On Mon, 28 Apr 2008, Eris Reddoch wrote:
That's fair, and yes, there *are* security issues with PHP-based forums.
Some of them are just due to the high installation rates with them; it's worth it for a lot of spammers to spend a lot of time hammering at them. We have security-through-obscurity on our side, but we also have the benefit of being able to design the thing from the ground up, instead of having to settle for tweaking a thing that's grown organically, and that dates from a time period when "forum/comment spam" wasn't even imagined.
The downside is that we *are* starting from more-or-less scratch, and that you're having to deal with a programmer who's having a really hard time living by the proverbs "release early, release often," and "the best is the enemy of the good," and "get it done, *then* get it done right," and "overanalysis leads to paralysis."
Also, with a programmer who is remodeling a house (and the abnormally late US spring is my fault: I put in a vegetable garden), taking care of various relatives, and otherwise dealing with Too Much Real Life.
But not being PHP (heh), it has a clear separation between code and templates. So if anybody out there is an HTML/CSS designer, you could help with the coding without having to actually understand the Perl guts. It uses HTML::Template:
It also uses SQL, so if anybody's an SQL optimization wizard (the Phoenyx happens to use PostgreSQL, though the point of breaking it out into a phrasebook is that you can write one for anything, and eventually we'll need translators... git, anyone?) they could tackle that.
And with this next release, I'll be publishing the git repository, so other people can look at, and install, the code.