A lot of people in techny internet spaces online are talking about a PHP embargo. What does that mean and what's going on?

you are viewing a single comment's thread
view the rest of the comments
[–] 27 points 6 days ago (8 children)

Because it works. Why spend the money to rewrite something in another language when the current one is working fine?

  • source
  • parent
  • hideshow 8 child comments
  • [–] 12 points 6 days ago (2 children)

    angry Rust noises in the distance

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 6 days ago (1 child)

    That’s the problem with PHP. It’s quite easy to build something that works. It’s quite another to build something that works and is secure, scales well, is maintainable, etc. The thing is that ‘it works’ is something that people see immediately. Those other things they only get to experience when it’s too late.

    This is compounded by the fact that because it’s so easy it attracts a lot of inexperienced developers who don’t even consider things like security. Add to that that the language is full of footguns.

    That’s not to say it’s impossible to build good apps in PHP, but that is despite the language, not because of it. It takes experience, knowledge and discipline to write something secure and maintainable in PHP. Something a lot of PHP users don’t have.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 5 days ago* (last edited 5 days ago)

    Most of the main issue here where standard SQL practices were hugely insecure went by the wayside over a decade ago and the other issues are common to all internet work. PHP got to carry that heritage though.

    But like, I’ve seen early work from a guy now making huge bucks with nvidia on their streaming side where I hacked it within minutes because he just didn’t know that you can’t do security with front end JavaScript.

  • source
  • parent
  • [–] -4 points 6 days ago (2 children)

    Because it works.

    As evident from this week troubles, no it doesn't.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 6 days ago (1 child)

    Yea it does. Every language has bugs, every program has bugs. The measure of a language is not does it have bugs its how does the governing body respond to problems.

    You could have the best language, fast to run, fast to build, uses low resources, but I'd the governing body responds to bug reports saying "well don't do it then" or "user error" its adoption is not likely to happen.

  • source
  • parent
  • hideshow 1 child comment