Hacked (SMF bridge): there is any secure forum?

[adris72]

One of my sites got hacked by the Turkish guy  and I'm almost sure it was thru  SMF since all the forum-related modules and the bridge are not working properly and forum  itself is down after I uploaded a fresh Joomla installation and re-created the configuration.php file. 

I'll will run the last backup since somehow when restoring I lost all the comments made with ako comment. But my concern is that this can happen again, so I have 2 questions:

1- Is there any secure forum component?  (I was reading this list:  http://www.torkiljohnsen.com/2006/07/19 ... -holidays/ and it seems that all are weak

2- If you recommend a different forum software, there is a way to migrate  users/posts from SMF??

Thank you.

[Websmurf]

Well.. you can easily make your SMF bridge secure.
Open /components/com_smf/smf.php

Replace:

Code: Select all

//This helps Mambo allow posts with HTML.  Please note that this does not necessarily work with all installations.
if (!defined('_MOS_ALLOWHTML'))
	define('_MOS_ALLOWHTML', 0x0002);

with:

Code: Select all

defined( '_VALID_MOS' ) or die( 'Restricted access' );

//This helps Mambo allow posts with HTML.  Please note that this does not necessarily work with all installations.
if (!defined('_MOS_ALLOWHTML'))
	define('_MOS_ALLOWHTML', 0x0002);

Second, turn register globals off.

[adris72]

Thanks a lot for the reply, that for sure saves a lot of work.

I'll implement it right now.

[hvanleeuwen]

Next time go to the developers website, in this case the support forum for the smf bridge is here (as mentioned on the  Joomla extensions page);

http://www.simplemachines.org/community ... .php?f=7.0

This security problem was addressed there a few days ago.