Security and vBulletin

[Jair]

Is the latest version of vBulletin secure enough that you don't need to do anything to protect from hackers? If not, what mods/things should I do to make sure my board is completely secure?

[nexialys]

hackers will always find a way to crack a site if they feel the need to do so...

vBulletin have a solid security system, but it's a script... a hacker who have access to your server will be able to crack the codes anyway... your server is your first target to look at about security, not the software you use.

the internet will never be safe and completely secure... even Bill Gates with his fortune is not able to make it secure... imagine the guys here!

[Guest190829]

Although Nexialys is right that no software is 100% secure, don't let that scare you.

A default up-to-date version of vBulletin is your best bet to secure your community...also note that the more third-party modifications you install, the bigger possibility that your community is open to exploits.

So, keep your installation up to date and limit the amount of modifications you install.

Finally make sure to click "install" for the modifications you download here so you can get notified to any updates regarding the modifications you use on your site.

[Jair]

Thanks guys. If that's the case, how do you properly make a full backup? I'd like to do it once a week so if I ever were hacked, I wouldn't lose much info.

[Opserty]

You host should keep regular backups, if they don't you should request they do so.

If you wish to create your own backup you can see the manual: Backing-up your MySQL Database Manually (http://www.vbulletin.com/docs/html/manual_database_backup)

[Dismounted]

The only reliable method of backing up and restoring a database is with shell access via telnet or ssh. This is because backing up with a PHP script like that in the Admin CP or phpMyAdmin can result in PHP timeouts errors and an incomplete backup file. Please see the instructions here:

Backup:
http://www.vbulletin.com/docs/html/maintenance_ssh_backup

Restore:
http://www.vbulletin.com/docs/html/maintenance_ssh_restore

P.S. If you don't have shell access, some people have also reported success with these scripts:

MySQLDumper:
http://www.mysqldumper.de/en/index.php

MySQLHotxcopy:
http://www.vbulletin.com/forum/showthread.php?t=134821&highlight=mysqlhotcopy

Bigdump:
http://www.ozerov.de/bigdump.php