Suggestions

[sherpya]

The new system is very nice, btw I would make some suggestions:
I've a phpbb site and I've swapped preview and submit buttons, since
all other forums work this way, it's very handly to write the post, then <tab>
and enter.

Another suggestion for the website administrator, I've protected /admin directory with apache directive, yes this make an additional login, but at least it will protect any new hack using admin pages.
This is valid also for other section admin zones.

The code for apache is:

Code: Select all

<Location /admin/>
   AuthUserFile /etc/apache/admin.passwd
   AuthName "Restricted Area"
   AuthType Basic
   require valid-user
</Location>

I've also made phpbb works in php safe mode, contact me if you need additional infos about apache/php securing