Development Discussion Board

Something I saw on phpBB Weekly

http://www.phpbbweekly.net wrote:the teams highly recommend that if you share any of the passwords that you have used on any of the parts of phpBB.com (forum, wiki, code forge, etc.), you should change them just in case, as well as changing your phpBB.com password as soon as it comes back online.

Were the pictures on ubb displayed using html? Html tags do not work in posts on phpbb. BBcode tags are used instead of html tags.

I think #4 is closest.

I think you could also call it a key.

Here is a better definition.

http://www.merriam-webster.com/dictionary/legend

"an explanatory list of the symbols on a map or chart"

We know what the entry point was (PHPList 0-day), phpBB made it difficult for the guy.

I in no way even remotely fault anyone on phpbb for not patching something when a patch was not even released till many days later. However, I do wonder if the knowledge of the security hole in phpList was ...

The hacker gained access on (or by) the 14th January - and was not kicked out till the the 1st February.

I would like to know the earliest date you currently have indications or suspicions he was in, and as your investigation continues and that date may change, I would like to be updated on any ...

Hi Peter, you might want to read this article while you are waiting for an expert.

http://phpbbcom.phpbbservice.nl/kb/arti ... tings.html

Thank you.

And that includes the version downloads and upgrade downloads as well then? (Thanks)

EDIT: Also is there any way to be sure he did not change a download, leave it that way for a week, then reverse the changes.

There's something I've been wondering since the beginning, but since nobody else asked I figured it must be a dumb question. Are the modifications downloads and the version downloads in a different place where they could not be accessed, so you know they are all OK? Also, he said he started on Jan ...

Could you give a link to your forum please?