phpbb secured?

[Krank]

ok, i've seen alot ALOT sites using phpbb hacked, so i check on the phpbb site to see whats wrong, and they always say, the best way to keep your site secured, is to have your phpbb up-to-date, because it has all the fixes...etc

so i figured, yea, maybe all the phpbb sites that got hacked didn't update and they are using an old version.

but my friend's site got hacked, and he's using phpbb latest version 2.0.21, it was annoying, so he brought it back, new install, new sql...etc and it got hacked again, lol he has some "enemies" i guess.

i checked his SQL tables, and i found out how they hacked, phpbb_config, checked around asked around, all said (atleast i think they are right) that whats use is sql injection

so anyways, is phpbb really that easy to get hacked? i mean, i'm admin in a vBulletin board, and i know alot of other forums, IPB, vBulletin, hell even YaBB and SMF, the only sites i see hacked, and believe me i've seen alot is phpbb.

so, is there anything that can be done to secure phpbb, or make it as un hackable as possible?

[blazes816]

You should have reported it. There are no reported cases of a hacked 2.0.21.

[Krank]

[Afterlife(69)]

If he is using shared hosting, it could be an attack from another account on the server.