4 ms·
> running very old code on a very old operating system / PHP version > the new system supports TLS 1.2, which means you should no longer see TLS version warnin
by yabones 6y ago
> running very old code on a very old operating system
/ PHP version
> the new system
supports TLS 1.2, which means you should no longer see TLS version warnings
> The implementation has been moved towards using parameterized queries,
to be more confident that SQL injections cannot occur.
> plain md5 hash
That's not fantastic. I get that people often don't touch working legacy systems for fear of breaking them, but this sounds rather avoidable. Does the PHP project go through any audits or risk assessments? It's rather surprising for, as others have mentioned, the backbone of the majority of ecommerce websites.
- delfinom 6y ago>That's not fantastic. I get that people often don't touch working legacy systems for fear of breaking them, but this sounds rather avoidable. Does the PHP project go through any audits or risk assessments? It's rather surprising for, as others have mentioned, the backbone of the majority of ecommerce websites. PHP only has 2 full time engineers that work on the core. Everyone else is a volunteer, what do you expect? Companies to actually contribute towards employing more active contributors? HAH