phpbb forum got hacked.. crap

[Amnesic]

I had last update.. I don't know what happened..

Any idea?

[sundown]

Was there anything else on the server? Are you sure it was phpbb? Not saying phpbb is super-secure, just wondering.

What are you going to replace it with?

[Amnesic]

yeah it was phpbb.. and there was no other script on the virtual account. The server is runing phpsuexec too..

[free4porn]

strange, hope you find the cause

[StuartD]

phpbb should be renamed "hole in a server"

[Amnesic]

what a crappy application.. any alternative?

[madmaxxx]

You should install some security add ons and mods to php. I did it and it works really good!

[sfera]

try vbulletin or invisionpb looks nice

[ScannerX]

email me i can help
[email protected]

[Amnesic]

ok thanks I'll look into that, if anyone got more alternative please share

[Amnesic]

email me i can help
[email protected]

email sent

[u-Bob]

phpbb = bad idea.

[stickyfingerz]

Ive been running phpbb for at least 4 years now. Never had an install hacked that I couldnt easily fix. Phpbb is secure.

[madawgz]

switch over to vBulliten!

[CodeMonkey1385]

i recommend vanilla as a forum:
getvanilla.com

[FleshJoe2005]

I looked and there's some security alerts about phpbb from Dec 2005 and from Sep 2004, nothing since then. So either you're running a super-ancient phpbb or this is a new exploit.

[Amnesic]

must be new I got latest release ... hum

[jayeff]

must be new I got latest release ... hum

And if you really believe you were hacked via an exploit in phpBB, have you reported to them what happened, to maybe save someone else the same problem?

[bknoob]

if you'd like to switch to a free forum, I suggest SMF. phpBB is just a security hole

[Amnesic]

I wanted to create an account on their forum but to put my birthday so now I have to fax them my parents signature.. I am to lazy to signup with another email.

[maxidrom11]

I had nice MusicMatch forum but it was fucked -- i donno what to do either

it is at http://www.audio-video-affair.com/forum/

[Dagwolf]

I hope you were backed up.

[JD]

get smf. secure as a nuns snatch

[dodger21]

Ive been running phpbb for at least 4 years now. Never had an install hacked that I couldnt easily fix. Phpbb is secure.

Just because you've been lucky doesn't mean that it's secure.

[maxidrom11]

I hope you were backed up.

how do i bring it back in practice???

[stickyfingerz]

Just because you've been lucky doesn't mean that it's secure.

Didnt say I hadnt been hacked. Been there done that. Back up your shit on a regular basis. Longest its taken me to fix a hacked forum was 12 minutes.

[Hotrocket]

I wanted to create an account on their forum but to put my birthday so now I have to fax them my parents signature.. I am to lazy to signup with another email.

ummmm how old are you?

[TheJimmy]

get smf. secure as a nuns snatch

been hearing a lot about the strength of the force this one has lately...

must give it a shot, you try it with the seo hack yet?

[fris]

vbulletin is all you should be using

[scottybuzz]

heres a bump

[asdfqwer]

Its hard to answer that question without more info,like what other script were installed on your server,was it hardened etc

[DutchTeenCash]

phpbb should be renamed "hole in a server"

exactly - everyone who uses it is screwed