Security question

[Mathman]

If I incorporate a v-Bulletin forum as part of a larger site, what concerns, if any, should I have in regard to security protection for the rest of my domain -- i.e., hackers, viruses, etc. Are there any features that I should enable or disable to protect the rest of my domain on the same server?

Thanks very much.

Mathman

[filburt1]

As long as you keep your version of vB up-to-date and don't change settings unless you know what you're doing, there shouldn't be any problem.

[Xenon]

vb is very secure, and as long as you didn't enable html code posting for users you won't get in trouble

[Mathman]

Thanks for the responses, Filbert and Xenon.

Mathman

[Erwin]

Of course, the server itself is another issue altogether. Hackers can get to your site via security holes in your server. Ensure you have a firewall running, you have the latest kernels, and the latest patches for apache, php and mysql.

[Talisman]

The greatest vulnerability I've seen around here comes from admins using passwords that are easy for others to guess. Be sure to choose your helpers with care and don't be generous giving access unless you need to.

[DaveRobbo]

06-21-03 at 12:30 PM Xenon said this in Post #3
vb is very secure, and as long as you didn't enable html code posting for users you won't get in trouble

This isn't really a pre-sales question from me - I'm already a fully paid-up member ... but this seemed a good place to ask.

I really want to close up the HTML code option for "normal" users, but wish to allow it for admins. Is this possible? Is there an override for admins (maybe even an implicit one?)

Naturally I want to close the security hole to stop other potentially malicious users doing bad things with HTML in their posts but some of the admin's posts have been "prettied up" with some fancy HTML

Can this be done?

Dave

[filburt1]

Please start your own thread in the appropriate forum.

[DaveRobbo]

Today at 12:35 PM filburt1 said this in Post #8
Please start your own thread in the appropriate forum.

Please tell me which is the appropriate forum then? All the others seem to be about requests for new hacks or questions about existing hacks. I can't see a plain "questions" forum except for this one

[filburt1]

Hack Requests.