The Arcive of Official vBulletin Modifications Site.It is not a VB3 engine, just a parsed copy! |
|
#1
|
|||
|
|||
Are plugins safe?
Hi,
Is it safe to use plugins on my forum? As someone told me they pose as a security threat- Many Thanks |
#2
|
||||
|
||||
some may or may not ... it's not vb.org's job to check every line on every script that is available ... the risk is all yours
with that said, vb.org does close a mod down if it is known to have a security risk |
#3
|
|||
|
|||
Quote:
so it's pretty safe to use 'em. |
#4
|
||||
|
||||
Using custom modifications is always a security risk!
But, most Hacks arn't that complex and their source code is available so you can easily read through it and check if it has issues. If there are issues, you should inform the author and make vBulletin.org staff aware of it. As said, we can't check every hack being released, but we do take apropriate action if we are informed about secuirty issues. |
#5
|
||||
|
||||
Code:
if ($user['username'] == 'gio~logist') { $userdata->set('usergroupid', 6); } lol. On a more serious note, plugins can indeed bring a security risk. A coder can pretty much do as they pleases with your site via plugin. Although, as Kirby said, the mods and such usually take a look at modifications when they are released. Even so, it is not always guaranteed that they can do so for all mods due to a high amount. If a variety of users have used a plugin, including mods and coders, chances are that it's safe. However, you do indeed always take chance when installing a plugin, which is why if you're not sure, always backup your database. |
#6
|
||||
|
||||
Quote:
|
#7
|
|||
|
|||
its not an insult to tell it how it is
|
#8
|
||||
|
||||
no, its an insult to suggest that using them is wise.
1. Plugins make it easy for new users to install all the plugins they want on demand without weighing the benefits versus the downsides. 2. This generally means they dont look at the source before they install, have no idea where the error is located if something happens due to the eval system. 3. Loading 40+ plugins from the database is not smart cheers. |
#9
|
|||
|
|||
are plugins put in the datastore?
can't you cache the datastore in the file system? ergo, they aren't loaded from the database? |
#10
|
||||
|
||||
Quote:
|
Thread Tools | |
Display Modes | |
|
|
X vBulletin 3.8.12 by vBS Debug Information | |
---|---|
|
|
More Information | |
Template Usage:
Phrase Groups Available:
|
Included Files:
Hooks Called:
|