MyBB Community Forums

Hello everyone,

I am currently developing a script called MultiBB, which is a forum hosting script. This allows an administrator to host multiple forums using only one set of files (each forum has it's own separate database). I am currently developing this script for phpBB 3, but in later versions was planning on allowing support for other popular forum systems. I was wondering who would be interested if I were to later add MyBB support (since I don't believe a forum hosting script for MyBB exists already). Thanks!

Also, if anyone is interested in developing this with me, send a PM my way. I'm currently the only one developing this script, so some help would be nice.

Site:
http://multibb.sourceforge.net/main/

I don't recall what version of MyBB it was for but there was one in the past:
http://www.rusnakweb.com/mybbmultiforums.php

@ Ryan its for 1.4
also this site exists don't know who runs it. http://www.mybbmultiforums.com/

(2010-02-28, 10:35 PM)Ryan Loos Wrote: [ -> ]I don't recall what version of MyBB it was for but there was one in the past:
http://www.rusnakweb.com/mybbmultiforums.php

Actually it's still being developed. A new version in the works too.

---

(2010-02-28, 10:39 PM)Mark.M Wrote: [ -> ]@ Ryan its for 1.4
also this site exists don't know who runs it. http://www.mybbmultiforums.com/

That uses BMR777's script .

MyBB isn't intended to be multi hosted this way, if you do it anyways, expect to be hacked by anyone who signs up and executes arbitrary PHP code via the Admin CP Template system.

php isn't executed through templates.

(2010-02-28, 11:27 PM)NetSage Wrote: [ -> ]php isn't executed through templates.

http://community.mybboard.net/thread-31860.html

Yes, that's a plugin that multi-forum host would be stupid to install. By default php is executed in templates.

It's possible since PHP 5. http://www.php.net/manual/en/language.ty...ng.complex (see last two lines plus note).

See also http://community.mybboard.net/thread-64895.html - the exploit described there works, I tested it.

As Ryan Gordon points out there, MyBB expects that admins are to be trusted - which obviously isn't the case if you do free MyBB hosting without intending to give everyone FTP and Database access too. So you have to restrict access to the template system as well - which some existing hosting sites (including mybbmultiforums.com) currently fail to do which in turn means they're vulnerable and anyone can hack them any time, which is why I recommend you don't use MyBB for multi hosting (or any kind of hosting for that matter where you give others Admin CP access).

Same goes for importing themes... themes can contain templates, so I can make a Backdoor-theme.xml and if you download, import and actually use it, you end up with a backdoor on your server... naturally it's the admin's fault who was stupid enough to import it in the first place, since the same thing can happen when you install plugins...

This is very cool, and a MyBB version would be greatly appreciated.

There is one at the moment, but it is a little outdated, and either way competition can only do good for both