Get started with phpBB
phpBB is free, open-source software for running a discussion forum: a site where members post topics and replies, organized into categories. It includes member accounts, private messages, moderation tools and permissions, and it can be extended with extensions and styles. It suits clubs, hobby groups, product communities and anyone who wants a self-hosted place for discussion. This guide covers installing phpBB and the steps that keep a new forum free of spam.
Install phpBB
If your host offers a one-click installer for phpBB, use it. Otherwise, install it with the official web installer:
- Download the full package from the official phpBB website.
- Unzip it on your computer and upload the contents to your web folder over SFTP. See Upload files with SFTP.
- Create a database and a database user in your hosting control panel.
- Open your forum's address in a browser and start the installer. It checks your server, then asks for the administrator account, the database details and the forum's email settings.
- When the installer finishes, delete the
installfolder.
phpBB keeps reminding you until the install folder is gone, and the forum may not be fully usable until then. Leaving installer files on a live site is a security risk, so delete the folder rather than ignoring the warning.
The administration control panel (ACP) is linked at the bottom of the forum when you are signed in as an administrator. phpBB asks you to confirm your password again before it opens.
Stop spam before you open registration
A new forum with open registration attracts automated sign-ups from spam bots within days. Set up protection before you share the address.
Turn on a registration challenge
phpBB has spambot countermeasures in the ACP: a challenge shown on the registration form that is easy for people and hard for bots. One option is a CAPTCHA, a puzzle such as distorted text or a checkbox from an external service. Another is Q&A, where you write your own questions that any genuine member can answer, such as "What color is the sky on a clear day?". Q&A questions that relate to your forum's topic are effective, because bots cannot look up the answers.
Choose how accounts are activated
In the registration settings, choose how new accounts become active:
- By the user, who must click a link in an email. This confirms the address is real.
- By an administrator, who approves each account. This is the strictest option and suits small or private forums.
You can also limit what new members can do at first, for example by having their first posts approved by a moderator.
Keep moderating
Set up moderators, review reported posts and remove spam accounts as they appear. Check the email settings work with a test message, because activation and password reset rely on them.
Make the forum your own
Create your categories and forums, set their permissions, and write a short set of forum rules. Add extensions for extra features and styles to change the look, using the official phpBB customization database when you can, and check each one supports your phpBB version.
Keep phpBB updated and backed up
Back up the files and the database before every update, and regularly in between. The database holds every post, member and setting. See Backups and restores.
phpBB announces new releases on its website and shows available updates in the ACP. Follow the update instructions in the official documentation for your version. Updates usually replace the phpBB files while keeping your config.php and uploaded files, then run a database update. Disable extensions that do not yet support the new version.
You can choose phpBB when you order DomainPilot web hosting so it is installed when your account is set up. The web application firewall and malware scanning on DomainPilot web hosting are switched on, but registration challenges and moderation are still needed to keep forum spam out.
Where to get help
- The official documentation at phpbb.com/support/docs covers installation, administration and updates.
- The phpBB community forums are the place for questions about setup, extensions and styles.
A very busy forum may outgrow shared hosting. See Web hosting, VPS or cloud.