Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.
up vote 0 down vote favorite

Possible Duplicate:
What Forum Software should I use?

I am looking for forum engine (for discussions) with good attack countermeasures built in. Windows (preferrably) or Linux. Free (as beer).

I think about registration flooding and blocking user accounts attacks.

For registration, such engine should have at least:

  • captcha
  • blocking mulitple registrations from the same IP
  • providing login (for logging in) and user name (for displaying the author of the posts)

For logging in:

  • no blocking on multiple tries -- instead after X try sending via mail a token, the third piece needed for next login -- without it logging in will be impossible (it would be similar to activation process)

The engine should be designed with two ideas in mind:

  • protecting engine against attacks
  • 0 penalty for decent users

Thank you in advance for your help and recommendations.

share|improve this question

migrated from serverfault.com Feb 10 '11 at 12:21

marked as duplicate by danlefree♦ Feb 12 '12 at 2:37

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer

up vote 3 down vote accepted

PHPBB has always been good enough for me. You can implement Captcha and you can configure everything else - though the Captcha has been under ridicule.

All of the other PHP-based forums have serious security vulnerabilities that I don't think you'd want.

For every other feature you might want to know

share|improve this answer
Thank you. I checked the list of features of phpBB before asking and I didn't spot the feature of having doubled nickname (login+username), and this was essential for me. – greenoldman Feb 11 '11 at 6:28
With such high standards, have you considered hiring someone to make and / or modify a bulletin board system? freelance.com | odesk.com – Christopher Feb 11 '11 at 6:48
I don't think it is high standard, all is required for implementing this is using an email to login, instead of login :-) It is common sense. I am looking for something ready to use, I am a developer so I could modify given engine myself, but sure hiring is an option as well. – greenoldman Feb 11 '11 at 8:17
Just for the record, there is phpBB module (additional) which provides splitting login into (hidden) login and (visible) username. – greenoldman Feb 14 '11 at 11:04
Oh, good to know. Yesterday, I remembered that phpBB had modules and such - but I got swept up in work. Good find. – Christopher Feb 14 '11 at 11:56

Not the answer you're looking for? Browse other questions tagged or ask your own question.