I must have looked bored for a millisecond..... So I got another project....

The scenario: Users want to create a BBS type system to be available on a member basis to the internet. They would have an administrative user but would like the ability to have moderators etc. Basically a chunk of the functionality of AO but without APs and the like.

The solution: Placed on a server of it's own in the DMZ and managed, (non-technically), by a memeber of that department i don't have an issue. I was asked to decide what software to use. I don't want a custom written job... a plain jane, reasonably priced, well supported off the shelf would do me just fine.

The problem: I trot on out to google and do a search.... There's loads of them, phpBB, IdealBB, Ikonboard...... the list goes on. So I start typing the names and the word "exploit" into google and all of them I have checked have a list as long as your arm of exploits..... One stood out insofar as they seem to publish alerts for the exploits against their system, (phpBB). The problem is that they list more exploits than M$ which is a bummer to say the least.

The question: Do any of you have experience with these things and can recommend a cost effective, (read: cheap), well supported, secure system that would fit what I am looking for.

Thanks for any insight.