Skip to content
This repository has been archived by the owner on Aug 25, 2019. It is now read-only.

Security

dietrichm edited this page Oct 10, 2011 · 3 revisions

Plans for UseBB 2. Some of these features were once planned for UseBB 1 in the context of rProtect and were included in v1 or postponed to v2.

User accounts

  • Only send temporary passwords through e-mail, or preferably none at all
  • Perform logout for sessions other than current (remote logout)*
  • Ask password for performing important changes to user accounts
  • Generate possible new passwords with big strength*
  • Separate ACP login/logout*
  • ...

Anti-spam/troll

  • Important base: moderation queue (#55) with manual post reporting (#4)
  • Mollom integration (#10)
  • Stop Forum Spam API* (#77)
  • reCAPTCHA (#11)
  • DNSBL banning* (#78)
  • Manual anti-spam questions*
  • Hiding unactivated members*
  • Logging facilities*

Other

  • Anti-CSRF token system*
  • Production environment switch: hide notices if enabled*

Please see the milestones for which features will be available in UseBB 2. Feel free to comment on or add issues.

Asterisk (*) = features that have been fully or partially implemented in UseBB 1.

Clone this wiki locally