Important: Official security patches no longer offered for phpBB 2.

Disable User IP Storing
Will make your board operate without knowing any or ever recording any user ip addresses.

Disallow Password Same as Username
Disallows people from using their username as their password.

Easy BotStopper
Removes the website field upon registration (but it can be added after the user has registered) so humans will not be affected.

Easy Contact Form
Allow members to contact you without them having to login.

Encrypt Your config.php (No More Clear Text Password)
Your database password is not encrypted in config.php. This hack allows you to encrypt.

Enhanced IP Logger
This Hack logs all possible user settings.

Enhanced IP Logger (DB Based)
A hack that logs all possible user settings. This one is DB based.

Fix Hidden Topics
Makes it so that users won't be redirected to the login page when viewing a hidden topic. Instead, they will get a "Topic doesn't exist" message.

Hashcash Registration Protection
Stops spam bots from registering (and hence posting spam if only registered users are allowed to post), through Hashcash anti-spam protection.

Hidden Login
Allows users to login Hidden, so they aren't listed in the "who's online" part / page.

Hide Inactive Accounts
Discourage spammers by hiding unactivated accounts from view.

Hide Inactive Member
This hack hides all non-active members on the memberlist pages from all other users. Admin level users still see the complete list.

Hide Online Status Temporarily on Login
Allows members to hide their online status before login and for that session only.

Inverted Visual Confirmation
Changes the visual confirmation images that are shown in the standard phpBB visual confirmation. It inverts them so that the background is dark and the letters are light.

IP Logger
It logs some valuable information about people making posts on your forums.

Live E-Mail Validate
Does a live test of a user's mailbox using the MX record for the supplied domain (the part after the @).

Log Registration IP
Stores the real IP that an account is registered through.

LoginEncryption Hack
Re-encrypts passwords in the database and in the auto-login cookie, so that attackers can't login even if they got the user's password hash.

No Logged in Registrations
Stops any users from accessing your registration page if they are already logged in and redirect them to your index.php (or any page that you would like).

No One Can See Your Files
Makes it so that no one can see your files when they access a directory. To access a file, they will have to know the name and exact path of the file.