[wp-hackers] Security at Wordpress

[Doug Stewart]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Elliotte Harold wrote:
> I've already made a few changes in the code for my personal sites. The
> more changes I make and the further my own codebase diverges from the
> official codebase, the more sense it makes to publish the whole thing,
> and make it official.
> 

That's a bit selfish.  What flaws do these patches address?  Have you
submitted tickets to Trac for them?

I don't know what your level of involvement with the WP Trac system has
been thus far, but there is a lot of activity on it.  Tickets routinely
get attention within a day or so of their submission.  If your changes
are indeed beneficial, feature-complete, etc., there's a good chance
that they will be incorporated.

To withhold your actual code and attempt to force action by
"threatening" a fork is pretty arrogant and against the principles of
Open Source development, IMNSHO.

- --
- ----------
Doug Stewart
Systems Administrator/Web Applications Developer
Lockheed Martin Advanced Technology Labs
dstewart at atl.lmco.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org

iD8DBQFETMveN50Q8DVvcvkRAjt8AJ0Rsi/ynB+S88uu3k9vnFuxDMenIQCfYTdg
zaqElkgAG5hFfkmb2m+Qotg=
=hgjv
-----END PGP SIGNATURE-----