Security Information

Message Board Security Problems


Security leaks can be a big problem for any site using a message board. Hackers can actually use your message board to go in and change things on your site. This has happened to me at least four times. Once an iframe was added to every single page of one of my very large sites. Thankfully, I had it completely backed up, so all I had to do was send the pages back up to the server. Twice, the front page of one of my sites was hijacked. The entire content of the front page was replaced by some note from a hacker stating he had been there.

The last time one of my sites had to be taken down to prevent the server from crashing. After calling my web host they were able to tell me my message board was the cause of the problem. I used, and still do on some sites, the phpbb message board. It is one of the most popular boards on the internet, and it's free. The web host tech told me that the problem was that a virus of sorts had been placed onto the server, through the message board, in the message board folder, and was calling out to other servers causing a major load on my web host's server. To fix the problem the web host tech found the file and deleted it. After that, all I had to do was update to the latest version of phpbb and so far so good.

If you use a popular message board like phpbb you need to make sure you've always got the latest version. The more popular a message board is, the more hackers are likely to strike. Perhaps the familiarity is the problem or maybe the hackers know they can get a lot of bites going after a widely used board. As of this writing, the most current version of phpbb is 2.0.15. As the phpbb guys are always security conscious they have added to this version a re-authentication to access the administration panel.

Forums are a very important part of a website, but they can be the downfall if your board script is not updated on a regular basis.

Webmaster of Web Host Reviews


MORE RESOURCES:

Fidelis Security Systems Releases Next Generation of Fidelis XPS ...
MarketWatch - 2 hours ago
The integration of Fidelis XPS with the ArcSight Security Information and Event Management (SIEM) Platform via Common Event Format (CEF), coupled with ...


Calyptix Answers Call of Small Businesses for Powerful ...
MarketWatch - 5 hours ago
This research outlines the benefits Best-in-Class organizations have achieved with all-in-one network security devices. A complimentary copy of the report ...


Wall Street Journal

Iraq: Crunch time for the Iraq-US security agreement
Los Angeles Times, CA - 20 hours ago
BAGHDAD -- The coming few weeks could prove crucial to the fate of a long term Iraq-US security agreement. The deal has stalled for months amid differences ...
Lacking an Accord On Troops, US and Iraq Seek a Plan B Washington Post
US, Iraq Are Believed to Be Close to Reaching Security Pact Wall Street Journal
Edited transcript of interview between Nouri al-Maliki, the Iraqi ... Times Online
Xinhua - The Associated Press
all 302 news articles


Autonomic Software's Announces ANSA Platinum -- The Industry's ...
MarketWatch - 2 hours ago
"ANSA Platinum has allowed our customers to completely change the way they think about network security and maintenance," said Tony Gigliotti, ...


Technical College System of Georgia Deploys Purewire Web Security ...
MarketWatch - 1 hour ago
Purewire is the first security vendor to offer multi-tenant, high-speed Web Security-as-a-Service (SaaS) to protect business users accessing the Web via ...


Boston Globe

Voting Rights Watch: Are Social Security matches really a threat ...
Facing South, NC - Oct 13, 2008
The debate over the use of Social Security matches by states to verify new voters is still roiling. But state elections officials fired back, ...
Voting forms ruled incomplete for lack of check mark Rocky Mountain News
Box Not Checked On Thousands Of Registration Forms cbs4denver.com
Editorial: Voter 'purge' overblown Salisbury Post
MLive.com - Vail Daily News
all 711 news articles


EADS North America Defense Security and Systems Solutions Wins ...
MarketWatch - 2 hours ago
EADS-NA Defense Security and Systems Solutions, in conjunction with EDS, will provide support in three Information Assurance (IA) functional areas: IT ...


St. Louis Post-Dispatch

Boeing negotiations with machinists stall on job security
MarketWatch - 4 hours ago
... from the International Association of Machinists and Aerospace Workers, union leaders said Boeing hasn't budged on issues surrounding job security. ...
Machinists union says it won't budge on job security Kansas.com
Boeing Says New Round of Talks With Machinists Failed (Update2) Bloomberg
Boeing and Machinists break off negotiations Kansas.com
all 811 news articles


Reuters South Africa

Britain plays down Iraqi PM's view that troops not needed
guardian.co.uk, UK - 17 hours ago
The transformation of the security situation in Basra is a vindication of that strategy," it added. In response to the question why the UK had not yet ...
Iraqi PM says British no longer needed for security AFP
Britain says critical to reach forces accord with Iraq Reuters South Africa
Britain says deal urgently needed to save Iraq mission Times Online
Sydney Morning Herald - BBC News
all 433 news articles


Iraqi vice president predicts security accord with US unlikely ...
Kansas City Star, MO - 16 hours ago
By LEILA FADEL Time's running out for reaching a security agreement with the United States, and an accord is unlikely before the end of this year, ...
Hashimi: Security Agreement in Doubt; UN Worries about Iraqi ... Bay Area Indymedia
WAR UPDATE Newsday
all 25 news articles

Security - Google News

home | site map
© 2006