how to Make your Forum Secure and Protected

[xwarlordx]

Here are some tips to make your forum more secure..

1.Try to avoid using "remember password " in any browser that you are using also including messengers like yahoo ,msn .

2.Many users should be using FTP softwares like Filezilla .. once you have used ..make sure to clear history from filezilla ..Becoz all access details would be saved in history once you have connected.

3.Use strong password for both admincp and cpanel .. dont use weak passes .

4.Change Your default admincp location or rename .

5.Creating .htaccess that allows only specified ips.

Step 1) Create a file named .htaccess
Step2) 
Add this in the file..
AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName ?Access Control?
AuthType Basic
order deny,allow
deny from all
# whitelist home IP address
allow from YOUR HOME IP
# whitelist work IP address
allow from IP
allow from IP 2 

Source:vbulletin.org

6.Use dummy admincp to prevent editing or stealing forum database by anyother users

http://www.vbulletin.org/forum/showthread.php?t=199878

7.Make Use of multiple hash ..U need little bit of php or sql knowledge, this would prevent any hacker from cracking password .though it is very hard to crack vbulletin passes which uses md5.salt encryption.

8.Scan your Forum for any sql vulnerabilities with suitable website vulnerability scanners like acutenix Web Vulnerability Scanner .After that close alll vulnerability holes by contacting anyone with good knowledge about this or make a good use of google for this .



Hope this is good tut for you ..If you have good points please post it here

Oops posted in wrong section..MOds please move this thread to correct catagory

xwarlordx Reviewed by xwarlordx on 5th May 2009. how to Make your Forum Secure and Protected Here are some tips to make your forum more secure.. 1.Try to avoid using "remember password " in any browser that you are using also including messengers like yahoo ,msn . 2.Many users should be using FTP softwares like Filezilla .. once you have used ..make sure to clear history from filezilla ..Becoz all access details would be saved in history once you have connected. 3.Use strong password for both admincp and cpanel .. dont use weak passes . 4.Change Your default admincp Rating: 5

[muka]

good tips but the last one is shit, acunetix is useless shit software

[Maz]

Which is a good software for the last one then?

[Hawk]

Moved to correct section.

[Viz0n]

Which is a good software for the last one then?

There is no such thing as good software for finding security holes/exploits. You have to learn to audit code yourself.

[Maz]

Ah right, okey know anyone who could do this?

[Hx]

lol u should learn and find out urself people are busy nowdayz

[Viz0n]

Ah right, okey know anyone who could do this?

read/learn or find/hire someone to handle your security for you.

[Global]

Shadow Security Scanner.

[dragz]

nyc tute dude