MyBB installation

Forum Fortress for MyBB is a 1.0 beta plugin for MyBB 1.8.x. It checks registrations, new threads, replies, post edits, profile/signature changes, and the contact form before MyBB publishes or stores the action.

The beta package contains one file: inc/plugins/forumfortress.php.

Before you start

You need:

MyBB 1.8.x and PHP compatible with your MyBB installation
an administrator account with permission to manage plugins and settings
filesystem, SFTP, SSH, or hosting-panel access to the MyBB installation
outbound HTTPS access from PHP to Forum Fortress on port 443
a current backup of the forum files and database before making a production change

The plugin needs PHP’s HTTP client support (normally cURL) and a server clock that is reasonably accurate. If the forum is behind a reverse proxy, make sure MyBB receives a trustworthy visitor IP address.

Privacy and outbound access

Forum Fortress sends information needed to assess an attempted action, including the submitted content, account details relevant to the action, IP address, and user agent. Review Privacy and network access before enabling it on a live community.

If your outbound firewall is restrictive, allow HTTPS traffic to hosts ending in:

*.ffapi.net

Install the beta

Download the latest MyBB beta ZIP from forumfortress.com/#platforms.
Extract the ZIP locally. It contains inc/plugins/forumfortress.php.
Back up your existing <mybb>/inc/plugins/forumfortress.php file if one exists.
Upload the extracted file to <mybb>/inc/plugins/forumfortress.php. Preserve the inc/plugins/ path from the archive.
In the MyBB Admin Control Panel, open Configuration → Plugins.
Find Forum Fortress and select Install & Activate.
Open Configuration → Forum Fortress. This is the plugin dashboard; it is separate from MyBB’s raw settings form.
Select Bootstrap site. This creates or refreshes the Forum Fortress identity for the forum.
Select Connection test and confirm the displayed API checks succeed.

If bootstrap reports that this site was registered before, use the Forum Fortress portal to open a re-registration window, then bootstrap again. Alternatively enter the supplied API key and site ID in Open Settings.

Configure protection

Use Configuration → Forum Fortress → Open Settings to control:

Setting	Recommended starting value
Enabled	Yes
API base URL / Control base URL	Leave at the Forum Fortress defaults unless support directs otherwise.
Request timeout	5 seconds
Fail open	Yes during the beta; an API outage will not stop normal community activity.
Send ham feedback	Yes if you want approved activity to improve feedback signals.
API key / Site ID	Managed automatically by bootstrap. Do not share these values.

The dashboard displays a masked API key, site identity, endpoint state, plan, attack-mode state, and recent decisions. It does not expose raw API JSON.

Use the dashboard

Open Configuration → Forum Fortress for the operational controls:

Portal login opens the Forum Fortress portal for the connected site.
Bootstrap site creates or refreshes this forum’s integration identity.
Connection test checks reachability, API capabilities, and current site status.
Enable attack mode temporarily applies the service’s stricter anti-spam policy during an active spam wave.
End attack mode returns to the normal policy.
Open Settings opens MyBB’s standard setting editor for the plugin.

Attack mode and portal login require a stored API key and site ID. The buttons remain unavailable until bootstrap completes.

What MyBB does with a decision

Forum Fortress decision	MyBB outcome
Allow	The action continues normally.
Block	The registration, post, edit, profile change, or contact submission is rejected before it is written.
Challenge	Registrations use MyBB’s Awaiting Activation group; content is sent through MyBB’s native moderation path.
No response	MyBB allows or blocks according to Fail open.

Recent checks are recorded in the local Forum Fortress decision audit table and visible on the dashboard. Treat the activity log as operational context; the customer portal is the source for account and service controls.

Update the plugin

Download the new MyBB ZIP.
In Configuration → Plugins, deactivate Forum Fortress. Do not uninstall it for a normal update; uninstall removes its local settings and audit data.
Replace <mybb>/inc/plugins/forumfortress.php with the new archive’s file.
Return to Configuration → Plugins and activate Forum Fortress.
Open Configuration → Forum Fortress and run Connection test.

If MyBB serves an old ACP page after an update, refresh without cache or clear the browser cache. The dashboard itself sends no-cache headers for its action state.

Disable, uninstall, or reinstall

Disable temporarily: select Deactivate in Configuration → Plugins. The file and settings remain in place, but checks stop.

Uninstall completely: select Uninstall. This removes the Forum Fortress settings group and local decision audit table. It does not delete the remote Forum Fortress site identity. Remove <mybb>/inc/plugins/forumfortress.php afterwards if you no longer want the plugin file on the server.

Reinstall: upload the plugin file, select Install & Activate, bootstrap the site if needed, and run a connection test.

Troubleshooting

Symptom	What to check
Plugin is not listed in ACP	Confirm the file is exactly `<mybb>/inc/plugins/forumfortress.php`, readable by the PHP/web-server user, and has not been uploaded inside an extra directory.
Only raw MyBB settings are visible	Use Configuration → Forum Fortress. If the entry is missing, replace the plugin file with the current beta and reactivate it.
Bootstrap or Connection test times out	Check server DNS, PHP cURL, outbound port 443, firewall/WAF rules, proxy configuration, and the configured endpoint URLs.
Portal / attack-mode buttons are disabled	Bootstrap the forum successfully or enter a valid API key and site ID in Open Settings.
Legitimate actions are blocked	Check the dashboard decision history and portal, then enable Fail open while investigating if continuity is more important than strict blocking.
Changes do not appear after replacing the file	Deactivate and reactivate the plugin, then refresh the ACP without cache.

For help, include the MyBB version, PHP version, plugin version, forum URL, approximate time of the event, and the connection-test result. Do not include your API key in a support message.