Olympus security

[the_dan]

The coolest thing is that there are "no tickets to display"
(that said, I guess the security tracker was only created when the website was updated, so not many would know about it…)

I would guess that tickets are not displayed to non-team members, for reasons I'm sure you can imagine

[karlsemple]

how are we supposed to look into security issues if users will not report them

The coolest thing is that there are "no tickets to display"
(that said, I guess the security tracker was only created when the website was updated, so not many would know about it…)

you will not see other peoples reports security reports may contain info such as users login details for their board or database backups etc... hence they are not public.

[user99]

i could now post little bit more details, about how my site was hacked.

i run following sites under same server hosing

//domain1.com/...phpBB3-beta goes here
//domain2.com/...some joomla software.

Apparently, //domain2.com/joomla was hacked due to some "vulnerabilities". This was the first hack.

After some days, //domain1.com/phpbb was hacked. (Basically some text introduced in index.php "Hacked by .." + who knows what inside code )

Since phpbb3 install defines its folder permissions etc., is it accepted that it can be hacked, if other "directory/site" is hacked?

[espenhh]

http://www.phpbb.com/security/all/statistics.php