UseBB Community

I'm pretty annoyed now that you don't get warned if your post isn't accepted. Give error messages, make it user friendly, that's what you want to achieve. It wouldnt let me post and it didnt tell me why? It took me 5 times to get it to post. Fix that.

Now first of you need to add a Personal Message system, even if this can be an option.

Second, Way to many security issues. You need to fix up the Aviator and Signature images to make it more controlled. You can add a link to a PHP script that can wreck your system?

Didn't you think about security when you made this?

make it so you can upload images

eg. signiture and avator images. Also uploads for posts

[lolmode]Yes Sir! Do you have any other wishes my master ?[/lolmode]

PM will never make it in UseBB1.0. And what security issues ? Do you have proof ?

- I don't see why you wouldn't get warned about a post not getting submitted. In fact I don't see how a post could not be submitted in the first place. If something is wrong or missing you will always get an error message. So, I highly suspect your platform causes a bug in UseBB.

- Private messages were suggested over a year ago. UseBB 1.0 doesn't have and never had any plans to have a PM system. If you need a PM system in your forum, there are plenty of other (free) forum systems.

- Maybe you should check and search a bit more before shouting about security. UseBB 1.0 was probed by the Hardened-PHP team some time ago, and the last few known security issues have been fixed in 1.0 RC2. I don't see why an avatar or signature image could cause a security issue, at least not one that we can protect. It is true images can be PHP controlled, but this code is not executed on the server running UseBB. The only one affected by this type of images is the image's hosting server and the user looking at the forum.

There is no way to check whether an image is PHP controlled. Mind you, a .png or .gif file can also be a PHP script. From outside the server you can't check this. Impossible.

So, I can assure you there are no known security issues. Except for when you use a version prior than 1.0 RC2, but it is your task to keep the forum up-to-date.

PS (forum rules):
- Don't mix feature requests with bug reports. Bug reports need to be filed here.
- Please search before you post. PM's have been requested numerous times.
- If you find any security issues, email them to security at usebb.net. But complaining about them doesn't help neither you or we any further.

Samuel wrote

[lolmode]Yes Sir! Do you have any other wishes my master ?[/lolmode]

Hehe, I was thinking exactly the same thing.

I got fired up about how you have to post 10 times before it would work. There is no notice of what went wrong it just kept reloading the page.

So theres no chance that mabe a PM system can be an added download?

And its good to know that the board is secure.

ps. Good board and symple to modify!
posted 1 times and didnt work

prc wrote

So theres no chance that mabe a PM system can be an added download?

there will be no pm system for usebb 1 but there might be for usebb 2

The whole point of usebb , i thought, was to keep it quick, simple and efficient, if you want all the bells and whistles go get vbulletin or another over bloated forum.
I love usebb just the way it is... the best damn forum on the net.

I agree PM isn't a must, but rather an unneeded bloated feature of a Forum solution which has made itself an almost default for a Forum solution.