Hi,

i develop an application with ci and i need an integrable forum. I like the EE-forum, but i don’t see a way to adopt it to my application. Does anybody know a good forum which can be easily integrated into ci?

pyromaniac is gathering a team to develop a forum based on CI.

I’ve written a way to integrate phpbb with CI:
http://ellislab.com/forums/viewthread/45737/

This way you can use phpbb’s session in CI, and log in or out of phpbb from within a CI application.

cool, i will test it soon

I’m working on developing a forum component in CI, it’s low priority tho, as I have paid-priorities that come first   I’ll post here with the code once I finish

btw, while phpBB is popular, last I saw it still had a number of constant security issues. is that still the case?

intel352 - 24 August 2007 10:34 PM

btw, while phpBB is popular, last I saw it still had a number of constant security issues. is that still the case?

No. Let’s talk facts.

phpBB2 has had 27 releases since its gold release in April of 2002. The last release 2.0.22, and was done on December 23, 2006. If the phpBB developers felt it necessary to release a new version containing fixes, they would. But right now we are coming up on a year of no security releases for the 2 line.

More facts. phpBB 2.0.18 was the result of an internal security audit. Since then, there have been only 4 releases, none of which contained critical vulnerabilities to the best of my memory.

And yet more facts.

If you look at the release dates, you’ll see that there isn’t a release “every week” as some people who spread FUD about phpBB claim.

Here’s a rough list:

2.0.0 - 2002-04-03 -
2.0.1 - 2002-05-19 - 1 month
2.0.2 - 2002-08-12 - 3 months
2.0.3 - 2002-09-29 - 1 month
2.0.4 - 2003-01-15 - 4 months
2.0.5 - 2003-06-15 - 5 months
2.0.6 - 2004-02-29 - 8 months
2.0.7 - 2004-03-18 - 1 month
2.0.8 - 2004-03-27 - 9 days
2.0.9 - 2004-07-11 - 4 months
2.0.10 - 2004-07-16 - 5 days
2.0.11 - 2004-11-17 - 4 months
2.0.12 - 2005-02-21 - 3 months
2.0.13 - 2005-02-26 - 5 days
2.0.14 - 2005-04-15 - 2 months
2.0.15 - 2005-05-07 - 1 month
2.0.16 - 2005-06-27 - 1 month
2.0.17 - 2005-07-19 - 1 month
2.0.18 - 2005-10-30 - 3 months
2.0.19 - 2005-12-30 - 2 months
2.0.20 - 2006-04-07 - 5 months
2.0.21 - 2006-06-09 - 2 months
2.0.22 - 2006-12-23 - 6 months

These are easily verifiable dates. http://sourceforge.net/project/showfiles.php?group_id=7885&package_id=28882

What about Santy, you ask? A critical release was pushed a month before it was being exploited publicly. As with anything else, it is up to the user to update the software they use.

I hope this answered your question.