Re: phpBB alternatives?
| From: | Chris Shiflett | Date: | Wed, 09 Feb 2005 01:55:48 +0000 |
| Subject: | Re: phpBB alternatives? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-208310@lists.php.net to get a copy of this message | ||
--- Tony Di Croce <dicroce@gmail.com> wrote:
> Due to the recent vulnerabilities discovered in phpBB and the
> content of this page:
> http://www.phpbb.com/
> I have decided to consider other options for my forum needs... Does
> anyone have any reccomendations for a PHP based forum software?
FUDforum has proven to be much more secure over the years:
http://fudforum.org/forum/
My complaint with FUDforum is that it's fugly. :-) I find phpBB to be much
more attractive. Unfortunately, it has had numerous security
vulnerabilities over the years. I've never examined the code, so I'm not
sure if it's due to a poor design or just developer mistakes, but I
wouldn't feel comfortable deploying it.
While I agree with your decision, I disagree with using their recent
misfortune to support a switch. Server security is an entirely different
field - a secure application doesn't make a secure server, and a secure
server doesn't make a secure application.
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security - O'Reilly HTTP Developer's Handbook - Sams
Coming Soon http://httphandbook.org/