Best MyBB Security Plugins List

Here you'll find our list of the best MyBB security plugins that we've tested so far.
You should install these to improve the security and safety of your MyBB forum.

read_more

--

DVZ Hash

Quote:Upgrades the password hash algorithm and converts old passwords on the fly

Improving Security of Stored Passwords in MyBB 1.8.x with DVZ Hash :
https://community.mybb.com/thread-226036.html

Download :
https://community.mybb.com/mods.php?action=view&pid=976

Source :
https://github.com/dvz/mybb-dvzHash

--

Bad Behaviour Plugin

Quote:The Web's premier link spam killer.

Plugin Discussion :
https://community.mybb.com/thread-94101.html

Maintained by Omar on his Github repo for MyBB 1.8.*
https://github.com/Sama34/MyBB-Bad-Behavior

Don't forget to edit the whitelist.ini file and remove the default outdated entries for everything you don't need,
except for maybe the Google and PayPal IP ranges.

Based on the original project available at :
https://bad-behavior.ioerror.us/

--

Login IP History Log :

Quote:Allows users to see a detailed history of their last logged in IPs

https://community.mybb.com/mods.php?acti...w&pid=1393

--

The MyBB Security Guide also shows how to improve the security of your MyBB forum :

Quote:Hardening & Best Practices for Securing Forums

https://docs.mybb.com/1.8/administration...rotection/

Locking down the admin directory with a .htaccess file to only allow your IP address / IP range is the first thing you should do after installing MyBB.

--

Pending Review | Untested  :
---------------------------------

iPatrol : Automate the control over the visitors of your MyBB site
https://github.com/mybbgroup/iPatrol

/--

Restrict Email Domains
Allows you to restrict which domains users can register with.
https://community.mybb.com/mods.php?action=view&pid=813
https://github.com/MattRogowski/Restrict-Email-Domains

Disposable Email Blacklist (Updated - 2020)
Blocks 7831 known anonymous, disposable, or spam email providers or services
https://community.mybb.com/mods.php?acti...d&pid=1239

Disposble Email blocklists :
https://github.com/crazycatdevs/Disposab...-Blacklist

Disposable Email Blacklist by Depressurize
https://community.mybb.com/mods.php?action=view&pid=293

--

https://github.com/digitalbreed/php-mybb...mail-check

--

ABP Restrict url ( Restrict urls in posts, signature, website field )
https://community.mybb.com/mods.php?acti...w&pid=1264

--

Restrict PM ( Restrict users to send PM )
https://community.mybb.com/mods.php?acti...w&pid=1128

--

Restrict IP ( thruska)
Restricts moderator and/or administrator account access to specific IP addresses.

https://community.mybb.com/mods.php?action=view&pid=436

"Warning:  Be careful when using the administrator IP address filter
with this plugin as you can easily lock out all admins from the Admin CP."

--

Avatar approval - Allow moderators to manage avatar uploads/updates.
https://community.mybb.com/mods.php?action=view&pid=397

--

Security Log
Logs all failed attempts to log into an account.
https://community.mybb.com/mods.php?action=view&pid=740
https://community.mybb.com/thread-192447.html
https://github.com/PaulBender/Security-Log

--

Error Log Viewer :
Allows you to view the error log from the Admin CP instead of requiring you to use FTP.
https://community.mybb.com/mods.php?acti...w&pid=1082

^ doesn't work ! - had to fix it. Made it read the error log file directly.

--

Edit History Log
MyBB plugin that allows you to log all edits made to posts.
https://github.com/PaulBender/Edit-History-Log

--

MyBB Security Research / Resources :

https://portswigger.net/daily-swig/mybb-...ds-of-bugs
https://portswigger.net/daily-swig/chain...ybb-forums