"SELECT password FROM pool_worker WHERE username = ?"

{
   # network ports
   "listen" : [
      # binary protocol (default), port 8336
      { "port" : 8336 },

      # HTTP JSON-RPC protocol, port 8337
      { "port" : 8337, "protocol" : "http-json" },

      # HTTP JSON-RPC protocol, port 8339,
      # with trusted proxy appserver.example.com forwarding
      # requests to us
      { "port" : 8337, "protocol" : "http-json",
        "proxy" : "appserver.example.com" },

      # binary protocol, localhost-only port 8338
      { "host" : "127.0.0.1", "port" : 8338, "protocol" : "binary" }
   ],

   # database settings
   "database" : {
      "engine" : "sqlite3",
      "name" : "/tmp/data.sqlite",
      "stmt.pwdb" :
        "SELECT password FROM pool_worker WHERE username = ?"

      # ... or ...

      "engine" : "mysql",

      # 'host' defaults to localhost, if not specified
      "host" : "mysql.example.com",

      # 'port' uses proper default port for the DB engine,
      # if not specified
      "port" : 12121,

      "name" : "mydatabasename",
      "username" : "myuser",
      "password" : "mypass",

      "stmt.pwdb" :
        "SELECT password FROM pool_worker WHERE username = ?"

      # ... or ...

      "engine" : "postgresql",

      "host" : "db.example.com",

      "port" : 12121,

      "name" : "mydatabasename",
      "username" : "myuser",
      "password" : "mypass",

      "stmt.pwdb" :
        "SELECT password FROM pool_worker WHERE username = $1"
   },

   # cache settings
   "memcached" : {
      "servers" : [
         { "host" : "127.0.0.1", "port" : 11211 }
      ]
   },

   "pid" : "/tmp/pushpoold.pid",

   # overrides local hostname detection
   "forcehost" : "localhost.localdomain",

   "log.requests" : "/tmp/request.log",
   "log.shares" : "/tmp/shares.log",

   # the server assumes longpolling (w/ SIGUSR1 called for each blk)
   "longpoll.disable" : false,

   # length of time to cache username/password credentials, in seconds
   "auth.cred_cache.expire" : 75,

   # RPC settings
   "rpc.url" : "http://127.0.0.1:8332/",
   "rpc.user" : "myusername",
   "rpc.pass" : "mypassword",

   # rewrite returned 'target' to difficulty-1?
   "rpc.target.rewrite" : true
}

Incorrect.  I wrote 99% of pushpool.

Move to other pools. Stop mining on deepbit.

Here’s what someone with 50% of the network’s hashrate could do.

One good reason I can think of is that it allows it to be re-used and tightly coupled to commercial products without the same source code disclosure requirements as GPL. For example a it could be integrated into closed source commerce package that otherwise wouldn't support it, and wide apoption is more important than protecting the code itself.

tl;dr (I'll get around to it )

The 5850 can be unlocked to a 5870 with a simple bios upgrade. and I think they have a dual bios so you can't brick them either. best Mh/$ card for sure. if my cheap 5870 supplier sells out before I get my fiat sorted out I'll be getting a 5850 for sure.

There are many missing features. Like removing that stupid wait for 100-120 blocks for the confirmed reward or lowering it down. Adding a simple payout button instead of threshold.

Your pool has been online for a long time, it has a nice design, but these two features are missing; And i feel as though you havent coded any new features at all. Your pool is yet to be complete my friend