And just to be clear, I would never recommend any PHP forum software (just ask the exasperated folks @ Massify), mostly because I think they are functionally retarded and security is a joke. But that has little to do with PHP than it does with the way they are written.