 | Do I need to install these MODs ? |  |
Posted: 08/25/2007 4:34 PM |
|
|
|
|
|
| Citation |
| Posts |
1017 |
| Word Cnt. |
64,643 |
| BDay |
Apr 18 |
| Sign |
Aries |
| Sex |
 |
|
|
|
Joined: Apr 01, 2007
Local time: 5:55 AM
Location: UNITED ARAB EMIRATES
|

|
|
|
|
 |
Hi Nightrider,
I got some of these MODs which are for the security purpose. Are they good enough to install on my all boards? What do you suggest about them.
MOD Title: LoginEncryptionMod
## MOD Description: This mod re-encrypts passwords in the database and in the auto-login cookie, so that attackers couldn't login even if they got the user's password hash (usually attackers login via the auto-login cookie if they got the password hash). With this mod, it will be almost impossible for the attacker to bruteforce a password, even a short one.
And rest you can check at
http://www.phpbbhacks.com/searchresults.php?query=config
Do you suggest me to install any of these  |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 7:10 AM |
|
|
|
|
|
| Citation |
| Posts |
826 |
| Word Cnt. |
37,329 |
| BDay |
Oct 2 |
| Sign |
Libra |
| Sex |
 |
|
|
|
Joined: Apr 03, 2007
Local time: 8:55 PM
Location: Somewhere in Maryland
|

|
|
|
|
 |
| Can I join in and ask about Database Backup Tool and Small Shoutbox. I need to know what this 'shoutbox' is in detail. Thank you!! |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 9:05 AM |
|
|
|
|
|
| Citation |
| Posts |
1017 |
| Word Cnt. |
64,643 |
| BDay |
Apr 18 |
| Sign |
Aries |
| Sex |
 |
|
|
|
Joined: Apr 01, 2007
Local time: 5:55 AM
Location: UNITED ARAB EMIRATES
|

|
|
|
|
 |
I don't know about Database Backup Tool but you can make Database of your SQL from phpMyAdmin, select your database, than on top click Export, than on next screen select all the tables and at the bottom tick Save As and Gzip Format and start downloading your backup of your MySQL Database.
As far as Shoutbox is concerned, do you need database driven Shoutbox or normal one. You can check at my site www.funwadi.com/forum where you will see Shoutbox which is not database driven means anyone can join it by changing their username in Shoutbox to anything whereas in database driven Shoutbox will have the same username through which the user have registered in the forum and won't be able to change it. As compare to db driven Shoutbox I like the current Chatbox which I am having it because in this when a user types a message and sends, it appears on the screen automatically whereas the db driven shoutbox message appears to the other user after few seconds and sometimes takes much longer period.
So what do you like to have now  |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 10:38 AM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 9:55 PM
Location: St Pete, FL
|

|
|
|
|
 |
| abdulbasit wrote:
|
Do you suggest me to install any of these
|
I really don't see much of a benefit in any of these. If you really want to try them, I don't see why you shouldn't but you probably should install them in a Test environment first...
Unless you have changed the permissions on your config.php file and allowed access to the world or unless you have made it so others could upload utility files to your server that people can then use to retrieve your config.php information, I really don't see that there is much chance that anyone can gain access to that information...
If installing these security MODs allows you to sleep better at night, perhaps it's not a bad idea to install them. I really doubt that they will ever be necessary, but you never know. I think it is much better to make sure to maintain good backups of everything so that no one could ever cause much harm, no matter what...
 |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 2:16 PM |
|
|
|
|
|
| Citation |
| Posts |
826 |
| Word Cnt. |
37,329 |
| BDay |
Oct 2 |
| Sign |
Libra |
| Sex |
 |
|
|
|
Joined: Apr 03, 2007
Local time: 8:55 PM
Location: Somewhere in Maryland
|

|
|
|
|
 |
Abdulbasit - I like Chatbox better BUT, I'd have to MOD the heck out of it. (laughs). Thanks for the info. as I am about to check it out in full.
BTW - your forum is HUUUGE. And love the NR props there. He's such a steller human being. Isn't he?
NR - I really have no worries (YET), as you know, with my forum. I think I really want to know more about that db maintenance moreso than anything.
Thanks!!
Ok - how do I make my forum host this Chatbox? Does it need some sort of flash MOD added?? |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 2:29 PM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 9:55 PM
Location: St Pete, FL
|

|
|
|
|
 |
I have a Database Maintenance MOD installed here and it's probably the same one that you saw. It adds a whole new section to the ACP and organizes all the Database functionality there, including new options. I think it is worth installing. You can find many of the Admin MODs that I have installed here in this folder:
http://4fxearth.net/phpBB2/downloads/phpBB/MODs/Admin/
Not all of the MODs in this directory are installed here, but most are...
 |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 4:45 PM |
|
|
|
|
|
| Citation |
| Posts |
1017 |
| Word Cnt. |
64,643 |
| BDay |
Apr 18 |
| Sign |
Aries |
| Sex |
 |
|
|
|
Joined: Apr 01, 2007
Local time: 5:55 AM
Location: UNITED ARAB EMIRATES
|

|
|
|
|
 |
| Quote:
|
I really don't see much of a benefit in any of these. If you really want to try them, I don't see why you shouldn't but you probably should install them in a Test environment first...
Unless you have changed the permissions on your config.php file and allowed access to the world or unless you have made it so others could upload utility files to your server that people can then use to retrieve your config.php information, I really don't see that there is much chance that anyone can gain access to that information...
If installing these security MODs allows you to sleep better at night, perhaps it's not a bad idea to install them. I really doubt that they will ever be necessary, but you never know. I think it is much better to make sure to maintain good backups of everything so that no one could ever cause much harm, no matter what...
|
Even after installing such MODs which secures more to config.php still the board can get hacked? If yes, than there is no use to install such MODs yeah
Yes, you are right. Keeping backups will save us from lots of damage and I try to make backups once in a week as there are loads on other sites for which I have to look so get no time to make daily backup for each sites  |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 5:04 PM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 9:55 PM
Location: St Pete, FL
|

|
|
|
|
 |
No matter how much security you install, there is always a chance that someone will find a way to hack your site. So installing Security MODs does not guarantee that you won't get hacked. It just makes it a bit harder for them to do so...
You should maintain your database backups at what you can afford to lose. If you can't afford to lose more than a day's worth of posts, then you should be doing a database backup at least once per day. If you can afford to lose more, then you can adjust what you backup accordingly. I think rb is doing a backup of our database once every couple of days or so...
If your software isn't changing, meaning that you aren't adding MODs to the code, then you only have to get the latest backup of the forum once. There is no need to do it regularly if nothing is changing...
 |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 5:17 PM |
|
|
|
|
|
| Citation |
| Posts |
1017 |
| Word Cnt. |
64,643 |
| BDay |
Apr 18 |
| Sign |
Aries |
| Sex |
 |
|
|
|
Joined: Apr 01, 2007
Local time: 5:55 AM
Location: UNITED ARAB EMIRATES
|

|
|
|
|
 |
Ahaan, alright. I understand now  |
|
|
 |
 |
| Back to Top |
|
|
 | Re: Do I need to install these MODs ? |  |
Posted: 08/26/2007 5:45 PM |
|
|
|
|
|
| Site Admin |
| Posts |
30757 |
| Word Cnt. |
2,628,690 |
| BDay |
Jul 28 |
| Sign |
Leo |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 9:55 PM
Location: St Pete, FL
|

|
|
|
|
 |
Kewl. It really makes sense once you understand it...
 |
|
|
 |
 |
| Back to Top |
|
|
 | Information |  |
|