bigdank Posted August 14, 2014 Share Posted August 14, 2014 Hello, Just wondering if anyone knows what the most secure version of IPB or Xenforo is currently. I currently have IPB 3.4.6 installed would i need any patches and is xenforo more secure? Quote Link to comment Share on other sites More sharing options...
H.Paul Posted August 15, 2014 Share Posted August 15, 2014 no shure, ipboard is more secure ! Quote Link to comment Share on other sites More sharing options...
Derosier Posted August 16, 2014 Share Posted August 16, 2014 (edited) I would like to know, in general. Which is the most secure software (including) plugins. As I'm looking to launch a site myself and I would like the most secure site I can produce. Edited August 16, 2014 by Derosier Quote Link to comment Share on other sites More sharing options...
Derosier Posted August 19, 2014 Share Posted August 19, 2014 I'd go with IP.Board honestly, but for speed I'd go with MyBB/vBulletin/XenForo. Most IP.Board forums can be taken down by holding down F5 for some retarded reason - it eats up the entire resources unless you know how to configure the firewall correctly. Really never knew that about f5. I personally really like IP.Board although I feel as if it misses something. 1 Quote Link to comment Share on other sites More sharing options...
GROTiUS Posted August 19, 2014 Share Posted August 19, 2014 phpbb is the most secure forum software. but ipb 3.4.6 with all 3 security patches should be enough 1 Quote Link to comment Share on other sites More sharing options...
Derosier Posted August 20, 2014 Share Posted August 20, 2014 phpbb is the most secure forum software. but ipb 3.4.6 with all 3 security patches should be enough Appreciate it. Quote Link to comment Share on other sites More sharing options...
customcoding Posted December 3, 2014 Share Posted December 3, 2014 Latest IPB is usually the most secure BUT this is always dependant on the host or dedicated server & the protections / php functions that are in place / disabled. here is a tip: Disable the following functions in your php.ini you can make a php info page to find the location of your php.ini how to make a phpinfo php file - http://kb.mediatemple.net/questions/764/How+can+I+create+a+phpinfo.php+page%3F#gs Disabled PHP Functions escapeshellarg, escapeshellcmd, exec, ini_alter, parse_ini_file, passthru, pcntl_exec, popen, proc_close, proc_get_status, proc_nice, proc_open, proc_terminate, show_source, shell_exec, symlink, system, pcntl_alarm, pcntl_fork, pcntl_waitpid, pcntl_wait, pcntl_wifexited, pcntl_wifstopped, pcntl_wifsignaled, pcntl_wexitstatus, pcntl_wtermsig, pcntl_wstopsig, pcntl_signal, pcntl_signal_dispatch, pcntl_get_last_error, pcntl_strerror, pcntl_sigprocmask, pcntl_sigwaitinfo, pcntl_sigtimedwait, pcntl_exec, pcntl_getpriority, pcntl_setpriority, Quote Link to comment Share on other sites More sharing options...
Zemus Posted December 4, 2014 Share Posted December 4, 2014 The term "more secure" is rather ambiguous and could mean many different things in different situations. As for secure (or security) you need to fully understand the security mechanisms of the server where your board is hosted and the ways that server protects your data. Whenever I am installing a new board system the first steps to have a "good" security sheme is the way you set-up your servers virtual hosts and he permissions granted to the different pieces of code and server programs. I personally always use (80%) a LEMP stack VPS, and I always make sure to secure the MySql installation. If you have the funds (an extra 5$ a month) I recommend setting up a reverse proxy server that act in between the client you destination server. Another major security breach (for forums) is the Welcome email-> if your server is setup wrong the email that are sent out have your "real" IP or hosting provider IP. This enables anybody who signs up to your forum to know where your site is hosted.. It is then very easy to signup for an account on the same server and hack your database or fudge your site. I've seeen it, i've done it. The only way to "secure" you IPB or Xen or Social Eng (etc)installation is to secure the server it resides on. I also recommend replacing mysql with mariadb on your server. 1 Quote Link to comment Share on other sites More sharing options...
KoenN Posted December 4, 2014 Share Posted December 4, 2014 I recommand ipboard. it may not be the fastest but it is safe Quote Link to comment Share on other sites More sharing options...
TheyCallMeFox Posted December 4, 2014 Share Posted December 4, 2014 IP.Board is pretty safe , but this is all relative , as the hosting company and site owner play a major role in security of the site. Quote Link to comment Share on other sites More sharing options...
Johnny Posted December 5, 2014 Share Posted December 5, 2014 IPB isn´t secure at all. 1 1 Quote Link to comment Share on other sites More sharing options...
T-N-Z Posted December 5, 2014 Share Posted December 5, 2014 Really never knew that about f5. I personally really like IP.Board although I feel as if it misses something. I think that can be fixed with mod_evasive on apache. Quote Link to comment Share on other sites More sharing options...
Phun Posted December 5, 2014 Share Posted December 5, 2014 IPB isn´t secure at all. 1 Quote Link to comment Share on other sites More sharing options...
poon Posted December 6, 2014 Share Posted December 6, 2014 IPB is for sure a very safe board. Max security imo Quote Link to comment Share on other sites More sharing options...
Ninetailz Posted January 29, 2015 Share Posted January 29, 2015 IPB isn´t secure at all. That made me laugh XD BTW In my opinion IPB is secure :3 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.