phpBB security

[Hervé]

Hi,
Some members of my board complain of receiving emails containing private information which is in their profiles, for example the date of birth, the city of residence, ...
Are bots able to read this profile information ?
What information are bots able to collect ?
How secure is phpBB ?

[[Dimetrodon]]

Hello.

ACP > Users & Groups > Group Permissions > Bots > "Can view profiles, memberlist and online list" set that to No. Do the same thing for Guests if you don't want them seeing profiles.

[Hervé]

It was on YES, Thanks a lot.

[[Dimetrodon]]

It was on YES, Thanks a lot.

No problem.

Just curious, how were your members receiving emails? Did a spammer register and send them emails or were the emails entirely external?

[Hervé]

At the beginning of the board we had a lot of fake accounts, we don't have any since I installed a rebus (list to sort) and a Captcha.

[[Dimetrodon]]

Good to hear.