Bitcoin Forum

Other => Meta => Topic started by: Remember remember the 5th of November on September 09, 2011, 08:08:31 PM



Title: Who installs SMF anyway?
Post by: Remember remember the 5th of November on September 09, 2011, 08:08:31 PM
I'd rather we had MyBB, not some shitty SMF forum...


Title: Re: Who installs SMF anyway?
Post by: mjcmurfy on September 09, 2011, 08:19:08 PM
vBulletin is by far the BEST forum software out there. SMF is plagued with security bugs.


Title: Re: Who installs SMF anyway?
Post by: KeyserSoze on September 11, 2011, 05:44:27 AM
vBulletin is by far the BEST forum software out there. SMF is plagued with security bugs.

I guess we should prepare to be hacked again? As of the moment this forum is 1.1.14. I don't know anything about SMF so there could be a reason for it, however there appear to be newer versions of SMF without going to 2.0. I could see not going to 2.0 if you don't feel it's ready for prime time but there are apparently 1.0 updates so why not use those?


Title: Re: Who installs SMF anyway?
Post by: kripz on September 11, 2011, 06:02:55 AM
vBulletin - http://secunia.com/advisories/product/28467/?task=statistics_2011
SMF - http://secunia.com/advisories/product/5285/?task=statistics_2011


Title: Re: Who installs SMF anyway?
Post by: theymos on September 11, 2011, 06:11:14 AM
vBulletin is by far the BEST forum software out there. SMF is plagued with security bugs.

I guess we should prepare to be hacked again? As of the moment this forum is 1.1.14. I don't know anything about SMF so there could be a reason for it, however there appear to be newer versions of SMF without going to 2.0. I could see not going to 2.0 if you don't feel it's ready for prime time but there are apparently 1.0 updates so why not use those?

The forum's software is still officially supported:

As of today, 1.1.14 is no longer the stable branch of SMF, as SMF 2.0 is being released as we speak. 1.1.14 will remain in maintenance stage, and it will continue to be supported for security and major/critical functionality fixes, only it will not receive new features, nor minor bug fixes or improvements.

Moving to 2.0 would be a major pain because this forum uses many modifications.


Title: Re: Who installs SMF anyway?
Post by: mjcmurfy on September 11, 2011, 06:22:04 AM
Moving to 2.0 would be a major pain because this forum uses many modifications.

Believe me, I know how you feel. I ran several forums with a number of thousand members each, and every time it came to update the software it was an absolute nightmare. The modifications you have done, are they plugin's or hardcoded into the SMF code? Because most plugins should be updated to support the newer editions. It would just be a matter of reinstalling.

Though, if you have made significant hard-coded changes to the forum scripts... well, better you than me that's all I'll say.


Title: Re: Who installs SMF anyway?
Post by: theymos on September 11, 2011, 06:24:31 AM
Believe me, I know how you feel. I ran several forums with a number of thousand members each, and every time it came to update the software it was an absolute nightmare. The modifications you have done, are they plugin's or hardcoded into the SMF code? Because most plugins should be updated to support the newer editions. It would just be a matter of reinstalling.

Though, if you have made significant hard-coded changes to the forum scripts... well, better you than me that's all I'll say.

There are some significant custom modifications, and most of the non-custom mods don't have 2.0 versions.

Now that hosting isn't a problem, I'm going to use the donation money to hire people to improve the forum. Maybe we'll move to some totally different forum software.


Title: Re: Who installs SMF anyway?
Post by: Vod on September 11, 2011, 06:26:29 AM
You get what you pay for.  The best forum software is IPB.

P.S.  Welcome back :)


Title: Re: Who installs SMF anyway?
Post by: mjcmurfy on September 11, 2011, 06:37:59 AM
There are some significant custom modifications, and most of the non-custom mods don't have 2.0 versions.

Now that hosting isn't a problem, I'm going to use the donation money to hire people to improve the forum. Maybe we'll move to some totally different forum software.

Dang, thats unfortunate. vBulletin or IPB are probably your best two options if you do decide to transition to new forum software, and don't mind having to pay the annual license fee. I peter vb because the newer versions of IPB are bloated with a load of unnecessary features. Its simple and straightforward.

I'm pretty sure that newer versions of the commercial forum solutions allow you to import data from other forum software. You can definitely get 3rd party solutions to convert the SMF mysql database into a format useable by other forum packages.


Title: Re: Who installs SMF anyway?
Post by: Raoul Duke on September 11, 2011, 06:53:12 AM
Well, it's in this times i thank phpbb for their automatic updater that merges file modifications ;)

You guys should really ditch SMF.


Title: Re: Who installs SMF anyway?
Post by: ShadowOfHarbringer on September 11, 2011, 11:24:17 AM
You get what you pay for.  The best forum software is IPB.

P.S.  Welcome back :)

Judging by secunia, PHPBB is also fully patched.
http://secunia.com/advisories/product/17998/


Title: Re: Who installs SMF anyway?
Post by: terrytibbs on September 11, 2011, 11:43:24 AM
XenForo! XenForo! XenForo!


Title: Re: Who installs SMF anyway?
Post by: MatthewLM on September 11, 2011, 03:21:14 PM
My vote goes to phpbb3 since I've used it before and it never seems to have security issues. It also has nice features and nice themes.


Title: Re: Who installs SMF anyway?
Post by: NothinG on September 11, 2011, 03:26:17 PM
phpBB 3.0.9 all the way.


Title: Re: Who installs SMF anyway?
Post by: MatthewLM on September 11, 2011, 03:29:22 PM
I would recomend not adding too many mods to phpbb3 though because that's where it all goes wrong.


Title: Re: Who installs SMF anyway?
Post by: Raoul Duke on September 11, 2011, 03:56:32 PM
I would recomend not adding too many mods to phpbb3 though because that's where it all goes wrong.

Or to any other forum script ;) The MODs are always the problem :D


Title: Re: Who installs SMF anyway?
Post by: mjcmurfy on September 11, 2011, 04:00:45 PM
I think one mod that should definitely be considered is some sort of post "voting" system, where if a post gets enough negative votes it gets automatically hidden. Should take care of much of the trolling that has been going on lately.


Title: Re: Who installs SMF anyway?
Post by: lemonginger on September 12, 2011, 12:26:39 AM
My vote goes to phpbb3 since I've used it before and it never seems to have security issues. It also has nice features and nice themes.

phpbb always has major security issues because it is so widely used (and it is php). It's a much easier forum software to customize and administer, but I don't think it is particularly secure.


Title: Re: Who installs SMF anyway?
Post by: mjcmurfy on September 12, 2011, 12:48:43 AM
I'm telling ya, vbulletin is the way of the future!!!


Title: Re: Who installs SMF anyway?
Post by: deslok on September 12, 2011, 01:43:27 AM
Any forum software is going to have attack vectors the more public bitcoin becomes (and this forum) the more likely we are to actually be attacked regardless of what's being run.


Title: Re: Who installs SMF anyway?
Post by: MatthewLM on September 12, 2011, 05:21:59 PM
I didn't know phpbb3 has had critical security issues.


Title: Re: Who installs SMF anyway?
Post by: Raoul Duke on September 12, 2011, 05:43:48 PM
I didn't know phpbb3 has had critical security issues.

Because it hasn't, at least recently.

http://www.cvedetails.com/vendor/1529/Phpbb.html

And if you see the details here http://www.cvedetails.com/vulnerability-list/vendor_id-1529/Phpbb.html you'll see that the most serious exploits are in modules and not on PHPBB itself.


Title: Re: Who installs SMF anyway?
Post by: deslok on September 12, 2011, 06:06:30 PM
I didn't know phpbb3 has had critical security issues.

That's like saying you didn't know that linux or osx has security issues the ones for windows are just best known because it's most popular not because any of the three is inherntly more secure