MyBB Community Forums

This is a tutorial list for MyBB, specifically regarding security. This includes adding new features and using the built in features provided by MyBB.

Disclaimer: I am in no way repsonsible for the creation or use of these tutorials. As such, I have given full credit to the authors.

1. ACP Security:
   
   • Add Secret PIN to ACP login - By Paul H. (note: built in facility of MyBB 1.8.x)
     
   • Fake Admin Login page - By Zash (now converted to a plugin, but it's still very useful!)
     
   • Renaming the Admin Directory - By Peter
     
   
   
2. Spam prevention:
   
   • Finding Spam with MyBB 1.6.5 - By Tomm M
     
   • Disposable Email Blocks - By Labrocca (a list of disposable email domains known for spamming)
     
   • Spam Prevention and Deterrance - By x-Treme (a list of common plugins for fighting spam)
     
   • Report Drop Down Menu - By Clone (allow your users to rpeort posts more easily by having common reasons in a dropdown)
     
   
   
3. General Forum Security and Good Practice:
   
   • Automated Database Backups (cPanel + 1 line of code) - By Kujoe
     
   • Automated Database backups (Method 2) - By Drankur
     
   • Backing up in multiple ways (SSH/PHPMyAdmin/MySQLDumper) - By Babjusi
     
   
   

If you know of any other tutorials, and want them adding to the lsit, reply below. For consistency, the tutorials MUST be posted in the User Submitted Tutorials forum. This is to ensure tutorials do not get deleted outside of the control of the MyBB staff.

Have fun, and stay safe!

You missed the Admin Honeypot Plugin... but then... you don't seem to be listing any plugins

Also, what about renaming the Admin folder?

(2011-12-15, 10:43 PM)Dylan M. Wrote: [ -> ]You missed the Admin Honeypot Plugin... but then... you don't seem to be listing any plugins

Also, what about renaming the Admin folder?

Yeah, plugins are the next step Added

Great post, OP!
I favorited this, very useful!

Nice now I don't have to do something like this .

Good list Tom, cheers.

Ohey, my name is up there...

Great list!

May I add one "dumb" security practice??

Change Admin's password (and all the Super admins / Super mods / Mods) passwords to something really strong and hard to crack...

A depressed hacker (a hacker that has desperately tested everything to hack your board and just couldn't), will try Plan B, try to crack a staff's password...

It seems dumb, yet many boards have been hacked because of that issue...


Example :
Which password, you think is easier to crack??

Password 1:

f*6%+*C^9:b!Fv:4^'=5

Password 2:

cake20

I'm writing a tutorial this weekend perhaps, teaching others how to install and configure CFS (ConfigServer firewall).
It's a very advanced script, people should know about it.

Sure, post it in the tutorials section and I'll add the link to the op