Quote:
Originally Posted by Wayne Luke
That two-click upgrade leaves your forums vulnerable to security breaches as well. I guess SMF didn't tell you that. In order for your server to overwrite your code files, they need to by writable by the server. This allows things like the Yahoo Counter trojan to spread across a server hitting every site and infecting thousands of end users. In the past it was a worm specifically designed to infect phpBB installations by exploiting a quick upgrade system like this. They don't even have to attack your site. Just attack a site on your server.
All in all you're forums will need to be offline for less than 10 minutes to upgrade if you have a decent internet connection. Turn them off, Upload Files, Create database Backup, Run Upgrade script, turn them on. If you have SSH access you can lower this to less than a minute or two using this technique. |
Thank you Wayne for pointing this out to lamers like me. I am like all and do not want my forum down but for God's sake it is better to be down for 10 minutes than 10 days when you get PHPBB hacked every few days or for sure every upgrade period.
I am so grateful to have gotten Vbulletin as I almost did years before and now would not switch for any reason.
As well the 3.8 may appeal to a lot of folks and I too will go to it some day in the future but not for now as I prefer the things I know work over the ones that may and may need some time to finish baking.
I thank however the entire VB team and all the fine coders that contribute to it.
01-07-2009, 05:21 PM
Hybrid Mode
