Slashdot Mirror


Ask Slashdot: What Is the Best Way To Add Forums To a Website?

First time accepted submitter DustyMurray writes "I am considering adding forums to my website, and am just getting confused by all the options. My first reaction is always DIY. You get better website integration, and it looks and feels 100% how you want it to look and feel. However looking at things like phpBB and Vanilla forums, I will be hard pressed to build a better user experience in a reasonable amount of time. Also these out-of-the-box solutions seem to be shouting 'Easy to integrate with your website.' So, considering this, how easy are these ready build forums really to integrate? I want to be able to insert stuff on certain pages, so it's not either the forums, or my site... It must be a mix. I do not want a second login system on my site. And last but not least, I definitely don't want to have this typical generic look that most forums sport. Can all that be delivered with the out-of-the-box forums that exist today? Which one is the most flexible regarding these wishes?"

27 of 259 comments (clear)

  1. vBulletin by DevTecha · · Score: 5, Informative

    I would say that vBulletin is your best choice. It has a huge amount of features you're going to love.

    Seriously, building something like vBulletin would take you years with all the front-end and admin panel features. It is also customizable to every site so that it can look the same as your site (but maintains the usability users have adjusted to on other sites). This is also performance thing apart from features - you most likely lack the knowledge to make high performance forum as good as vBulletin guys have.

    I've seen large sites that have connected their website with vBulletin, so it is possible. Not only that, but vBulletin actually has vBulletin Connect that lets you build your website around vBulletin. Some CMS (Content Management Systems) also support vBulletin directly.

    One specific large site I use daily did convert from their proprietary system they had used for more than 10 years. vBulletin was their choice, and while it did take a few months to convert that old system, the forum now works much better and supports way more features that users like. If you are making a new site you can obviously do it correctly the first time and skip the conversion.
    If you are doing this as work for a professional site, I would stay away from phpBB and other free solutions. While it's possible to use them, you don't get any support and they're hard to integrate exactly the way you want to. They also tend to lack on the features that something like vBulletin has.

    vBulletin really is your best choice. It's a little pricy, but for what you get the price is more than justified.

    1. Re:vBulletin by stevenh2 · · Score: 3, Funny

      If you want to have the vBulletin look but free and open source, take a look at MyBB. It basically copies the front end of vbulletin. It's also open source.

    2. Re:vBulletin by JMJimmy · · Score: 5, Informative

      As a user I would say don't use vBulletin. Sure it has some great features, but I hate using it.

      phpBB has everything you need, a very active "addons" community, and is much nicer for users. Added benefit, it's free - takes about 10 minutes to get installed, and has enough features and options to keep you busy customizing/configuring for a while.

    3. Re:vBulletin by Cheech+Wizard · · Score: 5, Informative

      I would suggest that you really think about vBulletin and read about the history. It was great when Jelsoft owned it, but it was bought out by Internet Brands and is now a mess. The last "good" version was 3.8.7. Version 4 was a disaster. Version 5 is being sold and is in beta but it really sucks. vBulletin is no longer a "best choice". It was some years ago but these days it isn't. I've been running vBulletin forums since 2001 but stopped "upgrading" at 3.8.7. To make it worse, the Internet Brands people have terrible technical support and - Well, vBulletin used to be the "gold standard". Today, not by a long shot.

    4. Re:vBulletin by Joce640k · · Score: 3, Insightful

      The downside is it will be constantly full of porn+Viagra+poker spam.

      The spammers have got their scripts for attacking all the popular bulletin boards down to a fine art...

      --
      No sig today...
    5. Re:vBulletin by wmac1 · · Score: 3, Informative

      Much more slower than vBulletin, less scalable, uglier, less user friendly and almost non-existing support.

      Almost every phpBB I installed was ridden by spam and got hacked several times. I have given up on phpBB after 10 years of trying.

    6. Re:vBulletin by Gaygirlie · · Score: 3, Insightful

      I've always built my own forum software by hand because that way I can build it as a completely integral part of the website, including features that I need and omitting features I don't need. That said, in general I still agree that it's better to go with a pre-built forum software like e.g. vBulletin -- they most likely know a lot better what they're doing than you do. There is, however, one thing I really feel like pointing out here: always disable all the features you do not need. The more features there are the more likely one or another attack point is available. If you don't need e.g. remote administration then disable it, don't just leave it hanging around.

    7. Re:vBulletin by Khyber · · Score: 4, Interesting

      My bulletin board/forum is spam-bot secure. Why? Video captcha of animated .GIFs. No spam bot can get through, you *NEED* a human to answer the captcha, as it's a question related to the GIF itself (example, display a short clip of Hajime no Ippo, where Ippo is performing the Dempsey Roll. The question will ask "What move is being performed here?")

      Have fun making a bot with knowledge of every manga/anime ever made with enough horsepower to OCR everything.

      --
      Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    8. Re:vBulletin by somersault · · Score: 4, Informative

      Uhm.. well I'm guessing it must be a forum about manga/anime, but as someone with more than a passing interest in anime, I still have no idea wtf you're talking about. And after Googling it, it doesn't look like one that I'd watch since I'm not that interested in boxing.. so yeah. Maybe you should choose something that any human could answer, rather than get so specific? Very few people are interested in every single manga/anime out there, considering that a lot of them have very different target audiences.

      --
      which is totally what she said
    9. Re:vBulletin by Randle_Revar · · Score: 4, Insightful

      Glad I never tried to sign up there. I am no idiot, and I like anime, but even if I *could* figure such a thing out, I can't imagine I would take the time and effort to do so. I might run a few google searches, but I have doubts that that would be enough to find it.

    10. Re:vBulletin by Thesis · · Score: 5, Interesting

      As a long time owner of a vB license, I second the motion to read about the history of vBulletin before making a decision to use their software. When IB bought Jelsoft, it went downhill rather quickly. Many would say, and I have to agree, that vB jumped the shark after the acquisition. Many of us who own and operate boards also agree that version 3.8.7 was the last good version. The management at Jelsoft/IB attempted to morph the software into a catchall social networking solution akin to Facebook, in my eyes anyway. Many of us who have or had "owned" licenses feel that we got screwed, for the terms in licensing changed dramatically beginning with version 4. It turned into a huge money grab in the eyes of many, including myself. Many customers went with other options, and some of us never updated beyond 3.8.7, and are looking for other solutions. Yes, I have tried versions 4 and 5, and they are horrid IMHO.

      It should also be mentioned that some key vB developers left the company as well, for they agreed with many of the customers at that time, that Jelsoft had lost its way. Those developers who left, started to build their own forum software solution from scratch, which is called XenForo ( http://xenforo.com/ ), and is offered to the public as a paid option to forum software. IB got quite pissy over this, and filed multiple court cases against them, which has thus far proved to be fruitless, and appears to be simply a way to make XenFro bleed financially through litigation. http://xenforo.com/community/threads/a-statement-regarding-the-current-litigation.7567/

      I will say that I personally do not think that XenFro is quite yet up to snuff, when compared to older versions of vB, or other paid solutions. I do hold hope that one day soon it will be.

    11. Re:vBulletin by antdude · · Score: 3, Insightful

      What about accessibility? Are you blocking those who have vision problems? :(

      --
      Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    12. Re:vBulletin by JMJimmy · · Score: 3

      Re:vBulletin, posted to Ask Slashdot: What Is the Best Way To Add Forums To a Website?, has been moderated Funny (+1).

      It is currently scored Normal (2).

      Re:vBulletin, posted to Ask Slashdot: What Is the Best Way To Add Forums To a Website?, has been moderated Informative (+1).

      It is currently scored Funny (3).

      Re:vBulletin, posted to Ask Slashdot: What Is the Best Way To Add Forums To a Website?, has been moderated Overrated (-1).

      It is currently scored Funny (2).

      Re:vBulletin, posted to Ask Slashdot: What Is the Best Way To Add Forums To a Website?, has been moderated Interesting (+1).

      It is currently scored Funny (3).

      Re:vBulletin, posted to Ask Slashdot: What Is the Best Way To Add Forums To a Website?, has been moderated Insightful (+1).

      It is currently scored Funny (4).

      Re:vBulletin, posted to Ask Slashdot: What Is the Best Way To Add Forums To a Website?, has been moderated Flamebait (-1).

      It is currently scored Funny (3).

      Can I get an underrated? lol

  2. Begging the question by Anonymous Coward · · Score: 3, Insightful

    Should you add a forum to a web site? Are you ready to moderate it, defend it against spammers and irate users, manage lost passwords and deal with intellectual property disputes? A forum doesn't sleep, a forum doesn't go on holiday.

  3. Drupal by cultiv8 · · Score: 4, Informative

    Drupal core forum combined with the advanced forum will meet your requirements. We used this approach for IFC, see it here.

    --
    sysadmins and parents of newborns get the same amount of sleep.
    1. Re:Drupal by Nemyst · · Score: 3, Interesting

      I'd warn against Drupal. Since it leverages the rather hefty node structure in Drupal, it's very hard to scale up properly. For a forum like what you've linked, with less than a thousand posts, that's fine, but a forum with tens of thousands of posts slows down to a crawl where phpBB or other dedicated forum solutions have no issue running.

      I'm sure you can optimize Drupal further, but it requires a lot more work than using a straight, if not integrated, forum package.

    2. Re:Drupal by cultiv8 · · Score: 3, Informative

      forum_access offers a decent performance improvement for mid-large sized forums, it uses the ACL module which helps to reduce number of joins with the node_access table, which is where a lot of performance issues come from. Nanawrimo is a good example of a decently optimized Drupal forum site, they get about 100k nodes/year, not to mention groups.drupal.org or drupal.org, which average about the same.

      The truth is that any site with > 10k authenticated users a month and 100k+ user generated posts is going to need performance tuning.

      --
      sysadmins and parents of newborns get the same amount of sleep.
  4. Take all the recommendations you get here ... by tlambert · · Score: 4, Interesting

    Take all the recommendations you get here ...and then:

    (1) Get the number of CERT advisories for each of them
    (2) Get the percentage market share of each one of them
    (3) Calculate (#2 * 100) / #1
    (4) Whoever is left with the largest number, pick that one

    For example, the calculation above for bbPress, which is a WordPress plugin, would also need to take into account the number of WordPress only CERT advisories, plus those for any plugins besides bbPress you felt it necessary to use, and the resulting number would let you write off using bbPress. Likewise, anything that used Java as an implementation detail would probably get written off due to the number of security holes which have been found in Java. Anything with an SQL back end would have to take into account SQL injections for the other components you intended to use, and so forth.

    Ideally, you would probably put your forums on an isolated machine, rather than hosting everything on one machine, which would drastically reduce the attack surface -- and this would become pretty crystal clear to you after you performed the calculation exercise.

    1. Re:Take all the recommendations you get here ... by Giant+Electronic+Bra · · Score: 3, Insightful

      1) You seem to know nothing about Java and JVM security. It is immaterial what language you are using on the server-side, Java is no more or less secure than any other.

      2) What difference does it make what the market share of a piece of software is. It is either SECURE or NOT SECURE. If it is not secure then it doesn't matter if one person uses it or 3 million, it is still not secure.

      When evaluating the security of a web application there are many considerations (I've actually taught web app security courses and done all this stuff). You should certainly look at how many advisories there are on a given product. You should also see when these happened, how they were resolved, etc. It may be better to use an application that has had numerous issues that have been promptly fixed for instance. How easy are updates to roll out? How soon do fixes come out? Can you review the source code to look for good coding practices and engineering? As for SQL does the product EVER use anything but bind params? If it does construct dynamic SQL that's a red flag, but it MAY be OK if ALL input parameters are carefully cleaned (bonus points of something like perl's taint mode is in use). Ideally you'd also want to run a full security scan against your test install with a good fuzzer and see what happens. If you can easily shake out bugs yourself then that's a red flag too.

      In other words you really can't sort out the security of an application by any simple formula, and certainly you need to use the right considerations. Anyone interested in getting more detailed advice would do well to start with something like OWASP https://www.owasp.org/index.php/Main_Page

      --
      "Malo periculosam, libertatem quam quietam servitutem." -- Jefferson
    2. Re:Take all the recommendations you get here ... by gman003 · · Score: 3, Insightful

      Yes, because changing your entire back-end architecture is a more logical move than escaping your strings or using parameterized queries or any of the other tools that can not only eliminate SQL injection vulnerabilities, but often make the code easier to write and read.

  5. Invision by xQuarkDS9x · · Score: 3, Interesting

    In the last decade I was using Invision forum software not only because it was a very nice alternative to vbulletin and phpBB but it also seemed quite popular as well. They do have a demo for the Community Suite here - http://www.invisionpower.com/demo/ if you want to try it out.

    --
    You must master your joystick like a fisherman masters bait! - Gimpy
  6. Depends by Arancaytar · · Score: 3, Insightful

    There are multiple very good forum software projects, and I have no clear preference. phpBB and SMF are good standalone solutions; Drupal is powerful if you're looking to have much more than a forum. LAMP (as in PHP/MySQL) is by far the most popular technology. Ruby and Python might be more stylish, but most of the PHP software has had years of continual improvement. Best get several of them (Wikipedia has a complete list) and try them out locally for comparison.

    Only two things I'd recommend against:
    - First, on absolutely no account try to write your own from scratch. The best projects now available have been in development for almost ten years (more in some cases). This is an extremely complex application with many pitfalls in design, database architecture, extendability, and security. If you were the best programmer in the world, it would take you months of constant testing and bugfixing before you had anything approaching stability; and you'd spend the coming years finding security holes and fixing design mistakes.
    - Second, avoid commercial solutions if possible. They're not usually better. Also, you should factor in not just the purchase price but the continual costs of upgrades and user-contributed addons. One good commercial board I've worked with is IPB, but that's only in recent versions after years of development - and I still prefer phpBB.

  7. The Forum Matrix by thenendo · · Score: 5, Interesting

    I recently had to select a forums solution for my company, and this site proved extremely useful: http://www.forummatrix.org/

    It catalogues tons of closed and open-source forum products coded by dozens of variables, and lets you compare them in a big matrix. Very useful if you have constraints/preferences like "works with SQL server" or "isn't PHP", etc.

    My main complaint about it is that some of the data are out-of-date, but it is still a great starting point.

  8. Re:Can't believe this got through submission queue by Anonymous Coward · · Score: 3, Insightful

    You're a dick. We should ban people from posting LMGTFY links on Slashdot just like we did on stackoverflow.

  9. Interesting joelonsoftware article on this... by snowball21 · · Score: 3, Insightful

    http://www.joelonsoftware.com/articles/BuildingCommunitieswithSo.html

  10. Simple Machines by Cito · · Score: 3, Informative

    SMF - http://www.simplemachines.org/

    what I use and with the GIGANTIC plugin support it's amazing. I never get spam problems, I have SMF set to use my wordpress logins for authentication, which means my wordpress uses Akismet to block spam therefore SMF uses it also since SMF users are set to be same as my wordpress users. Uses same database for logins.

    Which sounds like what you are looking for, users log in to your website means they are logged in to both wordpress and smf with 1 account automatically.

    SMF forums also have "bulletproof security" plugins similar to Wordpress that monitor sql threats, use 301 redirects and htaccess to shore up any problems it may think can happen.

    course nothing is 100% but I love SMF and it's huge versatility, offers more plugins and themes than other stuff like phpbb/vbulletin. And my opinion is more secure when merged with sites like wordpress using Akismet for accounts.

  11. Disqus by bucktug · · Score: 4, Informative

    http://disqus.com/

    Customize it with CSS... call it a day. Forums are just pages with styled links. Your server doesn't suffer the load... the federated login is handled by others...

    --
    I had a flame... but she had a fire.