In the past 2 weeks my PHPBB 3 forum has been defaced twice. At first I thought it was because I wasn't using the latest release of PHPBB 3 but that's not the case.

After I upgraded to 3.0.1, it still got hacked. I even chmod'd the admin directory so that it is unreadable, and I renamed the mcp.php.

That didn't help, my server logs show him using the admin directory and "mcp.php".

I don't even know how that's possible, the admin directory was undreadable and there is no mcp.php on my server lol.


I suggest everyone using phpbb 3 to back up their sites daily.

I think I'm switching to Simple Machines or just selling the domain.
apirateslife Reviewed by apirateslife on . I've given up using PHPBB3 In the past 2 weeks my PHPBB 3 forum has been defaced twice. At first I thought it was because I wasn't using the latest release of PHPBB 3 but that's not the case. After I upgraded to 3.0.1, it still got hacked. I even chmod'd the admin directory so that it is unreadable, and I renamed the mcp.php. That didn't help, my server logs show him using the admin directory and "mcp.php". I don't even know how that's possible, the admin directory was undreadable and there is no mcp.php on Rating: 5