Originally Posted by John at Webflyer
And if there was a security problem in the cvs snapshot that led to the board being pwned and the database damaged, possibly emptied? How would you react to that?
I'd say that the day lost in restoring from backup would be vastly less of a pain than the lack of FT functionality so far.
However, if you think that's a real risk, why not just patch 4.3.10 with the performance fix, if you don't want to risk taking onboard all the other changes in any CVS snapshot?
I do wonder though whether it even mattered. Okay, there were some bugs in PHP 4.3.9. Could they actually be triggered by vbulletin? If so, were any particular circumstances required? The only reports I've seen have been very superficial -- PHP had bugs, vbulletin uses PHP, therefore upgrade PHP -- and may have been an overreaction in the first place. It's amazing to me that vbulletin are being so useless in an area they should know intimately.