Security

I would just like to warn everyone that if you are using a DSN-less connection, your forum can easily be hacked. If the database is stored in a folder accessible to the web, then the database can be downloaded, and your passwords etc. changed. It happened to my site today. If you can, use a DSN connection with the database stored in a folder which cannot be accessed from the web. Also, the hacker found my forum via google using the search phrase 'web wiz forum' and I noticed that a number of other people were hacked as well.

You don't need to use a DSN connection.

If you had read the documentation that came with the forum you will have found that this issue is covered.

It is strongly suggestested that you rename the database and move it to a folder that is not accessible through a web browser. For this you don't need to use a DSN connection, a DSN-less connection can be used and all you have to do is change the path in the common.asp files to where the database is located.

If people where to read the documentation then these things wouldn't happen!!!!

Also as many of you don't, version 7 addresses this issue by one-way encrypting all passwords, so it doesn't matter if someone downloads the database, they can't get the passwords.