VB Security level?

[system_religion]

Hey,

I have a major concern about VB security level. I heard alot about easly hackrs intervention, attacking and destroying Vb's. Does Jel soft got any thing to say on this matter?

[Steve Machol]

Unfortunately security issues are a fact of life with online software. At this time there are no known security issues with the latest version of vB and we continue to agresssively fix any security issues as soon as they become known to us. And we generally provide patches and updates within 24 hours of confirming a problem.

[Guest]

Also keep in mind that vBulletin is one of many things running on the server. In my experance most true blue cracks are done at the server level. More often then not attack done via the vBulletin scripts are done by script kiddies that target old known holes in old versions of the software.

Always stay up to date with the latest stable release and you should be fine as far as vBulletin is concerned. Make sure to keep your OS, your webserver software, php/mySQL etc. etc. up to date with the latest patches aswell.

You should always keep recent back-ups incase it ever does happen.

[Darax The Good]

I moved to vB because of the security. I used to run a Maddox (best page in the universe) fansite, and the competing sites were filled with unscrupulous people that wanted to hack my site. I never got hacked.

[feldon23]

Hey,

I have a major concern about VB security level. I heard alot about easly hackrs intervention, attacking and destroying Vb's. Does Jel soft got any thing to say on this matter?

"I heard vB is insecure". How is anyone supposed to respond to that?

That's like someone saying "TiVo sucks" without backing it up with anything.

There have been some security issues with vBulletin and the patch/update to resolve the issue has always been released within 12 hours of the security flaw being discovered.

[system_religion]

Hello,

In my experance most true blue cracks are done at the server level.

Is not realwebhost.net good host or what?

You should always keep recent back-ups incase it ever does happen.

How is it done? would show me please? Isn't server host offer's to do this for me weekly?

[GrrrlRomeo]

I too moved to vB because of the security. The board software I was using prior to switching to vB was under sustained attacks for about 3 months due to a worm (patching prevented successful attacks, but not the attacks themselves). Then just when I thought I could take a break from applying patches, someone hacked my board anyway through a hole that could've easily been prevented by simply adding a second verifying login when accessing the admin panel.

Needless to say, security was at the forefront of my mind when selecting new board software. I chose vBulletin, which I might add, protects the admin panel in more than one way. It was a bit of a tossup between vB and IPB though. It was the atmosphere here that tipped the scales. Trust and security kinda go hand-in-hand.

[feldon23]

How is it done? would show me please? Isn't server host offer's to do this for me weekly?

You shouldn't trust that.

I wrote a simple cron tab script that every night makes a backup of my forum and zips the file up. Once a week I FTP into the site and download that file.

[system_religion]

feldon23 mate can you share this script with me?

[feldon23]

vB Backup Script removed from Pre-Sales forum.

[system_religion]

feldon23 mate milion thanks to you.

[BlueFlame]

What happened with not helping unlicensed people ?

[feldon23]

Good point. Moved my post to a different area.

[Floris]

Just to take a random security web site and random third party product I notice that there have been some small potential security issues with older vBulletin 2 and 3 releases, the latest 2.3.7 and 3.0.7 haven't been reported for a long while now. And it appears that the third party forum products have at least twice as much more serious issues. (Checked using securityfocus.com)

I can also point out that if we are informed of a (potential) security issue we review it nearly instantly and check up on our older and latest versions and our average it below one hour response time and fix time is within (average) two hours. Followed by a patch (at least) and/or a new version release; Announcement (within few hours) and eBulletin (the next morning).

Compare that against third party forum products and they come quite close perhaps, or compare it against other commercial dotcoms and you'll find it is quite fast.

One of our selling points is: Security Matters!

[system_religion]

hey,

You see one of the things that keeping me awy from getting a license is what I see of bad treatment from you to new forum members. If I get a lincense would it be different? Would I get a full attention and a full support? I think what you should have done is warn me throgh a personal message that inorder for me to get a full support maybe I should get a license and thats why pesonal massages are made for. ok back to our subject is VBulletin resk free program?