Hello,
I have run an extensive search through the forum but I wasn't ablle to find anything specific. I have installed 1.0.4 with my 1.5 using legacy 1.0 and all looks great so far. The "only" issue is that as soon as I switch back my PHP SAFE MODE in the "ON" mode the bulletin became unreachable, same thing happens with the administration panel. I get a 404 error....

I was not able to find anything on the case, Is safe mode off necessary to run Fireboard?

Thanlk you guys for all your answers and help...

Why do you want to run the site with safe mode enabled?

Birger

MindTooth wrote:
Why do you want to run the site with safe mode enabled?

Birger

Hello, Thanks For the kind answer
It is beacuse by having it on "OFF" caused the virus r57shell 1.24 to be uploaded on my installation... I was told they were able by the "OFF" status, and it looked quite scary...


So based on your answer, I am assuming Safe mode should be off if I want to run this script?
Is this correct?

Thanks

There is a reason why it is called safe mode. And from various readings, safe mode is a no-go. So basically, yes. If you want it to run, safe mode needs to be turned off for now.

OT: What virus is that?

Birger

MindTooth wrote:
There is a reason why it is called safe mode. And from various readings, safe mode is a no-go. So basically, yes. If you want it to run, safe mode needs to be turned off for now.

OT: What virus is that?

Birger

Wow, I am very disappointed because I really like Fireboard. I think I may have to pass then...



As mentioned above the virus is called r57shell version 1.24
look at this video www.milw0rm.com/video/watch.php?id=29
You see the nice web panel in Russian.... I found one in my site and was pretty schocking...

Safe mode is necessary if you don't keep your softwares up to date or using anonym codes.

The guy is using a backdoor in one of the codes to hack the website.

BOJ is not using safe mode ON, neither hundreds of other sites I am managing.

Regarding Safe Mode ON, honestly it is soo long since I have heard its name. Don't know if it really works with FB or not. sorry.

Update:
------
Though you should be careful about other dangerous settings, such as PHP Settings . Take a look at security manual of Joomla (google).

Hello Danialt,
Thanks for the reply.
I hope I haven't hit your nervs with my post. I am a newbie and that was the report of my hosting company.

So if you believe I can have both FB and safe mode off and still be safe enough I would love to take your adivce and have FB running...

So it is a matter of keeping the other modules updated?

thanks

yosemite wrote:
Hello Danialt,
Thanks for the reply.
I hope I haven't hit your nervs with my post.

Not at all. You are welcome with your questions. (if you mean capital words, they are just names)


So if you believe I can have both FB and safe mode off and still be safe enough I would love to take your adivce and have FB running...

So it is a matter of keeping the other modules updated?

thanks

You should take care of the security, but SAFE Mode ON is not the solution, is one of them (not a comfortable one)

Whatever you do, keep Register Globals OFF!