as you may or may not have noticed we are running these forums on an ancient unmaintained phpBB version. This also forces us to use unmaintained PHP version itself, which is a general security thread that needs to be handled at some point in the future.
Unfortunately, this forum was manually modded (likes toplist, etc.), so there is no way to follow a normal update path to the latest phpBB version. But phpBB may not be the choice of software for the future anyway.
So, in the end, I think we need to install a new forum software. And if we do that we can decide how to handle forum accounts.
I would like to gather your general opinion on how you want the forum to work in the future.
Solution A:
The forum accounts are still independent of the regular FAF account. You need to manage two passwords. Username changes in FAF do not affect the forum account. Forum accounts are not verified to match FAF accounts.
Advantages:
- You can ask for help if you have issues with your FAF account.
- It's a bit more failsafe. With single sign-on, you cannot log in if the API is down.
- Spammers and robots
- People impersonating other players and/or avoiding bans.
Solution B:
We introduce single-sign-on. Basically, that means that you can sign in with your FAF credentials into the forum. Your forum account will be created on the first login.
Advantages:
- You only need to remember one account.
- Every account is verified FAF account. No fake accounts are possible.
- If you don't have a (working) FAF account, you are locked out. (Steam linking is not required for a forum account though.)
- A migration of the existing forum will be much harder or even impossible.
Solution C:
A mix of both. Single-sign-on is possible which leads to a "verified" forum account. Independent accounts can still be created.
Feel free to share more pros and cons or other ideas.
In this poll you are allowed to change your choice.