Need help writing a RFC

General discussion of development ideas and the approaches taken in the 3.x branch of phpBB. The current feature release of phpBB 3 is 3.3/Proteus.
Forum rules
Please do not post support questions regarding installing, updating, or upgrading phpBB 3.3.x. If you need support for phpBB 3.3.x please visit the 3.3.x Support Forum on phpbb.com.

If you have questions regarding writing extensions please post in Extension Writers Discussion to receive proper guidance from our staff and community.
Post Reply
trancended1
Registered User
Posts: 2
Joined: Sat Dec 08, 2012 12:41 am

Need help writing a RFC

Post by trancended1 »

Hi all, to really get to the heart of the matter you need to know where im coming from
for starters hello world! im currently wading my way though a stack of books taller than me to get my little hobby online, its a unholy monster of a social network that will crush everything else out there like an egg. Not for profit of course. Mostly whats been holding me back ins the security arciteture, and that is about 90% figured out. Ive spent many months reachearching it. Problem is my phbb forums have attracted a pet spam bot its relentless and irritating, i put up with it for a while, but what sent me on the war path was when it started advertising child porn.

That tore it, i can see many improvements that i can put into the forum security, and weak points that are a big problem. So im happy to modify a very large pile of my defences i dreamed up and if i get others figured out them to. happy to give the forums security a complete overhaul and give you a nice new shiny array of toys to make their life miserable.
that said, i really could use the help and guidance of experienced web developers (mainly picking brains about little things here and there) ill host it, test it, get it pen tested with the hackers i know, and upload the code as a RFC so you can have fun picking it apart and hardening it further...

as for my other website, well ill be keeping that quet for now due to the fact once i got the security done, the rest is easy, and my main concerns will be figuring out how to deploy servers fast enough....
User avatar
brunoais
Registered User
Posts: 964
Joined: Fri Dec 18, 2009 3:55 pm

Re: Need help writing a RFC

Post by brunoais »

Eh... what? I didn't understand what exactly do you need help for...
You stated improving security, which parts of phpBB do you think that lacks security?
What kind of changes are you thinking on doing to make bots' lifes miserable?
User avatar
Mess
Registered User
Posts: 199
Joined: Wed Jun 13, 2012 10:14 am

Re: Need help writing a RFC

Post by Mess »

Good luck with err... that.
User avatar
Jacob
Registered User
Posts: 102
Joined: Wed Jan 04, 2012 1:41 pm

Re: Need help writing a RFC

Post by Jacob »

Mess wrote:Good luck with err... that.
:lol:

Sorry, couldn't help myself.
trancended1
Registered User
Posts: 2
Joined: Sat Dec 08, 2012 12:41 am

Re: Need help writing a RFC

Post by trancended1 »

Fine I'll just fix up ridiculous *beep* like 5000. Posts a minute 100 accounts an etc how Is this not done allready I'm more worried about unique browser value per ip into session cookie and then detecting modification/sessions hijack with hash checksum along with sql and xSS countermeasure. Looking at client side crypto to see if I can get less server side overhead but looking at corruption of by escaping chars and so fourth I can give better explanation but at wwedding atm talk later.
User avatar
brunoais
Registered User
Posts: 964
Joined: Fri Dec 18, 2009 3:55 pm

Re: Need help writing a RFC

Post by brunoais »

huh?
User avatar
DavidIQ
Customisations Team Leader
Customisations Team Leader
Posts: 1868
Joined: Thu Mar 02, 2006 4:29 pm
Location: Earth
Contact:

Re: Need help writing a RFC

Post by DavidIQ »

Not sure what "security issues" you're experiencing with phpBB but none have been reported in the current phpBB Olympus line in a few years. SPAM issues are not security issues.
Image
Post Reply