People getting trojans on MapCore, come here

[Thrik]

After a lot of serious pissing around (this current host is seemingly falling apart) I've managed to get the forum files and database duplicated onto my own superb hosting. I've never been able to get the virus/trojan/whatever messages to appear myself so I need you guys who got it before to test it:

http://mapcore.ryanjohnwilliams.com/

If you still get it on there then we can be sure that the forum files themselves are the cause; if not, then it's the web host.

Just have a look around, do things that caused the trojan errors before, etc.

Feel free to test in whatever way you like there because the database will inevitably be wiped. Nothing you do should have any affect on the real forums. Just don't get confused and screw around on the real forum by mistake -- look at the address bar.

[Sentura]

it works fine for me, nothing wrong whatsoever (ie not once did i get the virus after about 5 mins of testing(usual outbreak time on normal forums))

[skdr]

Tested. Doesn't give me any trojan/virus warnings.

Then came back here and immediately got few warnings.

[Mazy]

Yeah same, no warnings there at all. Here? Can't press anything without getting a pop-up about it :G

[-HP-]

Tested. Doesn't give me any trojan/virus warnings.

Neither does here for me!

[Baumwoll-Auge-Joe]

If you don't want to get your site hacked and infected with trojans, switch to a secure forum software. phpbb is the worst software you can get. Switch to SMF (http://www.simplemachines.org/), the security is very high and you can import your phpbb forum into SMF.

[Thrik]

phpBB really isn't that bad, and there's no evidence to suggest it's phpBB that's caused the security breach. phpBB is a lot more inherently secure anyway, and this trojan shit was appearing before we upgraded and on non-phpBB pages. Plus, people went mental over even upgrading to phpBB3 because of the changes -- nevermind whole new software!

Thanks for having a look, guys. I'll talk with Mojo about moving forward from here.

[Baumwoll-Auge-Joe]

You can trust me, phpbb is the worst forum software you can get on planet earth. If you don't trust me, maybe you trust some other resources:

http://secunia.com/search/?search=phpbb&w=0

119 Vulnerabilities

Compare to SMF:

http://secunia.com/search/?search=simplemachines&w=0

4 Vulnerabilities

Even if you don't like SMF, every other forum software is safer than phpbb.

[Thrik]

I'm aware that vulnerabilities exist, however if you actually look into the vulnerabilities the majority of recent-ish ones are due to third-party software or other such add-ons, and the problems were patched quite quickly. Most of the real problems occurred ~2006.

I meant to say that phpBB 3 is more inherently secure above. None have been discovered in phpBB 3 to my knowledge yet, and if they are they will most probably be patched quickly as the phpBB community is very large and vulnerabilities are reported quickly. An SMF exploit could go undetected for months on end before someone finally notices it, just like they have in Windows and Mac OS X.

Indeed, the reason there are so many listed vulnerabilities for phpBB is because it's so popular. There are quite simply infinitely more phpBB forums out there than SMF forums, and thus less interest from dedicated programmers to find security exploits. Exactly the same is true of WordPress, which has had a large number of vulnerabilities found yet is used on an incredibly wide scale without problems.

As long as the vulnerabilities are patched quickly when they're found it's fine. The simple fact is that vulnerabilities exist in all software, regardless of how much their high horse developers might say it's secure. It's no coincidence that the 'most secure' applications are usually also amongst the least popular.

[Baumwoll-Auge-Joe]

Google tells me 11.8 Million SMF installations and 26.5 million phpbb installations, so both is very popular. If you know PHP I would suggest you to take a look to the source code of each, you will see a big difference.

I don't want to advertise SMF, I only want to take care of this community and suggest you only not to use phpbb. Even if there are fast patches in the future, let's hope the hackers and bots will not know before these exploits.

[Sentura]

to put it nicely auge joe: i don't think the topic is up for discussion.