Welcome to RCF - WHF

bigR · Oct 14, 2004

Hey, Nightrider and RB, have you heard anything about a security hole in the forum software? I got this in email from a web hosting service:

Greetings!

There has been an exploit discovered in older versions of phpBB (Message Board Software) that can allow "hackers" to crash the server that phpBB is running on.

If you have installed the phpBB message board on your account, EVEN IF YOU INSTALLED IT THROUGH CPANEL OR FANTASTICO, you must upgrade immediately to the latest version of phpBB.

We have been suspending accounts all weekend, which have older versions of phpBB and are being compromised, due to this very issue. We are trying to notify customers as we suspend accounts, but this issue has us suspending accounts faster than we can notify.

IMPORTANT: IF YOU ARE RUNNING PHPBB ON YOUR ACCOUNT, YOU MUST UPGRADE TO THE LATEST VERSION IMMEDIATELY OR YOUR ACCOUNT MAY BE SUSPENDED.

If you have any questions please submit a helpdesk ticket or come to our live chatroom: http://www.technicalsupportnow.com

AffordableHOST Support
AffordableHOST.com
Serving the web since 1997

(AffordableHOST, Inc)
[4.1.3 Build 2c Z]

Nightrider · Sep 25, 2004

Thanks bigR for posting this warning. I don't think we have much to worry about though...

I continue to update the board to keep it at the latest release version available. Currently we are at 2.0.11. In the near future, the Beta version of 2.2 will be released as the current phpBB version and I will update the board accordingly if possible. I could probably upgrade to the Beta version now, but I don't want the current bugs in the Beta version to adversely affect our young and growing community...

I also continue to add MODs which are used to enhance and protect the security of our community and our membership. Hopefully we will be able to stay at least a step or more ahead of the hackers at all times. I keep a close eye on the following list of modifications and install them whenever they are needed to promote the security of our community...

All Security-Related MOD's Are Here

Even if the worst were to occur, both rb and I keep good backups of both the source code and database so we would be able to recover from just about anything with a limited chance of loss or downtime...

Thanks again for bringing this warning to our attention...

headbang

bigR · Oct 14, 2004

Thank you, Nightrider. I figured you were on top of things, and kept the board updated and as secure as possible. You and rb do a great job here.

Nightrider · Sep 25, 2004

BigR, I may not always hear or catch all the alerts and suggestions that are circulating out there. So as always, I welcome your input. I would rather be told about something that I'm aware of rather than find out about them after things go south. Please don't ever hesitate to keep us updated when you hear about news that might affect us here. I really appreciate the assistance and input from all of our fellow members...

headbang