Could it be possible to set all the administrative tasks in forums (ACP) in secured (SSL) connection?
I've read some topics in Support forum concerning hijacked forums.

Like https://myforumname.freeforums.org/adm/

Hello,
You cannot access the ACP unless you have the permissions to do so.
You have to verify yourself each time you log in, so putting it onto an SSL connection won't make a difference.

Just ensure your password is not easily guessable and that you don't let anybody else know it and you'll be fine. phpBB is proven to be very un-breakable by hackers.

I know quite well how many times I have to verify myself when entering ACP. My question was if it could be possible to make the connection to ACP secured, from the new password verifying process. Now the asked and given password (as well as the whole ACP session) are transferred over the net unencrypted.

Have you read the threads lately where forum owners tell how their forums are hijacked?

Hello,
The phpBB forum software is incredibly secure and we have added security on top of it.
A lot of "hacks" are due to people guessing/ knowing passwords to forums or the email account associated with an admin username, or being given the wrong permissions.
I have never heard of a case that the forum software was directly hacked - it's all been due to human-error if you understand what I mean.

So,
no https ACP sessions?
Would that require a separate certified key for every single server or one for the whole server farm?

Just looked at the latest threads on Support forum, and my own forum's ACP. Secured?
My summer cottage's outhouse is better secured.

I think you didn't take my suggestion seriously and I think you don't consider your business seriously.

Subliminal,
I really appreciate you bothered to answer me, but your claim that this software is incredibly secure is just empty talk. No software is secure. You could make this system more secure by securing the communication in the most critical part of it.

No answer?