On Tue, 21 Dec 2004 10:11:52 +0100, Stefan Sonnenberg-Carstens <ssc@xxxxxxxxxxx> wrote: > Don't you think some people have reasons to wait with > pulling patches and fixes out ? Propably. But it's been already quite a while and there hasn't been much discussion (as Kenneth's mail was not replied). There are plenty of nasty exploits taking advantage of these security holes in php, so it isn't that easy just sit back and wait. http://news.netcraft.com/archives/2004/12/18/php_exploit_enables_theft_of_phpbb_passwords.html