Search for a forum

[eluser]Techie-Micheal[/eluser]
[quote author="intel352" date="1188009259"]btw, while phpBB is popular, last I saw it still had a number of constant security issues. is that still the case?[/quote] No. Let's talk facts.

phpBB2 has had 27 releases since its gold release in April of 2002. The last release 2.0.22, and was done on December 23, 2006. If the phpBB developers felt it necessary to release a new version containing fixes, they would. But right now we are coming up on a year of no security releases for the 2 line.

More facts. phpBB 2.0.18 was the result of an internal security audit. Since then, there have been only 4 releases, none of which contained critical vulnerabilities to the best of my memory.

And yet more facts.

If you look at the release dates, you'll see that there isn't a release "every week" as some people who spread FUD about phpBB claim.

Here's a rough list:

2.0.0 - 2002-04-03 -
2.0.1 - 2002-05-19 - 1 month
2.0.2 - 2002-08-12 - 3 months
2.0.3 - 2002-09-29 - 1 month
2.0.4 - 2003-01-15 - 4 months
2.0.5 - 2003-06-15 - 5 months
2.0.6 - 2004-02-29 - 8 months
2.0.7 - 2004-03-18 - 1 month
2.0.8 - 2004-03-27 - 9 days
2.0.9 - 2004-07-11 - 4 months
2.0.10 - 2004-07-16 - 5 days
2.0.11 - 2004-11-17 - 4 months
2.0.12 - 2005-02-21 - 3 months
2.0.13 - 2005-02-26 - 5 days
2.0.14 - 2005-04-15 - 2 months
2.0.15 - 2005-05-07 - 1 month
2.0.16 - 2005-06-27 - 1 month
2.0.17 - 2005-07-19 - 1 month
2.0.18 - 2005-10-30 - 3 months
2.0.19 - 2005-12-30 - 2 months
2.0.20 - 2006-04-07 - 5 months
2.0.21 - 2006-06-09 - 2 months
2.0.22 - 2006-12-23 - 6 months

These are easily verifiable dates. http://sourceforge.net/project/showfiles...e_id=28882

What about Santy, you ask? A critical release was pushed a month before it was being exploited publicly. As with anything else, it is up to the user to update the software they use.

I hope this answered your question.