ZIPPED.
And I have even more forums, not only in-my-opinion.org.
So it's not that simple.

And I am not asking for much, but for such simple measures as "password protect your admin area".

posted by knn

ebooks-download.com

Re: A small backup you have

knn:

Just my Opinion:

A forum that gets 2000 posts a day isn't even really going to care about losing a few hundred posts because they've backed up often enough that there isn't much lost.

I don't know why you can make such a claim. Neither is it OK for any forum to lose hundreds of posts, nor is there any automaticity to backup often when you have a bigger forum.

Just my Opinion:

And my backup for this small forum here are 500 Megabytes. ZIPPED.
And I have even more forums, not only in-my-opinion.org.
So it's not that simple.

And I am not asking for much, but for such simple measures as "password protect your admin area".

Now I know your full of it! Liars and cheaters don't deserve recognition. Go get a life! Bye Bye, you've convinced me that your only mission is to lie and argue about dick all so I think security of anyone's forums is best left to those who are not angry and full of bull!

posted by Just My Opinion

What's your forum?

Just My Opinion:

What the heck is going on? Who are you? What is your forum? Why do you think I am lying?

Please note that the 2 guys who attack me are

•	"anonymous2", who is phpBB staff (or otherwise closely involved with phpBB)

•	"Just my opinion", who gets money for fixing unsecured computer systems

Go figure.

posted by knn

Re: What's your forum?

ROFL WOW when you screw up you really screw up don't you.
1. I am not a guy
2. I don't make money fixing unsecured computer systems, my services are free!
3. I go so far as to help people by downloading free or trial items and mailing them a CD if their computer is unable to download from the internet or they are on a slow dial up connection, and I do this for free too!
4. Why do I do this for free? Because I was once new on the internet and I know what it is like to be a newbie and know nothing about security, privacy and protecting myself. My friend taught me for free so I pass on my knowledge to others.
5. My goal is to reach as many people as I can to help them secure their computers.
6. I don't even charge for the web design work I do!
7. If someone chooses to pay me with whatever they wish, that is up to them, but it is far from a requirement.
Assuming doesn't make an A&& out of me but it sure made one outta you!

posted by Just my opinion

Is it all all about SIZE?

Just My Opinion:

This latest unsubstantiated outburst confirms that "Just My Opinion" cannot be taken seriously. Is it possible that the angry outburst stems from the fact that knn's database is BIGGER?

One thing I could never grasp. knn's tips are a ONE time affair. You implement them, check to see that things are ok, and forget about them for the most part. However, Just My Opinion's suggestions (change passwords and backup...how original!) need to be done periodically. So...if one is prepared to do daily backups and monthly password changes why should they be so virulently opposed to a ONE TIME set of reasonable precautions. This can only mean that:

1. They wish they had thought of knn's tips. Reason for rant: JEALOUSY.
2. They are hackers. Reason for rant: ANGER
3. They are people who thrive on an public's fear of hackers. Reason for rant: GREED.
4. They blindly obey authority which in this case is phpBB. Reason for rant: IGNORANCE.
5. And then there might be Just My Opinion's very own private (500MB>30MB) reason for rant: PRIDE.

I hate to frame these "reasons" in somewhat biblical terms but nowadays one so rarely sees such labels being used on the truly wicked that I could not resist.

posted by jayray999

Where opinion at?

Just my opinion:

7. If someone chooses to pay me with whatever they wish, that is up to them, but it is far from a requirement.

So my assumption was correct that you get money for fixing unsecure computer systems.

Just my opinion:

Assuming doesn't make an A&& out of me but it sure made one outta you!

Assumptions don't make an ass out of anybody. If I would censor your posts... THAT would make an ass out of me.

Why don't you tell us your URLs?

posted by knn

Re: Where opinion at?

You guys are off the wall and my guess from your attitudes, just young children.

1. NO FREAK BOY! I DON'T GET PAID FOR WHAT I DO!
- My second mom insists on giving me money sometimes for rebuilding or whatever with her computers. Her motive is that I live on a disability income and I can't afford that much.
- My step mother has grabbed stuff from my hand and paid for it when we have been shopping in appreciation for the work I do on her computer.
- I have tried to stop them from what they do but you try and argue with two women you've known all your life and you have always had great respect for.
- I have not collected an other payments for work I do. When someone asks what they owe me I tell them they have already paid me with their thanks!

Quote:

1. They wish they had thought of knn's tips. Reason for rant: JEALOUSY.
2. They are hackers. Reason for rant: ANGER
3. They are people who thrive on an public's fear of hackers. Reason for rant: GREED.
4. They blindly obey authority which in this case is phpBB. Reason for rant: IGNORANCE.
5. And then there might be Just My Opinion's very own private (500MB>30MB) reason for rant: PRIDE.

In response:
1. ROFLMAO Jealousy? Come on now, give it a break, I don't deal in jealousy, I could care less about these so called tips. I was actually going to put them to the test until I read far enough into this mess to see that it is knn who is jealous and full anger.
2. ROFLMAO hacker? For some reason I've never had an interest in hacking, but I do have a friend who is a hacker. But his hacking is for good reason, he catches anyone with an unsecure system and he warns them. So ummmmm, why would a hacker be angry?
3. Thrive on fear? What world are you from? What greed are you talking about?
4. phpBB authority? Are you insane or what? I obey nobody, I am the biggest rebel you've ever met and I'm far from ignorant, unlike you!
5. Oh yes I am just full of pride! ROFLMAO I don't even believe a 500mb database exists in your possession, so where would pride set in?

The way I look at it you are all one person attacking someone for absolutely no reason at all and you are entertaining me to no end. I am going to have to share your stupidity with my members so they can enjoy this ever so hilarious crock of you know what!

posted by Just My Opinion

How old are you?

Just My Opinion:

- My second mom insists on giving me money sometimes for rebuilding or whatever with her computers. Her motive is that I live on a disability income and I can't afford that much.
- My step mother has grabbed stuff from my hand and paid for it when we have been shopping in appreciation for the work I do on her computer.

So that is your experience with hackers? Having helped your moms? Do you actually HAVE a website? I am asking you already the 3rd time for a link.

Just My Opinion:

but you try and argue with two women you've known all your life and you have always had great respect for.

I am happy to see, that you love them and will always stay their beloved child.

Just My Opinion:

1. NO FREAK BOY! I DON'T GET PAID FOR WHAT I DO!

I didn't mention the word "pay".

Just My Opinion:

You guys are off the wall and my guess from your attitudes, just young children.

How old are YOU?

Just My Opinion:

I could care less about these so called tips.

You are trying to invalidate my tips, while your only tip is to make everyone change his password once a month and make a manual backup.

I have nothing against changing passwords, nor against database backups (in fact, as I mention above, I am writing a backup script myself). But invalidating tips like "Password-protect your admin folder" is ridiculous.

Just My Opinion:

I am going to have to share your stupidity with my members so they can enjoy this ever so hilarious crock of you know what!

Please do. The link to this thread is "http://www.in-my-opinion.org/in-my-opinion-3734.html"

posted by knn

Re: How old are you?

How old do you think I am? Give you my url? ROFLMAO Not likely, you so wise find me!

posted by Just My Opinion

Don't take Ritalin in either case

Just My Opinion:

How old do you think I am?

Judging by

•	the mention of your moms

•	the use of "ROFLMAO"

•	the refusal to give out your own URL

•	the discredit of my security tips

•	your self description as "I am the biggest rebel you've ever met"

•	replies such as "you so wise find me!"

you are either young or live a pathetic life.

posted by knn

Re: Where opinion at?

Just My Opinion:

1. ROFLMAO Jealousy? Come on now, give it a break, I don't deal in jealousy, I could care less about these so called tips. I was actually going to put them to the test until I read far enough into this mess to see that it is knn who is jealous and full anger.

So you admit you have not even put these tips to the test and still are foaming at the mouth about them. Your loss by the way. And as for knn being jealous and angry keep in mind that you are posting unsolicited, irrelevant rants on his board without being censored and yet you do not extend the same courtesy to him. If I were knn I would not be jealous but I would definitely be annoyed.

Just My Opinion:

2. ROFLMAO hacker? For some reason I've never had an interest in hacking, but I do have a friend who is a hacker. But his hacking is for good reason, he catches anyone with an unsecure system and he warns them. So ummmmm, why would a hacker be angry?

Fine. You go with your definition of the word hacker. I meant malicious hacker i.e. cracker who would be quite angry if someone like knn goes around making their job harder considering they are probably all script kiddies anyway.

Just My Opinion:

3. Thrive on fear? What world are you from? What greed are you talking about?

GREED for money and recognition. Ok, maybe that is limited to your moms' adulation and pocket money but you get the idea.

Just My Opinion:

4. phpBB authority? Are you insane or what? I obey nobody, I am the biggest rebel you've ever met and I'm far from ignorant, unlike you!

More power to you. I wish your qualities were evident from your posts.

Just My Opinion:

5. Oh yes I am just full of pride! ROFLMAO I don't even believe a 500mb database exists in your possession, so where would pride set in?

Ah ha. So you see there is this deep insecurity about knn's database size. When I wrote the point about PRIDE I was half-joking thinking who would be so childish? Now we know.

posted by jayray999

Goto page Previous
1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15 Next

The time now is 19 July 2008, 07:42
php B.B.