I've done some serious sorting of security on PK recently. The logon security algorithm has been made a lot better, but for obvious reasons I'm not saying why, as the alpha version of PK is still online (somewhere) and it is a potentially hackable thing (it's been taken down by me now).

Also, user permissions have had an MD5 hashing system added as well to make sure people can't just meddle with their session data to gain access to modules they aren't allowed to access.

I've had an idea that I might do a Webdev & Nerd Stuff podcast at some point, if I get round to it, so I'll keep you updated with that and as ever with all my webdev projects.