To obtain greater reliability / security it would be important to use SSL certificates in the server. HTTPS > HTTP On the other hand, it would also be interesting for the security of the community to hide sensitive data such as 403 Forbidden messages and other replies with certain status codes. Example: http://forums.dk.masanggames.com/applications/core/interface/sounds/ - 403 http://forums.dk.masanggames.com/applications/core/notfound - 404 (Server, Version, Port) Hide Me: 3 And my last advice is the change of the title, if tomorrow someone develops a 0day for the CMS, it is foreseeable not to leave clues so that you do not become a victim.