phpBB • Free and Open Source Forum Software

Good luck for all style authors updating their prosilver based styles.

thanks, mistery solved

I downloaded the mod full_quick_reply_editor_2_0_1 and wanted to make it "AutoMOD ready" by adding the template I use (it is not vital to install it with automod but I wanted to test out it's functionality). I made a conundrum.xml (as it is the name of the template I use), and copyed the s...

It's been 2 weeks since then, I tried to help, but now I feel just disappointed.

No it is an apache server, but for obscure reasons the owner of the server decided to not accept .htaccess files, so I get this: [R] STOR .htaccess [R] 553 Prohibited file name: .htaccess I wanted to use the rewrite engine on my pages so it it is a big shot in the leg anyway, but I'm concerned about...

If the .htaccess files are not enabled on the server which I am planning to install phpbb on, will it be still secure to use it?

I mean what should I be careful about? How big of a problem will it cause?

This Announcement states that: Translations On the download page there are also translations available. If you would like to translate AutoMOD to your language, send a PM to A_Jelly_Doughnut. I have translated AutoMOD to Hungarian and PM-ed to A_Jelly_Doughnut a week ago, but got no answer, so I'm a...

Everything I believed turned out to be false. I somehow believed that the FTP password is stored in the db.
Sorry for the thread then.

I don't think that this is a security issue. I think the fact that the attacker has managed to get hold of your database is far more worrying. The chances of someone getting your database are minimal, unless you give it to them or something. ~Callun Yeah you are right I have never seen a site runni...

This got ignored. Still my request stands.

Stoker, you copyright-protected your own avatar

I'm no expert on the subject so it makes me wonder: If phpass generates different hashes every time for the same string, how can a password be tested against the hash?

Sorry for the late answer, I was out of town. If you're using the latest version of phpBB, then there should not be any plain md5 passwords there. As of several versions ago , the convertor script uses phpbb_hash() on the md5 stored from phpBB2 and sets a flag that this was done. The updater does th...

Has your board been updated from phpBB2 to phpBB3, and were these users who had never logged in since the conversion? There are only 2 users who have never logged in after the conversion. Their passwords are still hashed in plain md5, but that is not my concern (as you can see the hash I used for e...

The preferred (most secure) hashing method supported by phpass is the OpenBSD-style Blowfish-based bcrypt, also supported with our public domain crypt_blowfish package (for C applications), and known in PHP as CRYPT_BLOWFISH, with a fallback to BSDI-style extended DES-based hashes, known in PHP as ...