|
Dark Side
Guest
|
 |
« on: May 12, 2005, 03:52:25 PM » |
|
Is there another BB system that I can use besides this phpBB that can't seem to keep the exploits away? Seems every couple of weeks there's another darn upgrade that just has to be implemented to keep the hacker's at bay. Not to mention the emails I get from LP stating that if the boards I have aren't upgraded soon the sites will be shut down!  Now I realize that LP has to protect itself from malicious goings on. I also realize that since I first implemented the phpBB type of message boards about a year ago on my sites it has gone through no less than 5 upgrades. The last 3 of which were within a couple weeks of each other. Thus my statement: "This is getting old..." Is there a BB system that I can convert my present ones to without losing everything? Is it solid? Or at least, is it more secure than the swiss-cheese phpBB? What about Proboards or Snitz? No offense to anyone but it gets old having to constantly upgrade 3 to 4 boards every couple weeks.  |
|
|
|
|
Logged
|
|
|
|
|
Lupine1647
|
|
« Reply #1 on: May 12, 2005, 03:54:58 PM » |
|
You can use SMF, and just so you know Lp isn't threatning that they'll shut down your website, quote from the last e-mail sent out: Hello, This is to inform our customers of a security alert pertaining to phpBB, a popular forum script. There was a recent security issue with older phpBB versions. More information on this can be found here: http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194. If you use this script, please ensure you have upgraded to the latest version, 2.0.15. If you do not use this script, you do not need to do anything. phpBB boards running versions less than 2.0.15 must be upgraded. It is imperative that this email is not ignored and that all customers who run a phpBB board upgrade immediately to protect the integrity of their site. Because of the severity of this exploit, we will begin running a script to find forums that have not been upgraded. Please note that it is highly recommended that you back up your site before any major change. Lunarpages can supply a backup to you. However, restoring a site is charged at $75.00 per hour unless you have our Premium Restore Service. For more information on this, please see: http://helpdesk.lunarpages.com/faq.php?do=article&articleid=348. For questions or concerns regarding this email, please contact support@lunarpages.com. Thank you for your immediate attention to this matter. Lunarpages Support |
|
|
|
|
Logged
|
|
|
|
|
fretnmore
|
|
« Reply #2 on: May 12, 2005, 04:12:42 PM » |
|
I am currently testing SMF myself. Your current phpbb will convert over to SMF easily, so you won't lose anything in transferring to SMF. And from what I've been told the updates for SMF are a one click and your done process. Dani has written a How To for converting to SMF here. |
|
|
|
|
Logged
|
|
|
|
|
confused
|
|
« Reply #3 on: May 12, 2005, 04:59:48 PM » |
|
SMF......Some very nice people here recommended me to it and I love it. WAY better than phpBB I think. Also, click of a button to upgrade so even if it is every few weeks (which it isn't) then its that simple. Themes are fine and so are mods. At least I think most of them are and not affected by the upgrade.
|
|
|
|
|
Logged
|
|
|
|
|
Shecky
|
|
« Reply #4 on: May 12, 2005, 07:40:41 PM » |
|
phpBB boards running versions less than 2.0.15 must be upgraded. It is imperative that this email is not ignored and that all customers who run a phpBB board upgrade immediately to protect the integrity of their site. Because of the severity of this exploit, we will begin running a script to find forums that have not been upgraded. The implication here is that, if you do not upgrade and their script finds it, action will be taken. Why else would they be checking? While this is far from a outright threat, I do not enjoy being placed "under the gun", so to speak. I keep my site upgraded as a general rule, although keeping up with phpBB's near-constant upgrades is getting taxing, but I feel like LP treats us like children sometimes. "If you haven't upgraded, do so now... and we'll be checking to make sure that you did so!" Hey, should I clean my bedroom and wash behind my ears, too? Will LP be checking for that, too? Seriously, folks. The form-letter comes off as heavy-handed (in my opinion), and sounds like y'all think we're a bunch of irresponsible kids. If my site had ever been exploited in the past, maybe I could see getting this particular letter, but to send this one out to everyone is rather insulting to all of us who use phpBB and maintain our sites responsibly. Maybe some rewording of the letter is called for? Just a suggestion. |
|
|
|
|
Logged
|
|
|
|
|
GMTurner
|
|
« Reply #5 on: May 12, 2005, 07:57:07 PM » |
|
Given the vast number of people who do NOT upgrade their installations which have resulted in numerous issues in the past, I have no problem with LP reminding people they need to stay on top of things... since some of these exploits could in turn impact my site if it's on the same server, I'm glad to know that LP is taking steps to protect my interests... now, the fact I don't have phpBB installed and still have to delete these emails about upgrades every few weeks is another issue...  |
|
|
|
|
Logged
|
The above post was made at a time when I gave a dang and doesn't necessarily reflect my current views or opinions. For those no longer with us ...  Turner's Lounge |
|
|
|
smd
|
|
« Reply #6 on: May 12, 2005, 07:58:48 PM » |
|
Just go to smf, less exploits, easier mods to install.
|
|
|
|
|
Logged
|
|
|
|
|
Shecky
|
|
« Reply #7 on: May 12, 2005, 08:03:36 PM » |
|
Reminders are not the problem. I just don't like the way this particular reminder is worded, is all. As for those folks who simply refuse to upgrade their scripts within reasonable time-spans, I have no pity for them if LP shuts 'em down.
They are our scripts, and we're responsible for keeping them up-to-date. LP has every right to take action against those who allow exploitable scripts to be left unpatched on LP's servers.
That said, I don't think LP should be sending out this particular form-mail, in its current form. The whole "We'll be running scripts to check up on you!"-bit makes it sound like we're all being regarded as irresponsible phpBB users, even if we are not.
|
|
|
|
|
Logged
|
|
|
|
|
Shecky
|
|
« Reply #8 on: May 12, 2005, 08:06:47 PM » |
|
Just go to smf, less exploits, easier mods to install. Perhaps, but when it gets popular (and hackers start looking for exploits there in earnest), you'll see the same e-mail warnings from LP regarding SMF as well. I'm content to remain with phpBB for now, as the upgrades aren't too much of a bother to perform. |
|
|
|
|
Logged
|
|
|
|
|
Danielle
Guest
|
|
« Reply #9 on: May 12, 2005, 08:16:00 PM » |
|
I'm sure you will when it becomes more popular for SMF. Given it has an auto updater that takes 30 seconds or less to upgrade to newest version in the admin panel, there is even less reason for someone running SMF to not upgrade actually.
|
|
|
|
|
Logged
|
|
|
|
|
GMTurner
|
|
« Reply #10 on: May 12, 2005, 08:27:32 PM » |
|
From my understanding the upgrades in SMF are easier, especially for modded boards... but since I don't run any board, it's all second-hand info...
sorry that LP's warning upset you, but I'm sure you understand that they couldn't take the time to send a custom email to every user after taking the time to try and verify their history of upgrading in a timely fashion. Now, I agree that the wording might have been changed, but a lot is in how you read it. I didn't take it as a threat, indication that you (or me) were irresponsible in our upgrade history, or anything other than what they said... but again, that's because I know for sure it doesn't apply to me since I don't use phpBB...
not trying to argue it or anything since I think we both agree it isn't worth it... just presenting an alternative viewpoint from someone who didn't take it the same way...
EDIT: Okay, so I took a break while typing this post so another comment about the upgrading in SMF got posted already... oh well...
|
|
|
|
|
Logged
|
The above post was made at a time when I gave a dang and doesn't necessarily reflect my current views or opinions. For those no longer with us ... Turner's Lounge |
|
|
|
Dark Side
Guest
|
|
« Reply #11 on: May 13, 2005, 02:57:18 AM » |
|
I've no problem keeping things up-dated with my sites. My only complaint is the frequency with which phpBB seems to use in kicking out upgrades. I'll be making the required upgrades on Monday as it's the only time I'll have to do so. Once they are completed, I'll be looking to see if this SMF type BB will be worth the trouble, if any. On another note here...I hope my original post didn't come off the wrong way. I in no way meant to imply that I took the email as a threat to upgrade "or else". Let's just say that after getting both the email from phpBB and then from LP...I was becoming frustrated by the too frequent upgrades. It truly is time to seek out another BB to use. One hopefully a tad bit more secure.  |
|
|
|
|
Logged
|
|
|
|
|
TranzNDance
|
|
« Reply #12 on: May 13, 2005, 07:54:20 AM » |
|
I felt that it was "getting old" back at version 2.0.11 and switched to SMF... and I'm so glad I did. It's like moving from the smog-filled air of Los Angeles to the lovely blue skies of San Francisco Bay Area. Moving can be psychologically difficult but it's worth it. And converting to SMF is nowhere near as difficult as moving between Southern and Northern California. |
|
|
|
|
Logged
|
|
|
|
|
Rick_E
|
|
« Reply #13 on: May 13, 2005, 09:47:15 AM » |
|
The LP Fantastico only installs 2.0.13 and won't upgrade a current installation beyond that. I understand we can upgrade manually, but then the whole idea of Fantastico is to automate installs. The current Fantastico version has 2.0.14 http://netenberg.com/fantastico_scripts.php . |
|
|
|
|
Logged
|
|
|
|
|
JamesG
|
|
« Reply #14 on: May 13, 2005, 10:06:37 AM » |
|
it will update them if it is unmodified, but if you have a mod or anything it wont.
|
|
|
|
|
Logged
|
|
|
|
|
