MyBB

CarlosC · 06-27-2006, 02:57 AM

Dennis, in the admin CP, if I go to Manage Forums none of them are listed. But they are in the DB though. Any ideas?

Thanks,

CarlosC · 06-27-2006, 03:19 AM

Found the problem. The bugger (cracker) deleted 1/2 my forums. I dropped the table, restored from a backup, and fixed the cache, and they now appear. Whew.

What a time waster. Surely all script kiddies go to hell right?

MiNT · 06-27-2006, 09:18 AM

Yes, I would sign a partition to deport all script kiddies, crackers and cyber criminals to hell, if such a partition existed. Unfortunately, the worlds governments will never come together to fix the problem. And God hasn't been answering his emails lately.

Asad_Niazi · 06-27-2006, 03:50 PM

How about automatic updater/patcher which users can run via cronjob. It should be a good choice for non-hardmodded (plugins exemption ofcourse) mybb forums. Well, it will need the files to be chmoded to webserver writable so this won't be the best choice for the users running in a shared environment where php_basedir or safe mode isn't in effect. Well who cares about them, coz they aren't safe anyways as their configuration file is exposed to everyone on the server.

err.. Went a bit off-topic here. Keep up the good work with security updates.

laie_techie · 06-27-2006, 05:48 PM

Asad_Niazi, the php files would need to be writable by the user the cron job is run as.

Asad_Niazi · 06-28-2006, 03:12 PM

You're right... I actually had the one-click updates (from ACP) in mind too when I talked about a cronjob.

Dennis Tsang · 06-28-2006, 04:46 PM

We may also be considering releasing plugins as a method of patching the forums in the near future.

Galen · 06-28-2006, 04:53 PM

You mean just as a temporary fix until the next release, right? I don't fancy the idea of having 20 plugins sitting there just as security patches over a period of years.

Dennis Tsang · 06-28-2006, 04:59 PM

Of course. I'd assume that at every major version you'd upgrade all the files, and thus would have the vulnerability patched in the code.

MrD. · 06-28-2006, 11:42 PM

tmhai Wrote:i would rather have them hard coded into the files, rather than plugins, think of all the problems users could have...

Agreed