Originally posted by Sandman
I use Surpass Hosting. You can create a PHP based BBS and any number of other PHP services. Secure is a relative term, but it's reasonably secure IMHO. Admin isn't all that difficult, but somebody will have to learn how. It just takes a bit of reading.
Uses a control panel called "Fantastico" to install/remove things like BBS systems. It's pretty easy.
Cost is approximately $65 per year. http://www.surpasshosting.com/hostingplans.php
I wouldn't touch a host PHP service with a barge pole if you want secure. Most of the PHP attacks/worm spreaders I see are from services such as this.
If you want secure this is what I'd do:
- find the software you look
- host it yourself on an HTTP server
- stick it behind an SSL appliance (I'm thinking a Sonicwall SSL-200 or SSL-2000) with a small firewall doing internal zone IPS/Gateway AV.
- put in Two Factor Auth (ie Tokens)
it ends up looking like this:

The only gotcha is that native token support isn't due til Q3. Right now the SSL-2000 does one time passwords via email which resellers in NZ use with email to SMS services. Only catch is worldwide SMS coverage might not be too hot.
This will give you secure access, access from areas where regular secure access might be difficult, including net cafe's where people may try and sniff passwords. And lotsa other stuff (read the brochure I'm to tired to type it all).