Log in

View Full Version : How secure is your board?

Zzed
05-02-2003, 06:44 PM
What additional measures have you taken to ensure the security of your board and its private forums? How do you know people browsing your private forums are really who they are and not just some hacker that got a hold of their password?
flup
05-02-2003, 07:04 PM
Hmm good point.

I have got my AdminCP secured with .htaccess
Maybe a good hack request:

-> Grand users access to subforums by IP adres..... ;))
Zzed
05-02-2003, 07:09 PM
The host based security is a good option, but it may be somewhat impractical. I have moderators who are on dialup and have 200+ IP addresses. And sometimes these IP addresses span over several class C IP's.
Chris Gwynne
05-02-2003, 07:10 PM
And for the people with non static IP addresses?
Or for those people who log in from several computers? ;)
flup
05-02-2003, 07:12 PM
Well ok, logical, i thought about that before posted.
But you can gain access for the ones only wich are using one IP (look @ their ip @ userCP)........

Give access by user id isn't that secure either........or make a password on it :/ That's actually the only option missing in vB:
a passsword to set on a forum, in all other forums there is one :)
Zzed
05-02-2003, 07:15 PM
There is a hack by Shaolyen that allows you to password protect your forums: https://vborg.vbsupport.ru/showthread.php?s=&threadid=50012
filburt1
05-02-2003, 07:32 PM
Daily (sometimes more) backups of the database so it won't be a tragedy should WDF be completely screwed. Also .htaccess.

Most importantly I don't let my vB version rot away into the realm of obsolesence.
Zzed
05-02-2003, 07:34 PM
Can you give me an example of the .htaccess based security?
filburt1
05-02-2003, 07:34 PM
At WDF there's a tool that makes a .htaccess and .htpasswd file for you; http://www.webdesignforums.net/ , .htaccess generator in the dropdown.
NuclioN
05-02-2003, 08:51 PM
So....the file .htaccess goes into the dir you want to protect and the .htpasswd goes under the webroot???
filburt1
05-02-2003, 09:33 PM
Yes to the first part, go through the Generator to get the second part (you can make it whateve ryou want).
Zzed
05-02-2003, 09:38 PM
Thanks Filburt. :) I signed up on your board. And I got the files from the pulldown. :)

But, going back to the topic, what else can be done for securing a board?
flup
05-02-2003, 09:57 PM
Several JAVA logins behind eachother? :P
Well, there are many ways to secure, per haps make a second login or something. so ppl have to login with 2 different passes before they get access :|
!!!cyr0n_k0r
05-03-2003, 06:43 AM
What kind of information are you trying to hide?
If your not the CIA or have trade secerts on your board.. do you really need multiple login scripts with password protected everything?
Dean C
05-03-2003, 12:32 PM
Change the directory of the admin cp to something REALLY hard to guess :)

- miSt
FWF
09-02-2003, 11:08 PM
^ thats a good idea...ive done the same, also i have it password protected aswell as some other goodies :)
BlackDeath
09-05-2003, 05:05 AM
the only security problem most people have is the people who they give access too. you can't hack a vb password and 9x's out of 10, the reason for unauthorized access is someone giving out their own pass or sharing info that is supposed to be private...or someone w/ a really easy pw thats easy to guess...