As a number of folks have noticed, the OP has been dormant for a long time. That's because we've been in the middle of a project to move from the old system (hundreds of hand-maintained files, which were kind of a labor of love for Caitlin but *wildly* hard to maintain) to a proper database. We're adapting the system from Atlantia, and it's mostly working.
But I could use some help at this point. The code needs some serious security reviews and bugfixes before it goes live, and the SQL could stand some tuning. More generally, I'd like to have a team of folks working on this in the long term, to maintain and gradually enhance it.
So: if you'd be willing to participate in this project, please drop me a line! (Or comment on this post.) I'm especially looking for folks who have significant experience in Security, SQL, PHP, or combinations of these.
Thanks!
The more immediate problem, though, is that I am *certain* that the code has SQL injection problems -- it took Gundormr all of about two minutes to find one when he began hosting it. So it's currently locked behind a server-level password, and we can't open it further until I have at least *some* confidence that we've addressed that and any other potentially severe risks...
Can you drop me a message (over LJ would be fine) with your email address? I think I'm going to set up a mailing list for the project. Thanks...
at gmail works for me.