bluej,

For .htaccess password protecting directories, if you are unable to do it via cpanel you'll have to manually do it. Just make a simple google search, you'll get it. :)

About db backup files - when you connect to FTP, the top folder you'll see would probably be public_html or htdocs or httpdocs or html. Always save your backups above THIS top folder. Simple as that.

Nice guide :-)

Will this apply to vB4, maybe with a few more dirs?

I guess, I am a newbie too. I know what the cpanel is but I can't find the password directories "place" Some more detailed direction please.

--------------- Added [DATE]1257238460[/DATE] at [TIME]1257238460[/TIME] ---------------

My experience. I just upgraded from 3.6.8 to 3.8.4. In the past I was using Recaptcha and do get the occasional spammer, used "One Touch" to ban him and his IP. Reading somewhere here, someone said that the question was better, so I did that, and promptly got about 20 spammers. I installed more mods recommended here, but I think going back to Recaptcha worked the best. I have a small forum, 1500 a day, I feel sorry for you guys with big ones with a lot of traffic.

Hi, nice article, my forums were hacked 2 months ago and I had done none of this.

After I deleted the malicious code that was injected by a hacker into my main forums page, I quickly added a .htaccess and .htpasswd files to my admincp directory on my host. Since then I have had no problems.

After finding your article today, I added a .htaccess and .htpasswd files to the modcp, includes, and install directories.

After checking the file permission through my ftp client I find that all of my php files are set at 705.

One question that has been burning in my mind is, all of my .php files are set to 705.....should I change them all to 644, and if I change them to 644 will this effect any of my members while they are posting and using the forum? I do have a handful of mods installed.

Also, if I change them all to 644, what are the exact files, every single php file in every directory of the VB forums upload?

If I have the four directories admincp, modcp, includes, and install, now with .htaccess and .htpasswd, why should I change the file permissions in those four directories if they are password protected? Is this for extra added security in case the password is hacked?

Thanks again for this article! :up:
Looking forward to your response.....thank you!

Just wondering if this thread is being monitored. I need answers on chmoding my files.

Does every single php file for my forums get changed to 644?

Any help would be greatly appreciated.....

yes, every single one of them my friend

Just came across this article. Very helpful! Thanks.

Will be implementing this on our sites now.

I just finished implementing my vBulletin install (conversion from phpBB3) and I was searching for a way to secure VB4 and came across this thread. It was very helpful! Thank You for sharing this info.

I just finished implementing this on my site. :up: This was easy to follow.

where is config.php file located in vBulletin 4.x Forum ?