phpBB is insecure, Rusty. I think it's because of the fact that the source code is available to all so everyone who wants to hack it can just get a copy, study it and exploit it. :/