1

(27 replies, posted in Feature requests)

I think this is a bad idea, and I hope punbb will never implement this feature.

1. Can cause severe slow down ,and if your DNS forwarder is down, you may screw up your forum,and cause a self D.o.S tongue

2. Gives you no real security, DNS names are a piece of cake to change/spoof

3. It's not he job of a Forum, you have plenty of tools to do this ( htaccess files, httpd.conf)

The Internet mail is frecuently screwed up by DNS problems, do not broke forums too ¡¡ tongue

2

(5 replies, posted in PunBB 1.2 bug reports)

Rickard wrote:

Thanks. Someone sent me a patch that adds a few more accelerators to the list though, so I think I will use that one in 1.3 instead.

that one was me smile

3

(19 replies, posted in PunBB 1.2 discussion)

vnpenguin wrote:

Hi all,
It's very sad to tell you that our forum (with latest release of PunBB) was hacked last week sad
Our backup server is compromised. We lossed db with md5 hashed-password. I dont know how they can login into our forum with admin control panel.

Anyone here could confirm me : MD5 hash is hackable ? Admin password in this case is 10 char length with letter + number + special char,... sad
If you tell me that MD5 hash is not hackable, so where is the cause of our accident ?

Thank you,

nothing is "unhackeable",..however md5 hash is very strong, just change your passwords as a safety measure.
it's more likely your server is compromised if they can actaully login as admins in your forums, or they are sniffing your unencripted traffic.

If your server was compromised PunBB is unlikely to be the cause. you need a better sysadmin tongue

to dny acces to a single file use something like this

<Files mysecret.file>
Deny From All
</Files>

here is a very tiny. unobtrusive, patch to highlight only php code, when the "code" blocks, contains the php open tag "<?php"

http://www.onfocus.cl/judas/pun-php-highlight.patch.gz