I am with Arnold on this one. Implement a patch that fixes the source of most of the problems, tidy the rest at leisure. Better to get an effective fix quickly than wait forever for perfection.
Security solution can't plug 90% of holes and then leave the rest for leisure... Effective fix means fixing all problems, not just 90% of it.
-- Stanislav Malyshev, Zend Products Engineer [EMAIL PROTECTED] http://www.zend.com/ -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: http://www.php.net/unsub.php