MyBB Community Forums

Full Version: A Few Ways To Protect Your MyBB Site
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
A few ways to protect your MyBB site.

Use Cloudflare
Use CloudFlare to prevent DDoS or DoS attacks on your forum.


  1. Go to www.cloudflare.com and click the Sign up link at the top of the page.


  2. Create a Cloudflare account by typing your email address and password. Click Create account now to proceed.

    Pro Tip: We recommend using an email alias or distribution list. For example, [email protected]. Billing and service-related email notifications will be sent to this email address.


  3. Enter the domain for your website and then click Begin Scan. It's not necessary to add "www" to the domain. For example, if your website is www.example.com, type example.com.

    [Image: 2015-05-05_16-34-39.png]


  4. We will scan your domain's DNS records. This will take approximately 60 seconds to complete. Once the DNS scan has finished, click Continue.


  5. A list of all the DNS records found is displayed, including your subdomains. In this step, you can decide which subdomains you want to enable Cloudflare ([img=42x0]https://support.cloudflare.com/hc/en-us/article_attachments/201662348/icon-cloud-on.png[/img]) or bypass Cloudflare ([img=23x0]https://support.cloudflare.com/hc/en-us/article_attachments/201662358/icon-cloud-bypass.png[/img]). Some records, like MX, never go through Cloudflare (no cloud).

    If there are any additional records you'd like to add, you can add them here. After you've reviewed your DNS records, click Process and continue.

    [Image: 2015-05-05_16-38-11.png]


  6. Select a plan that fits your needs and then click Process and continue.


  7. On the final step, you are given the Cloudflare nameservers for your domain. The Cloudflare nameservers are assigned to your domain and listed on this page. Please write down the Cloudflare nameservers. You can also find your Cloudflare nameservers in your Cloudflare dashboard under Overview.

    Optionally, choose the appropriate Performance and Security settings. By default, your Performance settings are set to CDN Only and your Security profile is set to Medium for your domain. You can change your settings at a later time.

    Click Process and continue.

    [Image: 2015-05-05_16-47-40.png]
    [Image: 2015-05-05_17-15-39.png]


  8. Congratulations! You've successfully created your new Cloudflare account! But you're not done yet! The final step is to update the nameservers for your domainwith the Cloudflare nameservers provided in the previous step. 

    Note: Please allow up to 72 hours for the nameserver information to propagate. You will receive a confirmation email from Cloudflare when the nameservers update is complete. Your site will not experience any downtime during this period.
Don't Use Free Web Hosting or Free Domains (.tk,.ml,my.vg, etc...)
Using free webhosting and domains are bad because free webhosting / domains do not have good  security. For example let's take 000WebHost database leak. 000WebHosting was not using up to date software and attackers took advantage of that.

Other Reason:

1. You don’t own your site.
When you don’t own your own site, you have no power over its existence or presence. The company can decide to take away your free-dom any time. Your site can be removed for many reasons.

2. Advertising
When you use free webhosting, you are paying for it by allowing the host to place advertisements on your website. You will have banners and/or pop-up ads on your homepage and/or all of your pages. You will have no control over the kind of ads that show up on your site or how they show up on your website. While there are free hosts that does not force advertising, they tend to close down with alarming frequency due to lack of revenue.
When you have your own website, you can even make money from placing your own advertising.

3. Lack of credibility
Let’s face it, you are telling the world that you are cheap and small fry. For less than $10 per month you can own your own hosting, and for as low as $10 a year you can have your own domain name. If you are hosting your business on yourbusiness.freesite.com instead of yourbusiness.com, it tells your potential customers that you don’t take your business all that seriously.

4. Search engines wont’ like your site as much
It’s not just the visitors to your website, but the search engines will also not take you quite as seriously.

5. Lack of flexibility in design and functionality.
Your website will be limited by what templates the free webhosting company offer you. Often you won’t be able to change look and feel easily, change layout, or add interactive features (e.g. plugins, shopping carts, forums, chat rooms, etc.).

6. Lack of help and support options (if any)
You get what you pay for — if you find a good webhost, you often get support and reliability. With free webhosts, there is no guarantee of reliability and if you have problems you are on your own.

7. Free web hosting is notoriously unreliable.
Free hosting don’t have generally have a great reputation for speed, uptime, and availability. They also tend to shut down a lot. Remember GeoCities? That is long dead. Free hosting is only ok for people who don’t care if their site is very available. It’s OK for hobby sites, for testing, but definitely not for business.

If you are determined to use a free site, then at least get yourself a domain name. This will make sure that your address stays with you, even if your host goes caput.

Here’s a link to Wikipedia’s article comparing free web hosting providers.

Here’s a good resource on different types of free hosts.

Most free webhosting providers have tiered services for a reason — usually, once you have a website, you will grow to need more. If you choose a free webhosting provider, you will have to think ahead because chances are you will be stuck with your host unless you want to spend extra money and effort to move it. Start your web presence right to begin with, and you can save yourself from a lot problems down the line.



Webhost Updates:
Make sure your webhosting provider always is up to date with software.



This part of the tutorial is brought to you by Zash

Methods to Protect Your MyBB Forums

<-- snip -->

see : https://community.mybb.com/thread-44977.html
Error 1016

what should i add on A record CName record i don't have any IP etc.
only old nameserver which given by my host provider.
Thanks, Brian nice tutorial.
TFS.. but, can attack anyway ddos. Sad