MyBB

This article has multiple issues. Please help improve it or discuss these issues on the talk page. (Learn how and when to remove these messages) This article may contain an excessive amount of intricate detail that may interest only a particular audience. Please help by spinning off or relocating any relevant information, and removing excessive detail that may be against Wikipedia's inclusion policy. (January 2023) (Learn how and when to remove this message) This article relies excessively on references to primary sources. Please improve this article by adding secondary or tertiary sources. Find sources: "MyBB" – news · newspapers · books · scholar · JSTOR (January 2023) (Learn how and when to remove this message) (Learn how and when to remove this message)

MyBB

A screenshot of a default MyBB installation
Developer(s)	Chris Boulton, et al.[1]
Initial release	2002 (2002)
Stable release	1.8.38[2]  (2024-04-30; 7 months ago) [±]
Repository	github.com/mybb/mybb
Written in	PHP, MariaDB, MySQL (PostgreSQL and SQLite are also supported[3])
Size	2.14 MB
Available in	English, German, Spanish, Vietnamese, Portuguese[4]
Type	Forum software Mailing list management software
License	GNU LGPL[5]
Website	mybb.com

MyBB, formerly MyBBoard and originally MyBulletinBoard, is a free and open-source forum software developed by the MyBB Group. It is written in PHP, supports MariaDB, MySQL, PostgreSQL and SQLite as database systems and, in addition, has database failover support.^[3] It is available in multiple languages^[4] and is licensed under the LGPL.^[5] The software allows users to facilitate community driven interaction through a MyBB instance.

Founded as DevBB in 2002 by Chris Boulton from a fork of XMB, the first public release (RC1) of MyBB was published on 10 December 2003. It wasn't until two years later, on 9 December 2005, that MyBB 1.0 was released.

On 9 March 2006, version 1.1 was released. The last version of this series was 1.1.8, a security update released on 20 August 2006.

On 2 September 2006, with a revised and rewritten code base and over 40 new features, MyBB 1.2 was released. Support for the 1.2 series officially ended on 1 June 2009, although security updates were available until 31 December 2009.^[6]

The final version of the 1.2 series, 1.2.14, was a security and maintenance update published on 17 July 2008.^[7] Several security patches were available in consequent security updates for users still using the 1.2 series.

After a long beta phase MyBB 1.4 was released on 2 August 2008 complete with over 70 new features, including a completely revised and redesigned Administration Control Panel (ACP).

On 12 October 2008, MyBB 1.4.2 was released. This version changed MyBB's license from proprietary to GNU GPL v3.^[8] The change in license was driven from a request from KDE who, in a related announcement, launched their first web-based community using MyBB as an alternative to a mailinglist.

On 2 May 2009, due to time constraints, founder Chris Boulton left the day-to-day responsibilities to Dennis Tsang (previously the Support Team Manager) who took over as Product Manager of MyBB. Matt Rogowski would later take over Dennis' responsibilities as Support Team Manager.^[9]

So far, much of MyBB's development happened internally on a closed cycle. After switching to an open source license, on 19 August 2009, the MyBB Group opened development access so that users had access to the official bugtracker and read access to the subversion repository.^[10]

The final version in the 1.4 series was 1.4.16, released as a security update on 17 April 2011.^[11] Support for the series ended on 1 July 2011 for both maintenance and security releases.^[12]

On 3 August 2010, on the second anniversary of MyBB 1.4's release, MyBB 1.6 was released with over 40 new features and included many tweaks, fixes and performance optimizations. The 1.6 series is distributed under the GNU LGPL v3^[5] and requires at least PHP 5.1.^[13]

During the 1.6 series, several senior members of the MyBB Group changed positions. On 3 October 2010, Tim Bell was promoted to Product Manager with responsibilities of running the day-to-day operations of MyBB as well as the marketing aspect of the MyBB product. Dennis Tsang took a position as Technical Advisor, helping with software design and development of MyBB.

On 5 December 2010 Ryan Gordon, the lead developer of MyBB for the past five years, resigned to pursue new challenges. As a result, Tom Moore took over Ryan's responsibilities for development and Dylan M took over management of the MyBB Merge System.

MyBB 1.6.4, released 26 July 2011, was one of the largest MyBB updates and the first release in MyBB's history that required all core files to be replaced due to errors in previous releases of 1.6. It was also the first release to include feature changes which are normally reserved for major point (feature) releases, but was marred upon discovery that the release had been contaminated during a MyBB server breach with dangerous code that could be used to exploit forum installations running 1.6.4.^[14] The step to include new feature updates was taken to extend the life of the 1.6 series while MyBB's next series, MyBB 2.0, was being developed.

On 25 November 2011, MyBB 1.6.5 was released. This version included over 10 new feature updates, including reCAPTCHA support and advancements to prevent spam users.^[15]

On 10 February 2012, MyBB 1.6.6 was released as a security update. It fixed 14 low-risk vulnerabilities and fixed an issue allowing for the import of a non-CSS stylesheet. MyBB also fixed a bug in 1.6.5 where announcements would disappear.^[16] On 14 February 2012, the MyBB Group announced that MyBB 1.6.6 was originally released with development code unintentionally included.^[17]

On March 31, 2012, MyBB 1.6.7 was released, fixing over 70 issues, and introducing five feature updates. It fixed four SQL Injection vulnerabilities (low risk), an XSS vulnerability, and a path disclosure issue. The feature updates included wider display of Forum Rules, Custom Moderator Tool permissions, an override permission for sending an email to a user who has ignored you, and the ability for a user to log in with their email address.^[18]

On May 27, 2012, MyBB 1.6.8 was released. It was a general maintenance release and fixes over 40 reported issues. To provide support for EU users cookies tracking forums or threads that have been read by guests are now session cookies. The information held within these cookies will be destroyed when the user's browser is closed.^[19]

The MyBB Team said many times that MyBB would be jumping directly from MyBB 1.6 to 2.0. However, on 1 April 2012, the MyBB group announced that there would in fact be a MyBB 1.8.^[18] Many considered this to be an April Fool's joke. Then, on 3 April 2012, another blog post was released saying that "it was no April Fool".^[20] MyBB 1.8 will feature a new default theme based on MyBB lead designer Justin S.'s Apart theme series. A brand new feature to do with themes was announced:

The post went on to say that MyBB's default JavaScript library would be changed to the more popular jQuery from the current Prototype JavaScript Framework. A new "trash can" soft delete feature was also announced that allows deleted posts to be recovered in the Moderator Control Panel. It was also mentioned that instead of releasing an official anti-spam plugin as planned called Spam Ninja, the MyBB Team would be added many new anti-spam features directly to the MyBB core.

The MyBB Team also announced that the development SVN repository would be moving from their own dev site at dev.mybb.com to GitHub. The GitHub repository was opened to the public on January 23, 2013.^[21] All open issues on the development site were moved to GitHub on March 3, 2014.^[22]

On September 1, 2014, MyBB 1.8 was released with over 24 new features and many enhancements. These changes include: a new theme (for both the front-end forum and back-end Admin CP), IPv6 features, soft delete and the much anticipated change of JavaScript library from Prototype to the more popular jQuery. The release also saw an updated website design and the implementation of the new logo and brand.^[23]

On April 22, 2011, the MyBB Group announced that they were looking for a "creative doodler"^[24] to create a mascot for MyBB. Mike Creuzer, of Audentio Design, was chosen for the job. The new MyBB mascot and logo were officially announced on January 12, 2012.^[25] A forum discussion was created to propose names for the mascot. The top ten names were placed into a poll, and the community voted and decided upon the name "Bolt",^[18] representing MyBB founder Chris Boulton and the speediness and ease of use MyBB has.

After a community vote, the development of MyBB 2.0 was put on hold and the development shifted to smaller 1.x updates that can be rolled out in a quicker fashion, starting with 1.9.^[26] 1.9 will feature a responsive theme written with the Twig template system, replace the current editor with TinyMCE and introducing the Swiftmailer mail handler. Some customization abilities will be added to the admin control panel. In January 2018 lead developer Euan announced a beta version of MyBB 1.9 for the first quarter of 2018.^[27] In August 2019 no updated release date was announced by the development team.^[28] As of January 2023^[update], the beta of MyBB 1.9 had not yet been released. In July 2024, MyBB announced its first development milestone for MyBB 1.9, documenting upcoming changes and instructions for setting up a MyBB 1.9 development environment.^[29]

The next major release of MyBB will be 2.0, targeted for a release within MyBB's typical release cycle. It will be rewritten from scratch in a MVC method, using the Laravel PHP web application framework. The GitHub development repository will be opened to the public for contributions and an alpha download released once the new code-base becomes "working software with all the basics".^[30] The development of MyBB 2.0 was put on hold in June 2018.

On 27 April 2010, the MyBB Group started a donation drive in an effort to purchase the mybb.com domain name. The Group needed to raise $5,000 from community donations for the transfer, and with founder Chris Boulton and community member Jesse Labrocca personally providing $1,000, that left $3,000 from the community.^[31]

Just a month later, on 27 May 2010, MyBB.com was transferred and in use across the site.^[32]

MyBB supports multiple database engines. It supports MariaDB, MySQL, PgSQL, and SQLite v2 and v3.^[3] MyBB also supports database failover support so that if one database fails, MyBB will load the next database on the list. Master and slave databases are also configurable.

MyBB claims to be extensible and readily customizable. MyBB plugins are written in PHP and utilize hooking techniques. Unlike other software like WordPress, plugins need to be uploaded via FTP as uploading from the admin panel is not supported without a plugin.^[33] However, this is a considerable advantage over the old extension method used by phpBB where all modifications are core file edits.

MyBB Themes are written inside the Admin Control Panel, and exported as an XML file. The XML file includes all modified MyBB templates and CSS stylesheets, which is redistributed alongside any extra resources (such as images) in a Zip file.

There are over 2,400 plugins and themes on the MyBB mods website, some of which add additional features such as alerts, shoutboxes, profile features, user tagging, and many other extensions. Many other MyBB resource sites, such as MyBBCentral or MyBB-Plugins also offer exclusive, and sometimes paid, plugins and themes.^[34]

MyBB has a relatively low-risk security record. In August 2008, MyBB performed a security audit (provided by GulfTech) which led to the release of MyBB 1.4.2 on 17 September 2008.^[35]

The MyBB Group put security first, giving it the highest priority, to the extent that the MyBB website has a "Security Hall of Fame" to recognise those who responsibly disclose vulnerabilities in the software.^[36]

In October 2011, MyBB found 3rd party code had contaminated the 1.6.4 release files.^[37] This code could be exploited to open a security vulnerability on a forum running the affected version. It was later found that a security flaw in the custom CMS mybb.com uses to power its website allowed a malicious user to alter the download files to include their own code.^[14]

As a result of the intrusion, the MyBB Group now hosts downloads via GitHub to ensure the security of a release.^[38] A Forum Security section on the MyBB Community Forums opened in 2011 to provide support for users who have been a victim of an exploit.

Throughout 2011, automated registrations caused forum spam in many MyBB powered forums. In MyBB 1.6.5, released on 25 November 2011, additional methods were added to help administrators locate spam users and manage them effectively as well as providing standard reCAPTCHA support.

In May 2012, hacker group UGNazi gained unauthorized control over the MyBB.com domain name using a social engineering technique. The attack appears to have been motivated by the use of the MyBB software by a third-party website, HackForums.^[39][40]

The MyBB Merge System was first developed in early 2007. MyBB Merge System 1.6 allows conversions from Invision Power Board, phpBB, Simple Machines Forum, PunBB, bbPress, or vBulletin to MyBB, or merge MyBB installations together.^[41] MyBB Merge System 1.8 allows conversions from bbPress version 2.5, FluxBB, Invision Power Board versions 3 and 4 (Pre Release Version), MyBB version 1.8 (merge), phpBB version 3, SMF versions 1.1 and 2.0, PunBB version 1.2, Vanilla, vBulletin versions 3 and 4, WoltLab Burning Board versions 3, 4 and Lite 2, XenForo.^[42]

MyBB had a 9.6 out of ten review at forum-software.org^[43] and was named the best free forum software of 2008,^[44] 2010,^[45] 2011^[46] and 2012^[47] by the same site. It has been featured in magazines such as The H^[48] and runs several sizeable forums on the web, including HackForums, CSNbbs, and several EA Sports boards.^[49][50]

• Comparison of Internet forum software

• Official website
• MyBB on GitHub
• MyBB Türkçe Destek