Lunascape Support Forum

Find the answers you need and discuss anything about Lunascape.
It is currently Mon May 21, 2012 7:16 am

All times are UTC - 8 hours [ DST ]




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 7 posts ] 
Author Message
 Post subject: Security Question
PostPosted: Fri Mar 04, 2011 3:31 am 
Contributor

Joined: Sat Aug 07, 2010 10:15 am
Posts: 52
It seems that someone tried to login here in this forum with my user credentials. At the last login I got a message that tells me I have to enter not just my username and password but also a captcha's code, because of the many unsuccessful login attempts that has been made using my user name.

It seems there are some security issues with this phpBB version/forum. Despite that, I hope my email address stays unavailable to the public and of course to spammers and hackers.

Did you ever think of changing phpBB to a better and more secure forum script? Not just because of this issue but also because this forum gets more and more littered with spam.


Top
 Profile  
 
 Post subject: Re: Security Question
PostPosted: Tue Mar 08, 2011 12:37 pm 
Site Admin

Joined: Fri Jul 16, 2010 11:37 am
Posts: 355
Location: USA
Hi nosecrets,

Apologies for what has happen to your account. The same thing has happened to my account also, and I'm planning to change the form to GetSatisfaction. Just like how I'm using for iLunascape product. What do you think?

Regards,


Top
 Profile  
 
 Post subject: Re: Security Question
PostPosted: Tue Mar 08, 2011 5:46 pm 
Contributor

Joined: Sat Aug 07, 2010 10:15 am
Posts: 52
As far as I know there is no possibility to attach some images or zip files in getsatisfaction.com. That is a pure text support center.

getsatisfaction.com has its pros and cons. If there are just a few questions to manage they are ok but if you get hundreds of questions one day it gets confusing. It's rather a blog like styled content management than a support forum.

I personally prefer a forum like this here. For me it is easier to talk to others in a forum than doing it with getsatisfaction.com.


Top
 Profile  
 
 Post subject: Re: Security Question
PostPosted: Tue Mar 08, 2011 6:00 pm 
Site Admin

Joined: Fri Jul 16, 2010 11:37 am
Posts: 355
Location: USA
Right. That is one of my concerns I have here.. I've thought maybe most of the users here prefer a forum like this instead of something like GetSatisfaction. Any recommendation?

BTW, you can attach an image with GetSatisfaction now.


Top
 Profile  
 
 Post subject: Re: Security Question
PostPosted: Wed Mar 09, 2011 10:22 am 
Contributor

Joined: Sat Aug 07, 2010 10:15 am
Posts: 52
I'm not that experienced in forum scripts, therefore I'm probably not the right person to give some recommendations.

Some years ago my first forum was also a phpBB. Since I discovered some annoying behaviour in that forum, it's no longer my preferred script. I normally don't register with a phpBB forum. Lunascape's forum is one of a few exceptions.
Aren't there any plugins or patches for phpBB to make it resistable against automated bot account creations?

What about XMB eXtreme Message Board? I had one installed for testing purposes. But it's also a few years ago. It's quite good, it runs on php and it's free. But I don't have any idea about resistance to spam.

SMF is well known, runs on php and is also free. But I've never installed and tested it.

vBulletin or IPB are both not free, but the first one offers quite a lot of features.

If the script does not have to support MySQL then MyUPB could be an alternative. It uses flat files for the database.


Top
 Profile  
 
 Post subject: Re: Security Question
PostPosted: Thu Mar 10, 2011 2:55 am 
Contributor

Joined: Sat Aug 07, 2010 10:15 am
Posts: 52
I just found this "Sortable Captcha" plugin for phpBB 3.06 or newer. It is a replacement for the standard captcha.
According to the comments there and here it seems to immediately stop automated spam account registration.

Why not giving it a try before switching to a different forum script or even to a third party support service?


Top
 Profile  
 
 Post subject: Re: Security Question
PostPosted: Fri Mar 11, 2011 5:15 pm 
Site Admin

Joined: Fri Jul 16, 2010 11:37 am
Posts: 355
Location: USA
Thanks for suggestions, nosecrets I'll let our infrastructure team know and see what they can do.

Regards,


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 7 posts ] 

All times are UTC - 8 hours [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
SubIPB3.0 Designed by Lee Gao - http://6.dot.ch/.
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Copyright Lunascape Co., Ltd. All rights reserved.