php Nuke & Security

[Wolfseye]

Hi,

i am just new to Siteground. I was thinking about doing a Website with phpNuke, but then, I would not have done that on my old Rootserver that I had before, just because I would be too afraid of security issues and hackers. Especially NUKE is like a magnet for bad people, hackers etc. same with phpBB.

Of course, since Siteground even offers that I can install that on my Webspace here now, but in my oppinion which each public NUKE Website the risks just goes up that there will be people trying to hack my Site and also Siteground in this case.

I checked through various NUKE forums etc. and the list of Security vulnerabilities and hacker attacks is so exponential, compared to the opposite. No NUKE Version, if new or old, is free of that. So, if you could make a few comments on my concerns with maybe some experiences of your own with NUKE. I would appreciate that.

Thank you.

Wolfseye

[Wolfseye]

Anyone ? Please.

[Svetlio]

Yes, both phpBB and php-Nuke have some security issues. However, if you use a plain script without any external modules and you keep it up-to-date, there should not be a problem.

Also, you can check our basic security advices listed at:

http://kb.siteground.com/article/Bas...ng_server.html

Please mind that once a week we create a full backup of your SiteGround account, so we can restore it if it is hacked.

[Wolfseye]

Hmm, those guidlines there pretty much mean settings in PHP to be changed like this. But for a standard Webspace account here at Siteground I don´t have the ability to do this. So does that stuff count for me here as Webspace user too ?

Wolfseye

[Svetlio]

Actually you can change all the settings listed in the basic security guidelines.

You can create and edit the local php.ini and .htaccess files through your cPanel->File Manager.

You can enter the lines listed in the basic security guidelines and they will be active for your web site.

[Asylum-Systems]

Running nuke sentinal helps alot. I have caught a lot of hackers trying to break in. Most seem to come from the .ru domains and other hacked sites.

I find out the owner of the site after the hack attempt and send out a email telling them their site has been hacked.

From what I can tell Raven nuke is probably the most secure version of nuke. They use 7.6 portal version.