phpBB • Free and Open Source Forum Software

There's an UNVALIDATED MOD for Changing methods for password reset but, be aware, this MOD is marked as [RC] so you should double check with the author that it is safe to use before you use this MOD on a live board. Thanks. I think I won't do anything if it requires a MOD, especially an unvalidated...

This seems to be a big usability problem - requiring the user to remember their username if they forgot their password. Why not only require an email address to send them a reset password link? Sure, requiring a username is more secure, but not having a forum at all is even more secure... when secur...

Lumpy Burgertushie wrote:good work

Thanks!

This article will explain how to change the PAGE_TITLE: http://www.phpbb.com/kb/article/remove-view-topic-and-view-forum-from-titles/ Thanks! I will do it this way... easy enough. I'm just going to switch them around so the static text comes after instead of first. I think this is better for humans...

phpbb.com, which doesn't use any SEO tricks on the titles, ranks very highly in search engines, which is some evidence that search engines have no trouble in indexing phpBB forums and raises doubt as to whether any further SEO optimisation is necessary. I'm sure it's not necessary, but I think it's...

One of my users suggested that the forum use titles that are better for SEO: http://www.htmlvalidator.com/CSEForum/viewtopic.php?p=5534#p5534 Basically, the "fixed" title text should be at the end of the title instead of the beginning. I believe I was able to improve this by editing the overall_head...

Thanks! Just updated but had a small hiccup. I don't know why but the includes/functions.php didn't seem to update the first go-around. It said all the files were updated except includes/functions.php, so I downloaded the files again, which this time was just includes/functions.php, and updated that...

I am getting posts on my forum from unknown usernames. I have Q&A questions in the registration profile with Admin membership approval but they are still getting in somehow. The username they are using does not appear in the user list at all. Is this a vulnerability perhaps in 3.0.2? This post is c...

It appears as though doing the UTC-12 countermeasure results in the forum saying to the user (when the top-listed UTC-12 timezone is selected), that an email has been sent for account activation, but instead it 'silently' fails to register the user and no email is actually sent. Is that is what is s...

stevemaury wrote:I just said it was ineffective. That article would be pretty long if it discussed all the things that don't work.

Might be longer, but better and more informative.

And it can say something like this:

Generally ineffective techniques:
* Blocking IPs

Not long at all.

I've just cleared all the IP blocks and added the "Blocking UTC-12 Registrations" (mentioned at http://www.phpbb.com/community/viewtopic.php?f=46&t=2122696) as an additional spam countermeasure. It appears as though doing that countermeasure results in the forum saying to the user (when the top-list...

stevemaury wrote:In a word - yes. Read the sticky anti-spam topic in this forum.

I did... it didn't say anything about banning IPs. If that is ineffective, then it would be nice if it were explicitly stated.

Occasionally I'll get a spammer or bot who gets by my spambot countermeasures and posts. I do have it set so that a new user's posts require moderation (needed feature!). If they are spamming or posting junk messages, I usually delete them and all their posts. I also ban their IP if it appears their...

Someone contacted me and said they are getting the CAPTCHA daily or almost daily. Is there anything simple that can be done to address this? They pointed me to this URL, which is advice about this issue for SMF forums: http://www.simplemachines.org/community/index.php?topic=422954.0 From the advice ...

We're currently looking at ways to make this less of an annoyance for legitimate users in 3.0.9: http://tracker.phpbb.com/browse/PHPBB3-9992 - Adam Thanks... that's good. I like that the proposed IP-based solution would work across different accounts... but I would think the first and last times of...