Forum Security Questions

[thermax04]

I have a paid VB 4.1.3 and paid hosting with GoDaddy.com

Iam a very new in forums and need some informations, Iam going to write what i know , and please confirm if it is write or wrong or add more info please

I know that forum files are stored at hosting site, so the forum secuirty depends on hosting site secuirty. is it true? the more reliable the hosting site, the more security for forum!

since forum files stored on hosting site, no normal hacker can reach your forum files, what about uploading something throughe attachments in forum threads or posts?

Any other things should I take in consideration regarding forum security?

[TheLastSuperman]

Well it all depends really, truly it does and that is sometimes the issue for some. So what you need to do is research about your host, it's not always about pricing and the cheapest the old saying holds true, you get what you pay for.

Attachments, if you allow .exe to be attached for example and they upload a virus named registry_cleaner_v1.exe and tell others it's a free registry cleaner and they download and install then yes in that instance otherwise no unless they have already gained access to your server and modified some of the files etc etc.

As for forum security... you can rename the admincp and modcp folders, install modifications against spam, use the search feature on vbulletin.com and here plus check out the Articles and other related forums on vb.com for more information there's tons of it or alternatively suhosin and more, picking and choosing what's best for you and least inconvenient for your members is what's key.

[Boofo]

Originally Posted by TheLastSuperman

As for forum security... you can rename the admincp and modcp folders

It's easier, and more secure, to password protect those directories than rename them, especially for upgrades. It doesn't take very much to find out what they have been renamed to.

[thermax04]

Dear TheLastSuperman
Thanks for your very fast reply
*.exe files are not allowed to be uploaded, so Iam rest for now
But how to rename the admincp and modcp folders?

--------------- Added [DATE]1305410216[/DATE] at [TIME]1305410216[/TIME] ---------------

Originally Posted by Boofo

It's easier, and more secure, to password protect those directories than rename them, especially for upgrades. It doesn't take very much to find out what they have been renamed to.

Dear Boofo:
Thank you for your comment
How to password protect those directories ?

[Boofo]

I use a program to do it (Coffeecup's Website Access Manager), but it needs to be done in the htaccess. I'm sure there are other programs out there that will do the same thing, though.

[thermax04]

Originally Posted by Boofo

I use a program to do it (Coffeecup's Website Access Manager), but it needs to be done in the htaccess. I'm sure there are other programs out there that will do the same thing, though.

Looks like needs a pro to do it
Is there any other method for beginners

[Boofo]

I'm not anywhere near a pro at that stuff. That is why I use a program to do it.