phpBB • Free and Open Source Forum Software

GSoC.png Hi all, We're super excited to be participating in the Google Summer of Code program for the fifth time. The GSoC program gives students a unique opportunity to work with mentors from established open source projects over the summer months. We had a great time taking part in 2017 , 2014 , ...

Greetings, At this time, we have further information to supplement the preliminary reports above. Following our initial discovery of the altered download links, we traced the origin of the redirect back to our DNS configuration. phpBB.com utilizes Cloudflare's DNS platform, and we immediately notifi...

Hello everyone, We are continuing our investigation, but are ready to provide some additional information to keep you informed. The modified packages we obtained contain a section of malicious code that attempts to load JavaScript from a remote source. At this time, we are in control of the domain n...

Question: was the hash that is displayed for validation also altered? If not then people who download the packages and compare the hash would, or should I say know that the package was not legit. The website itself wasn't affected in any way, so the hashes were not altered. Anyone who verified the ...

Earlier today, we identified that the download URLs for two phpBB packages available on phpBB.com were redirecting to a server that did not belong to us. We immediately took down the links and launched an investigation. The point of entry was a third-party site. Neither phpBB.com nor the phpBB softw...

Please use this topic to discuss the [Security] phpBB 3.2.2 Packages Compromised announcement

This was just brought to my attention. Quite unacceptable. I'll chase this up with my contact at Bluehost and see if they can figure out why it's happening.

AmigoJack wrote: ↑

Fri Mar 10, 2017 8:28 am

MisterC wrote: ↑

Thu Mar 09, 2017 6:28 pm

I don't think I have an ad blocker.

Code: Select all

<a class="ads-button-hosting"

You definitly have one when elements disappear that start with ad in their attribute values.

Maybe we should put on our black hats and change that to definitely-dont-block-this.

We're thrilled to announce that phpBB will be participating in Google Summer of Code 2017 . This is our 4th time taking part in GSoC and we'll be working hard to ensure it's the best year yet. Google's Summer of Code program pairs students up with experienced mentors in selected free and open source...

This is the discussion topic for the phpBB accepted to Google Summer of Code 2017 announcement

Fairly stable :) It does break "Subscribe forum" (and I imagine any other secondary functionality handled by viewforum.php) due to disable_viewforum() being a bit overly ambitious. Fixed temporarily by changing: if ($this->user->page['page_name'] == 'viewforum.' . $this->php_ext) { redirect(append_s...

If you want me to take you seriously, you're going to have to post fewer unicode stars and more references to stats or at least authorities that are qualified to speak on the subject and support the position you're trying to push. If we assume that you've convinced me that SEO friendly URLs are a go...

I successfully updated a forum with a 3GB database. Your mileage may certainly vary with varying server configurations.

I am surprised that after so many protestations by various Team members over the years that phpBB has included in the gold release of phpBB 3.2 a Cookie Notice - albeit not working at the moment. I am guessing that the reasoning behind this is because of VigLink. Yeah, there's unfortunately a bug t...

sorry but you have no idea what you are talking about. google has said for a long time that friendly/SEO urls make very little difference to the SERPS. some people may like them better but it makes little if any difference to the search engines. the fact that wordpress gives you the option means no...