I have installed the latest version of web wiz forum and I am worried about the security of the forum. I want to lock the forum down as much as I can as we had web wiz a few years ago and it was hacked and I don't want the same thing happening again.

 

I have gone to the security document which is included in the install documentation but I am worried about people uploading items to the website / forum.

 

I want to allow users to link to photos which are on like photo bucket and other picture hosting sites but I do not want to allow uploads to the upload folder, no matter if it is a picture or a file please can you advise what is the best way of locking this down?

 

Also I know aviator's also have the ability to upload your own, is this restricted to only jpeg files or can this be locked down to only allow pictures?

 

I ask because I have had a web wiz forum hacked before and someone uploaded a file to the server and ran it although even then I only allowed uploads with jpg & gif so I never really found why this happened but now I don't want this happening again.

 

I have looked around at other posts but I'm just not 100% clear on the best way.

 

Please advise,

 

Thanks, Tim.