Re: PostgreSQL with Phorum - Mailing list pgsql-general

From Brian Moon
Subject Re: PostgreSQL with Phorum
Date
Msg-id 015e01c24674$fb7f2680$0100a8c0@doughboy
Whole thread Raw
In response to PostgreSQL with Phorum  ("Brian Moon" <brian-pgsql@phorum.org>)
List pgsql-general
| Hi Brian,
|
| This sounds interesting.  If you want to really learn to get the most
| out of PostgreSQL, you're probably best to join the PostgreSQL "Hackers"
| mailing list.

Is this an unsupported mailing list?  I don't see it on the PostgreSQL web
site.

| If you've learnt not to deliberately leave backdoors in your code so you
| can walk into sites', as you used to do with Phorum's code, then you
| might find some people here willing to help.

Well, it was never deliberate.  We did have some issues recently that would
allow code to be run on the server, however, if one followed the
installation instructions and followed what we recommended to secure your
files, there was no danger to you.  We also got a fix out within a day of
finding out about it.  That said, we didn't follow our own advice and got
hacked.

| Just checked the Phorum website and noticed you've removed the original
| advisories, from a few years ago.
|
| Hmmmmm.... don't be surprised if people here watch you *very carefully*,
| due to your prior history of having abused people who placed trust in
| you.

Are you speaking of personal experience?  Not sure what you are talking
about from a few years ago.  Phorum is only 3.5 years old.  We did have some
things late 2000.  Those were addressed and fixed.  Software has bugs both
big and little.

Thanks,

Brian.
Phorum Dev Team


pgsql-general by date:

Previous
From: "Christopher Kings-Lynne"
Date:
Subject: Re: [PHP] PostgreSQL with Phorum
Next
From: Justin Clift
Date:
Subject: Re: PostgreSQL with Phorum