I started a branch for migrating to the pdo mysql driver. There are two reasons for doing this. One is that it will close a security vulnerability and two is that the current mysql driver was removed from PHP 7 so we can't upgrade with the old driver. Then I can work on removing another vulnerability and fixing registration and logout.

When I get further along, I can set up a staging board for doing some testing.

I'd be more specific out the vulnerability, but I don't feel comfortable explaining how to attack the site in public.

Hanging garlic and crosses about might help. t unhelpful

migrating to the pdo mysql driver

Is that the mysqli vs. mysql thing?

Sort of. There are three PHP mysql drivers. The old mysqld which was removed from PHP 7.0. Mysqli and the PDO Mysql. The PDO driver is pretty much the standard one nowadays.

Got it. I thought this article explains well the work involved.

Yep. That's what I've started doing. I'm also moving all the database interaction into a set of database access objects so it won't be mixed in with the rest of the code.

Yeah, good choice, even if we hadn't needed to update drivers.

I'm also moving all the database interaction into a set of database access objects so it won't be mixed in with the rest of the code.

Good move. I imagine that'll make bootstrapifying the pages a bit easier.

There's also some weird stuff going on where tables are being created. I think that can be eliminated with some better indexing.

If I can be helpful in beta testing or the like, please let me know.