While there is no guarantee that an exploit will or will not be found you will notice that within a few hours of tickets being submitted I have a patch created or a new release built. I think compared to many other projects, or even software that you pay for, you would not see this type of turn around.
This last ticket sat for just over 8 hours before I woke up and fixed it:
Reported: 09/17/06 02:52:45
Fixed: 09/17/06 11:31:19
But if someone wants to audit the core by all means do it, while I try to create "perfect" code, no one is that good...
--
/**
* @author Larry E. Masters
* @var string $userName
* @param string $realName
* @returns string aka PhpNut
* @access public
*/
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~----------~----~----~----~------~----~------~--~---
- Re: Security Exploit. [EMAIL PROTECTED]
- Re: Security Exploit. John David Anderson (_psychic_)
- Re: Security Exploit. Larry E. Masters aka PhpNut
- Re: Security Exploit. Felix Geisendörfer
