actually, you have no idea how secure it is

usually people don't hack into that kinda sites through the sites/boards/weblogs or so anyways, they just use one of many services, of which usually some aren't even up to date. Staying up to date with phpbb is of course the fist requirement to be secure, but that goes for any software.
and if you really think it s so insecure, go find an exploit that will get you into my phpbb 2.1.21 board (note: i have CH installed, which uses a completely rewritten auth system so chances are that even if you find one, it won't work

)
if you find one, i got a testboard on my linuxbox you could test it on

[Edited on 20-9-2006 by Viper]