phpBB3 is the next major release of the phpBB discussion forum software. phpBB is probably one of the most commonly used forums on the Net and this next release has some improvements worth being excited about whether you're a discussion forum administrator or a user on a site that is considering upgrading to phpBB3. Here I will discuss my initial assessment of phpBB3 and highlight some of the key feature enhancements I've noticed.

First off, a disclaimer. I have yet to use phpBB3 in a full production capacity yet. So far, I have been testing out various features to gain a better understanding of how I will need to configure things when I do migrate one of my larger sites, which is currently running phpBB2, over to it. As such, I cannot speak to load impact or performance.

To start with, the installation was rather simple. I expanded the installation download into a directory under the webroot, and loaded that directory in a web browser to launch the installer. It walked me through an initial set of questions. It also did a good job at identifying access issues (ie. the web server user couldn't write to certain files or directories), which then allowed me to correct them before continuing. The only thing that I think would be better would be to prompt the user for an admin database user account specifically for creating the database and the forum user. As it was, I had to manually create a blank database, user account, and grant appropriate privileges to that user in MySQL. I've installed software before that performed those extra DB initialization steps for me, which I thought was very convenient. That installer was able to setup the user with only the MINIMUM privileges it needed to work, and used the "admin" account to create tables and adjust privileges. From a security perspective it is always best to assign only the minimum permissions needed for a web application to do its job. It is also worth noting that the installer also can perform a data migration from a phpBB2 database. Aside from needing to resolve quirks about the data in my old database and the mere time it took to migrate data, it went quite smoothly, especially given a migration of a 360,000 post forum.

Now onto the cool stuff. Having come from phpBB2 I was thrilled to see all of the standard features in phpBB3 that was previously only available through numerous MODs. For those that do not know, a MOD is a "MODification" to the original phpBB source code to add or change functionality. The biggest drawback, from my perspective in using a bunch of MODs is that when you need to apply the standard patches (bug and security fixes), you often end up having to manually apply large chunk of the code changes because the automated patch process has to assume original code. So, back to my point... phpBB3 has so many built-in features that most of those MODs that people used to install are no longer necessary. Of course, the MOD database is already starting to get populated with new MODs for things phpBB3 doesn't do.

A quick highlight of the features I like: multi-user private messages, user ability to lock their own topics, a significantly improved user control panel, custom Profile field support, Friend/Foe support, Forum notification subscriptions, and attachments.

Those are some of the cool user-oriented features. But phpBB3 is even better if you manage a discussion forum website. For one, the administrative control panel is significantly improved. There are now audit logs that record various moderator or administrator actions. So, if you have a team that helps you manage the site, you have logs of what was and was not done. Users can report individual posts or topics for abuse (or whatever reasons you configure) which puts the reports into a queue for admin/moderator review. Those reports can then be tracked and closed when addressed. Admins and moderators can make notes on user accounts to track any issues with that user. There is a warning system to send an official "warning" to the user. And if a particular user has been causing trouble, you can set a temporary ban that will expire on its own.

Sounds good so far, eh? But wait! There's more! One of my favorite improvements to phpBB3 has been the user authorization system. The phpBB team has finally decided to implement a good role-based access control system. It's quite a bit more complicated than what they had before (don't worry, the defaults work fine for most people), but it gives board admins so much more control. The permissions are defined to a very granular level. You can assign those permissions to defined "roles" for your site. Then you can assign individual users or groups of users to those roles. What this means is that once you get your initial set of roles created, you can quite easily manage advanced (or reduced) levels of access.

But to further elaborate on the access control, phpBB3 has defined very granular permission definitions. A single permission is something as simple as "user can send private messages" or administrator can ban users". With these small bits of access permissions, you can define administrator roles that can do much more than before, but without completely giving away the keys to the kingdom.

For those who are like me, these new features of phpBB3 will make it much easier to manage your phpBB site and to utilize the assistance your members may be offering but that you could not previously use without giving them more control than you felt comfortable with.

In summary, phpBB3 is a fantastic improvement over phpBB2. And although my exposure to other forum software is limited (not much more use other than briefly testing some out), I would have to say that phpBB3 significantly exceeds other discussion forum packages that I've seen. phpBB3 is currently in Release Candidate phase (pre-final release), however if you feel comfortable upgrading to that, the phpBB Team has stated that proper updates will be made available for the release candidates.

For more information on phpBB, check out the official phpBB website.