View Full Version : phpBB forum security flaw *paid*
masterofollies
11-06-2006, 05:28 PM
I have a phpbb forum for my business and it has a security flaw. I have it set where visitors cannot post topics or posts. But somehow everyday im getting like 3 new topics with about 25 posts. Of random things like "free casino betting, free laptops" etc. But it's not registered users. I have 5 registered users and these are names like Brett8385639. This is the url for it http://mobilesignfactory.net/phpBB/index.php
Is anyone experience in how to fix this?
_Aerospace_Eng_
11-06-2006, 06:25 PM
What version of phpbb are you running and have you done any mods to it?
bcarl314
11-06-2006, 09:06 PM
I have a phpbb forum for my business and it has a security flaw. I have it set where visitors cannot post topics or posts. But somehow everyday im getting like 3 new topics with about 25 posts. Of random things like "free casino betting, free laptops" etc. But it's not registered users. I have 5 registered users and these are names like Brett8385639. This is the url for it http://mobilesignfactory.net/phpBB/index.php
Is anyone experience in how to fix this?
I don't think you've set the permissions correctly in the administrative section. I was able to post a message to every boad on your site (see the messages titled "condingforums test").
You'll need to login to your phpbb as admin, and set the permissions for each board so only registered members can post.
dan.s
11-06-2006, 10:43 PM
Yeah, you can post under guest account.
masterofollies
11-07-2006, 02:32 AM
That's weird, because it said something like "Visitors can post = no". I never knew about the permission thing, thanks alot, it should be fixed. The only other problem is you can't delete all the topics at once, or can you? I have to delete 1 by 1.
_Aerospace_Eng_
11-07-2006, 06:25 AM
Answer my previous question.
Shoot2Kill
11-07-2006, 11:25 AM
That's weird, because it said something like "Visitors can post = no". I never knew about the permission thing, thanks alot, it should be fixed. The only other problem is you can't delete all the topics at once, or can you? I have to delete 1 by 1.
normally at the bottom of the forum it will say things like... (if admin) :
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum
You can attach files in this forum
You can download files in this forum
You can moderate this forum
this is inside a forum, not main page, but the last line will be a link, which will open up a page of all the different threads/topics, each will have a checkbox at the side, where you can select a few and delete...
hope this works for u
masterofollies
11-07-2006, 04:54 PM
Answer my previous question.
phpBB v2.0.19
_Aerospace_Eng_
11-07-2006, 05:24 PM
And have you made any mods to it?
marek_mar
11-07-2006, 05:34 PM
You should upgrade to the newset version 2.0.21.
masterofollies
11-11-2006, 12:11 AM
I have not posted any mod's to it. It's still intact from install. Is there a way to do this? >> The only other problem is you can't delete all the topics at once, or can you? I have to delete 1 by 1.
vBulletin® v3.8.2, Copyright ©2000-2012, Jelsoft Enterprises Ltd.