phpBB Security and Anti-Spam?

[HS.Gabriel]

Hey guys,

I'm looking to set up a forum with phpBB, shall I be concerned about the security?

I'm always watching Exploit-DB.

Any tips for a newbie admin with phpBB, in terms of anti-spam - when the spammer bots register, shall I use Google's Captcha service?

Thanks a lot!

 

[salem]

No problems security wise , 3.0 and 3.1 have been independently audited as will 3.2 Rhea.
As for spam use the question & answer captcha (with a non searchable question as possible ) or the sortables extension .
The trick is to stop spammers registering in the first place and both above work well .

 

[Abraham54]

My forum has two extensions to keep it spam free:

Sortables Captcha by Derky: https://www.phpbb.com/customise/db/extension/sortables_captcha/
phpBB 3.1 Stop Forum Spam: https://www.phpbb.com/customise/db/extension/phpbb_3.1_stop_forum_spam/
This extension connects to Stop Forum Spam to investigate url and e-amiladress of people trying to log-in.

You can control how effective both extensions with Log New User: https://www.phpbb.com/customise/db/extension/log_new_user_2/

 

[Pensfever]

4 weeks in no spam on my board as of yet. I am using Google. Nothing like the pre-3.0 days.

 

[JQP]

We use the standard phpBB Captcha, two humanizer questions and we require moderator approval on the first few posts. No spam makes it to the board. Unless you have a really busy forum it isn't that difficult.

 

[GeorgioGalben]

Q&A is good choice; also Sortable is a good capthca. But if you are a 'non extension' i recommend recaptcha.

 

[GTB]

3.2 comes with latest Google ReCaptcha and uses Q/A (which can be used as case sensitive answers). So same as any sold forum software