Re: ampache security audit

[Bernd Zeimetz <bernd@bzed.de>]

Hi,

>  You can look at ampaches Code Philosophy at
> https://ampache.bountysource.com/wiki/Code_Philosophy
> 
> and ampaches Coding Standards at
> https://ampache.bountysource.com/wiki/Coding_Standards

that's nice to read, but people who write the code should not audit it
imho. It's like reading a book you've written, you won't find the
mistakes. Also it's nice to have a philosophy and standards, but there
must be somebody who makes sure that they're enforced.
Especially for such *insert curse words here* languages like php it's
very important that somebody from the outside of the project audits the
code, for example the package maintainer.

-- 
Bernd Zeimetz
<bernd@bzed.de>                         <http://bzed.de/>