[CentOS-devel] Forums

Thu Aug 9 01:57:03 UTC 2012
Ant <ant at symons.net.au>

On Wed, 2012-08-08 at 20:07 +0100, Karanbir Singh wrote:
> On 08/08/2012 08:01 PM, John R. Dennison wrote:
> > phpBB has one of the worst track records for forum packages with regards
> > to security issues and they have, as Les mentioned, been promising to
> > "fix" the heart of the problem for many, many years now.  Quite a few
> > years ago I grew tired of the "phpBB security hole of the week" game,
> > transitioned everything to SMF, and never once looked back.  I routinely
> > turn down gigs that want phpBB if I am unable to convince them to go
> > with SMF - it's just not worth the headaches.
> Is it possible to quantify this phpbb security issue ?

I see that the security issue risk has already been debunked but wish to
ass my personal opinion. +1 for phpbb 3.x 

I have been running 3 phpbb3 forums since 2009, and in that time have
had zero problems with security issues. The admin pages warn you if you
are not up to date and updates are easy. There has not been anything
significant for quite some time. 2 of these 3 sites rank quite highly on
google searches for the content in question, so they are visible. 

The only mod I required was for a 'quick reply' box so that you could
enter your reply without having to load the full blown editor.

Updates have been quick and easy to install, even to the point of
automating diffs of the slightly patched theme and letting you review
the changes. I have not had to reinstall my mod, despite the newer
template patches being merged in.

Themes are plentiful (though many dont stretch properly to a wide screen
monitor - a personal annoyance of mine) but its not hard to find one
that does on one of the phpbb3 theme sites.

The app scales well, My three forums are running on a one old pentium 4
chassis, and one of the forums record a record of 50 concurrent users,
yet the load monitoring shows cpu load rarely exceeds 5%. 

It works well on centos 5 & 6 :D 

It is highly configurable, I can confirm the wish list matrix is still
correct. Its also widely used and supported - if you need to figure
something out its not hard to find info.