[Chris8]

Imho that Steam forum case doesn't says much about what's more secure and bulletproof. More information would be needed to judge it, for example what was running the server, which mods/addons were installed, directory permissions.. there are really plenty of things to consider. I would look more on average of all forums, if we would compare 1000 of exploited forums then this numbers could say something. Anyway, everything can be exploited if it's not secured well and even if it is there will always be some units with the knowledge and abilities to do it. As per logical point of view, vb3 is not developed any more, vb4 is, this means there will be new code added with every upgrade, this means if a coder make mistake there is possibility of new hole, it's easy and logical, isn't it? If you're interested in some new features that gives you vb4 then I think upgrading is desirable, if vb3 gives you everything you need then why fix something that is not broken?

Just my thoughts...