I don't think everyone at all agrees it needs work on efficiency. As mentioned the raw number of queries is hardly important, it is how optomised they are. Are you saying there are not optomised or bad? give proof of this please. I am not sure which page uses 8 times more queries. Perhaps you can let me know as I am sure there is a valid reason.
If you want to talk about efficiency etc, then back it up. Show me some huge threads forums with say a million + posts on them or show me some forums with 400+ on line. I recon for everyone you find I can find 5 vbulletins with similair stats. So there is a challenge I guess.
Well the fix for register_globals is really not that hard, you just type
extract($_GET);
extract($_POST);
extract($_COOKIES);
inside global.php if you don't want register_globals on, hardly rocket science.
The rapid successions is generally active response to security concerns. vBulletin has the software regularly externally audited to check things are ok. If there is a problem, however minor then these are fixed as that is better than hiding stuff under the carpet.
For example one of the responses was dealing with a new javascript security that affects basically all web based applications, and was dulely reported on bugtraq. vBulletin has a fix, that day i remember. Not so far all of infopops properites:
In reply to:
Information on this morning's compromise
Someone used a Javascript that we thought to be filtered to steal the cookies of a handful of admins, after which he logged into the control panel and shut the board down with the redirect to vB.
Signature images are now disabled and will remain so. The UBBCode IMG tag is now disabled and will remain so until further notice.
You should change your profile password. Now.
This is the reason for some of the releases and I don't think any of the developers make any apologies for keeping up to date on any and all security issues should they occur.
The last release has been a direct response to php 4.2. Unfortunatly we can't tell how PHP changes are going to affect the code until we have the software so it is naturally going to be a response after the fact.
