This is a great blog, for the past week, my site has been hacked twice. The first time I realized I did not harden my sever enough. I spent a lot of time hardening apache, using iptables, changing ssh port, blocking mysql port and so on.
I thought I did a great job and then yesterday server got hacked again. Luckily I had a backup of my entire /var/www/html and restored it and everything was fine. I really do not know what the hacker is doing, except breaking the site where i get no access to the admin panel, and anyone who tried to login would get a white screen. I think the attacker was dropping some sort of php files and it cause the site to break.
I tried to install mod_security and seem to work but when I applied ModSecurity Core Rule Set, my site went down, could not do anything. I had to disable. Does anyone have a good set of rules specifically that will work with IP board?
Also does anyone know is php 5.4 more secure then 5.3.18? If so will it work fine with ipboard 3.3.4? Also is apahce 2.4 more secure then 2.2.15? What about nginx vs apache in terms of security?
This is amazing, thank you! I have recently lost over $200 because of paypal problems and disputes where the users make up lots of lies. But every time it's because of new members or fake accounts. This will solve all my problems!
Alright, my huge bias towards IPB aside, ip.content lacks the proper documentation for beginner to intermediate users. But you are really exaggerating the problem. There is nothing wrong with all the other ip products because most are easy to use and have enough documentation, it's just ip.content.
Maybe you should add in this topic what exactly you need help with ip.content? Setting up a homepage is rather easy, you just upload 2 files into the home of your site and create an article. (this is dumbed down because I actually forget how I did it :P) Anyways, I will say it took me a while to just figure that out.
So what I'm saying is, just calm down, relax, take a deep breath and separate your problem from your rant.
With all this said.. I still can't find out how to add a <title> to the frontpage and it's driving me crazy. I know it's something ridiculously simple.. I just can't find it.
You should only be using one domain for your forum. Any extra domains you want to use for your website for SEO you should park on the correct folder. That will make both domains work and give the effect you want, but your ip.board and content will only be on one domain.
Ah, I just assumed you were going to use what invision already built into ip.nexus (eg. a commission system). But adding a withdrawal fee is a good idea and should be easy to implement, along with the option to buy "credits". Then it will be what you want, wouldn't it? Since all the other things you listed are already features in ip.nexus.
Ah so you're going to charge people extra to buy credits and take out their money? That doesn't exactly sound like the best sales strategy, but if it works for you then fine. Generally you charge the seller commission per transaction, not the buyer when he puts in money. They're similar though, so it doesn't really matter, just my way would make the buyers feel less ripped off, and the sellers would expect some fee for selling their stuff.
Anyways, still would be a good system that I would like for my site because it would bring in more revenue.
I think se7ensins is suggesting the ability for people to buy a gift card for your site. Like they would be able to go to the store and purchase 20 credits for $20 and then they can use those 20 credits on the ip nexus shop items. You do have this system set up, but you don't allow people to buy the credits directly. They can either earn them, or admins have to add them in manually.
Now the small problem with this is the "payout" option, where people could use their credits to get money into their paypal. In the situation 7sin wants, this option would have to be disabled, or else people could just buy credits, then request them to be paid out for fun.. lol of course you can stop this, but then it will be more work to do it manually, etc. But this all should be a simple addition for you guys.
I'm not sure what Tigratrus is saying, but I think he is referring to the manual option to add credits to a users account but also disabling the pay out system.
ps. Did you check out the ib.economy application? It's basically what your thinking about, just not as nicely made as ip.nexus.