Spend the money for VB!
On the phpBB thing, you'll see it when your whole database & forum has been wiped clean & theres nothing but hacker tag in its place...
"Hacked by (insert assclowns name here)"
Big or small forum, you're still at risk.
Most all of these script kiddies use Google to find ya. They just search for "phpBB"
If you're going to run phpBB, at least get rid of the "phpBB" in the footer, so you're not advertising it. Thats the simplest & most effective way to safeguard yourself, besides being a fanatic on keeping your version up to date with the most recent patches.
Even then, the phpBB guys take months a lot of the time to release patches, after the exploit is known & in the wild.
Good luck, you're gonna need it!
