neuron2's video forum hacked

[Sylf]

Originally posted by rjamorim
vBulletin or Invision 2.0x if they are willing to pay, or Invision 1.3.1 if they aren't.

<OT>Invision's licensing scheme changed between 1.3.0 final and 1.3.1. I don't think 1.3.1 is considered free. And the development and patch on 1.3.x tree of that forum has stopped, so it's not safe when more security flaws are uncovered there.

I've also found that 1.3.x is not completely compatible with PHP5. The fix on this was easy though : Just had to eliminate all the duplicate member variable declarations in handful of classes.</OT>

[rjamorim]

Originally Posted by Sylf

<OT>Invision's licensing scheme changed between 1.3.0 final and 1.3.1. I don't think 1.3.1 is considered free. And the development and patch on 1.3.x tree of that forum has stopped, so it's not safe when more security flaws are uncovered there.

1.3.1 is still free. Actually even 2.0 is free. A few hours after the free version of 2.0 was released, they pulled it and replaced it with the trial version. Whoever was lucky enough to download the free 2.0 version can keep using it...

Also, there's a strong community of enthusiasts taking care of patching the forum engine after security advisories are published by secunia and the like. It's also a testament to IPB's superior security model that only a handful of holes have been found since it was released.

Anyway, I resurrected this thread because of this Netcraft article:
http://news.netcraft.com/archives/20...s_persist.html

Enough said...

[Guest]

Thanks for reminding me to backup my forum.

[rjamorim]

Originally Posted by neuron2

Thanks for reminding me to backup my forum.

Hehe. Consider creating some automated backup process.