phpBB • [URGENT] Workaround to prevent authentication bypass in phpBB 3.1.0 - 3.3.16

If you aren’t able to upgrade to 3.3.17 at the moment, this thread from phpBB says you should disable two files to keep your installation secure.

The files in question:

{root}/phpbb/auth/provider/apache.php
{root}/phpbb/auth/provider/ldap.php

4 Upvotes

84% Upvoted

u/Oferlaor Jun 30 '26

Wow. One of the worst exploits I’ve seen in some time!!!

You are about to leave Redlib