Suspend Account Because Of Script Version?

[Ayman]

Hi,

 

I wonder how you decide that a script is vulnerable to attacks, is it because the displayed version number is old? Do you check the script for known exploits? Or you only suspend an account if the script is under attack?

 

The reason behind my question is that I run a heavily mod'ed phpBB forum, I upgrade to newer versions manually, and leave the version number without modifying, I guess I'll remove the version number all together, just wondering...

 

Thanks.

[TCH-Bruce]

Ayman, your site won't get suspended unless it causes problems with the server.

 

It is your responsibility to be sure the scripts you are running are secure. While TCH doesn't go scanning for old scripts now doesn't mean that it won't in the future.

 

Hope that answers your question.

[Ayman]

Yeah thanks, I've removed the version number anyway, and I always keep my scripts up-to-date, just wanted to make sure my account won't get suspended because a script displays an old version number.

[stevevan]

Being proactive is always easier than being reactive. You are doing the right thing in keeping things up to date!