phpBB2Refugees.com Logo
Not affiliated with or endorsed by the phpBB Group

Register •  Login 

Continue the legacy...

Welcome to all phpBB2 Refugees!Wave Smilie

This site is intended to continue support for the legacy 2.x line of the phpBB2 bulletin board package. If you are a fan of phpBB2, please, by all means register, post, and help us out by offering your suggestions. We are primarily a community and support network. Our secondary goal is to provide a phpBB2 MOD Author and Styles area.

The Final phpBB 2 Security Vulnerability
1 members found this topic helpful
Goto page Previous  1, 2, 3, 4 ... 12, 13, 14  Next
 
Search this topic... | Search phpBB2 Discussion... | Search Box
Register or Login to Post    Index » phpBB2 Discussion  Previous TopicPrint TopicNext Topic
Author Message
dogs and things
Board Member



Joined: 18 Nov 2008

Posts: 621
Location: Spain


flag
PostPosted: Tue Jan 27, 2009 10:05 pm 
Post subject: Re: The Final phpBB 2 Security Error

Okay, got it! icon_razz.gif
_________________
phpBB2 will never die, I hope!
Back to top
RMcGirr83
Board Member



Joined: 02 Dec 2008

Posts: 53
Location: East Lyme, CT


flag
PostPosted: Wed Jan 28, 2009 1:05 am 
Post subject: Re: The Final phpBB 2 Security Error

I feel so stealthy now...thanks for the tip Jim!! icon_smile.gif
_________________
Rich McGirr
Back to top
Techie-Micheal
Board Member



Joined: 27 Dec 2008

Posts: 49



PostPosted: Wed Jan 28, 2009 3:30 am 
Post subject: Re: The Final phpBB 2 Security Error

Sylver Cheetah 53 wrote:
Too bad phpBB2 was abandoned by the autors. icon_sad.gif
retired != abandoned

Dog Cow wrote:
Sylver Cheetah 53 wrote:
I am very interested in two things.
1.Is there any way I can scan my board for vulnerabilityes? Maybe on some smart website... I have 50 MODs installed and I can not know how safe they are. icon_smile.gif

You or someone you know would have to look over all the code. There's no automated tool. Put simply, a knowledge of how things work is the only way to be sure.
Actually, there are automated tools out there. The question isn't if they are there, but how effective they are.

Jim_UK wrote:
Nope.
That is for you to specify what referrer you want to send to those sites when you connect to them and not what you want the site to send.
I left that panel blank.
If I wanted to I could add this site and tell it that I want my connection to appear to have come from phpbb.com. Get the idea?

Jim
Except that people would generally know that phpbb.com isn't correct. It is www.phpbb.com. icon_wink.gif

Quote:
The Final phpBB 2 Security Error
What makes you think that there aren't more? icon_razz.gif
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Wed Jan 28, 2009 6:28 pm 
Post subject: Re: The Final phpBB 2 Security Error

Techie-Micheal wrote:

Except that people would generally know that phpbb.com isn't correct. It is www.phpbb.com. icon_wink.gif

Splitting hairs? icon_wink.gif

Techie-Micheal wrote:

Actually, there are automated tools out there. The question isn't if they are there, but how effective they are.

I know that, so I just chose to make a sweeping generalization. Perhaps I should have said, "there are no comprehensive automated tools." icon_mrgreen.gif

Techie-Micheal wrote:

Quote:
The Final phpBB 2 Security Error
What makes you think that there aren't more? icon_razz.gif

Do you know of more? If so, do tell! icon_razz.gif

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield IL Mac 512K Blog Mac GUI
Back to top
Techie-Micheal
Board Member



Joined: 27 Dec 2008

Posts: 49



PostPosted: Wed Jan 28, 2009 10:49 pm 
Post subject: Re: The Final phpBB 2 Security Error

Dog Cow wrote:
Techie-Micheal wrote:

Except that people would generally know that phpbb.com isn't correct. It is www.phpbb.com. icon_wink.gif

Splitting hairs? icon_wink.gif
yes. icon_razz.gif

Quote:
Techie-Micheal wrote:

Quote:
The Final phpBB 2 Security Error
What makes you think that there aren't more? icon_razz.gif

Do you know of more? If so, do tell! icon_razz.gif
I don't know of any (I didn't even know of this one), I just know that as soon as you claim a system is completely secure, someone will come along and find a way in. icon_razz.gif
Back to top
dogs and things
Board Member



Joined: 18 Nov 2008

Posts: 621
Location: Spain


flag
PostPosted: Sat Jan 31, 2009 9:29 pm 
Post subject: Re: The Final phpBB 2 Security Error

Only a few hours to go... icon_sad.gif

It looks like official security updates where abandoned even before the announced date. icon_evil.gif

_________________
phpBB2 will never die, I hope!
Back to top
Jim_UK
Board Member



Joined: 19 Nov 2008

Posts: 541
Location: North West UK


flag
PostPosted: Sat Jan 31, 2009 9:35 pm 
Post subject: Re: The Final phpBB 2 Security Error

If that is the case then I truly am very disappointed.
There would be no other option then but to go with the changes that are on Sourceforge unless someone has a better idea.

Jim
Back to top
dogs and things
Board Member



Joined: 18 Nov 2008

Posts: 621
Location: Spain


flag
PostPosted: Sat Jan 31, 2009 9:52 pm 
Post subject: Re: The Final phpBB 2 Security Error

What really amazes me is the fact that many thousands of boards have knowingly been left without a patch for a known security issue.

That's very irresponsible behavior, as far as I am concerned.

_________________
phpBB2 will never die, I hope!
Back to top
roadhog
Board Member



Joined: 19 Nov 2008

Posts: 95
Location: Central Texas


flag
PostPosted: Sat Jan 31, 2009 10:26 pm 
Post subject: Re: The Final phpBB 2 Security Error

I agree - it's totally irresponsible. Does that imply that we should remove their copyright notices on our boards, (since they no longer offer support), as sign of protest? (As if it matters to them anymore).
Back to top
roadhog
Board Member



Joined: 19 Nov 2008

Posts: 95
Location: Central Texas


flag
PostPosted: Sat Jan 31, 2009 10:30 pm 
Post subject: Re: The Final phpBB 2 Security Error

Jim_UK,

Incidentally, I received an e-mail that started off, "You have been invited to join the private link exchange services (beta) by The Webmasters Kit Team". Is that something that we should join? Any thoughts? I'm guessing that you just ignored it - or am I wrong?

Thanks for any insight.
Back to top
Techie-Micheal
Board Member



Joined: 27 Dec 2008

Posts: 49



PostPosted: Sat Jan 31, 2009 11:01 pm 
Post subject: Re: The Final phpBB 2 Security Error

roadhog wrote:
I agree - it's totally irresponsible. Does that imply that we should remove their copyright notices on our boards, (since they no longer offer support), as sign of protest? (As if it matters to them anymore).
That would be very irresponsible.
Back to top
roadhog
Board Member



Joined: 19 Nov 2008

Posts: 95
Location: Central Texas


flag
PostPosted: Sun Feb 01, 2009 12:47 am 
Post subject: Re: The Final phpBB 2 Security Error

Techie-Micheal wrote:
roadhog wrote:
I agree - it's totally irresponsible. Does that imply that we should remove their copyright notices on our boards, (since they no longer offer support), as sign of protest? (As if it matters to them anymore).
That would be very irresponsible.


Oh? Why so? They appear to have abandoned it. Are you suggesting that they might be planning on reincarnating it in the future? I certainly wouldn't want to do anything that might jeopardize future support. icon_rolleyes.gif
Back to top
roadhog
Board Member



Joined: 19 Nov 2008

Posts: 95
Location: Central Texas


flag
PostPosted: Sun Feb 01, 2009 12:52 am 
Post subject: Re: The Final phpBB 2 Security Error

Is it just me, or has anyone else noticed that once we block the referrer, the automatic redirect after posting, no longer works?
Back to top
Chapter 24
Board Member



Joined: 30 Dec 2008

Posts: 36



PostPosted: Sun Feb 01, 2009 1:41 am 
Post subject: Re: The Final phpBB 2 Security Error

The auto-redirect seems to still be working alright for me.

Thanks everyone for all the information in this thread. I installed the Firefox plug-in and now use that browser when visiting my forum.
Back to top
Techie-Micheal
Board Member



Joined: 27 Dec 2008

Posts: 49



PostPosted: Sun Feb 01, 2009 1:45 am 
Post subject: Re: The Final phpBB 2 Security Error

roadhog wrote:
Techie-Micheal wrote:
roadhog wrote:
I agree - it's totally irresponsible. Does that imply that we should remove their copyright notices on our boards, (since they no longer offer support), as sign of protest? (As if it matters to them anymore).
That would be very irresponsible.


Oh? Why so? They appear to have abandoned it. Are you suggesting that they might be planning on reincarnating it in the future? I certainly wouldn't want to do anything that might jeopardize future support. icon_rolleyes.gif
Techie-Micheal wrote:

Sylver Cheetah 53 wrote:
Too bad phpBB2 was abandoned by the autors. icon_sad.gif
retired != abandoned


It is also very immature of you to remove the copyright just because you are upset that the product is no longer supported.

I would suggest everybody here read up on the Software Development Lifecycle. Eventually software support has to end. Software comes to the point where in its current state it can no longer be maintained. It ages. It is your choice to stay on phpBB2, and now you must accept the consequences of doing so.
Back to top
Display posts from previous:   
Register or Login to Post    Index » phpBB2 Discussion  Previous TopicPrint TopicNext Topic
Page 3 of 14 All times are GMT
Goto page Previous  1, 2, 3, 4 ... 12, 13, 14  Next
 
Jump to:  

Index • About • FAQ • Rules • Privacy • Search •  Register •  Login 
Not affiliated with or endorsed by the phpBB Group
Powered by phpBB2 © phpBB Group
Generated in 0.0208 seconds using 15 queries. (SQL 0.0012 Parse 0.0006 Other 0.0189)
phpBB Customizations by the phpBBDoctor.com
Template Design by DeLFlo and MomentsOfLight.com Moments of Light Logo