MyBB Community Forums

Would a forum be more secure and safe from the public knowing what plugins they are using by renaming the php file in ./inc/plugins?

So if a plugin has a Vuln, but is like a back end plugin, they won't know that they are using it. Does it ruin the plugin and how it works, or for some plugins and not for all?

Thanks.

Probably would just be worth cutting off public access for the ./inc/ directory. No one should ever need to access it.

http://www.mybbsecurity.net/topic-protec...-directory

Good Idea, thanks. Would be more efficient than renaming plugins themselves.

-iHydra

Most plugin vulnerabilities do not depends on the plugin name nor on the inc/ folder being accessible.

As plugins usually expose functionality to the public forum that is where its vulnerabilities are too.