myBB weak spot?

I read this comment just a few minutes ago and recalled similar concerns elsewhere.

Has this been addressed by anyone in the know?

 

Hahaha, uber lie.

The MyBB team checks the plugins one by one to ensure nothing harmful is in the code, reason why they take long to validate one plugin. I've seen more SMF and phpBB boards hacked than MyBB. You can put adsense, but MyBB doesn't have adsense when it's a fresh download, your MyBB won't have adsense until YOU personally put the code. The person who posted that was on a TRIP. xD

 

Thank you for the reply,it seemed strange that the myBB developers would be that careless,with a very nice software they have been building up.

Maybe someone from myBB should post a comment to it,as a an expose of a lie? I think it should be attacked because this is the DEMO page for myBB,to let prospective users of the software know that there is no such vulnerability there.

I am now looking through it and see that it is much improved from the older 1.2 version.

 

It's said that 2.0 will just blow your mind. But 1.6 will come with a lot of new features, you can read about them here MyBB - 1.6 Feature list - MyBulletinBoard Development Site For now, 1.4.9 is still awesome. \o.o/

 

Wow they are going to add a lot of new features!

The one I do not see is the What you see is what you get editor.Still not popular with the developers?

 

If I'm not wrong that will be added for 2.0, but don't quote me on that.

 

That would be if indeed scheduled for 2.0

They already have a lot to add for 1.6,that I could wait for a later version.

 

1.4.9 is already a very nice version!

It appears that it is better than SMF for me,but do have a few questions to ask,before I would convert to it.

One of the problems SMF has is that the Administrator setting allows by default ALL the access to the board,where in myBB I can restrict additional administrators to some of the administrative functions and keep them away from critical areas.To maintain control of the website.

Thus I am forced to keep a certain person to be a Global Moderator,when I wanted him to be Administrator,to allow him to do a few things he knows how to do.

 

That's why it's called a global moderator

 

Some things he can do,does not work being as Global Moderator.He needs to be Administrator,but not have access to certain areas in the ACP.

 

I don't know... in my book an admin is an admin. Anyone else has lesser permissions. What in particular are you referring to?

 

Yeah, MyBB can do this.

When I had my anime board on MyBB my Global mods and EVEN mods could have access to the ACP, there is a section in where it sayd "Administrator Permissions" If I am not wrong, or something similar, in which lists you all the people who have access to the ACP, in there you can limit their access.

 

Yeah that is what I discovered yesterday,after I got to see the updated myBB demo.

Administrator Permissions is what I am needing to use.SMF does not have it at all.

 

I see that I failed to make clear what the hell I am talking about.

I hope to make sense now with the following,

In SMF the Administrator has ALL the permissions by default.There is no possibility to edit them.That means anyone assigned as an Administrator,beside the owner can do the same thing as the owner except use the FTP uploads.

You can however assign some administrative duties to a Global Moderator in SMF,but it is limited.

In myBB there is a place where the Super Administrator (the owner) can assign levels of Administrative levels to any member or group of members,in the forum.

Here is a link to the myBB demo that is updated to the CURRENT version.There you can see for yourself the difference.

Go to the USER & GROUPS area in the ACP then click on the Administration Permissions.

Here is what they say there:

User Permissions,

"Here you can manage the administrator permissions for individual users. This effectively allows you to lock certain administrators out of different areas of the Admin CP."

Group Permissions,

"Administrator permissions can also be applied to user groups that have permission to access the Admin CP. Similarly you can use this tool to lock out entire administrative groups from accessing the different areas of the Admin CP."

They also have Default Permissions.

This means that I could assign one administrator one set of permissions and assign a different administrator a different set of permissions.

With SMF it is all permissions by default.That is why you are better off having them as Global Moderators instead,and the owner be the sole Administrator of the forum,to protect himself from any tampering by a wayward administrator.

In myBB that can be avoided by keeping them out of sensitive areas,such as the board SETTINGS.

In this area,myBB is much better.

 

And many more.

 

What I'm saying is that several admin groups are overkill as you have the Global Moderators.
Btw, if you can't trust other admins to have the full access, then you got the wrong poeple. I would trust any of my global moderators to be assigned admins. Otherwise they wouldn't be global moderators in my forums.

 

Feel free to post some in another topic.

 

If you say so.

 

It is up to the owners of their forums,on what level of security they want with their membership.Not only that each forum is different and therefore may require different moderation levels.

I know of two forums where the owner foolishly allowed someone the same level of permissions he had and was booted out later.It can happen and that is why it is usually better for the owner to have sole control over the critical part of the ACP area,the forum board settings.I knew one of the owners by PM and e-mail.

I have Global Moderators I trust and that is why they are there,but I made both of them Administrators on my dormant political forum,so they can learn more about the board.But SMK has limited my permission choices to zero in assigning a member as a Administrator.That is why I am still the SOLE Administrator there.

 

An endless discussion. You basically want to call them admins and I want to call them global moderators. There's really no difference in what you want and what you have. It's just the name that varies.