5 ms·
It's ancient PHP. What do you expect? Hell, Facebook doesn't even use PHP anymore having replaced it with a pseudo-superset, Hack. If you want security, don't
by 1letterunixname 3y ago
It's ancient PHP. What do you expect?
Hell, Facebook doesn't even use PHP anymore having replaced it with a pseudo-superset, Hack.
If you want security, don't cargo-cult what everyone else is doing or use third-party code. Third-party code in dynamic languages is footgunning in a mine field.
Easy || popular != sustainable
- berkle4455 3y ago> It's ancient PHP. What do you expect? It's an XSS vulnerability. There's 22,329 XSS CVE's across every language and platform you can imagine. https://www.cvedetails.com/vulnerability-list/cweid-79/vulnerabilities.html https://www.cvedetails.com/vulnerability-list/cweid-79/vulne...
- woodruffw 3y agoThe question isn't what you or I expect; it's what non-technical people who administrate a WP site that was set up for them might reasonably expect.
- EdwardDiego 3y agoPfft, I can write insecure code in any language.
- graypegg 3y agoIf you can’t FootGun.shoot(Foot) then are you really free?
- deafpolygon 3y agoAren't you the one cargo-culting by saying PHP is ancient? It has nothing to do with "ancient". PHP is still a very strong language to be using even now - sure it isn't what the cool kids are using, but it is hardly ancient. Third-party code is everywhere. What are you on about?
- code_duck 3y agoI assumed GP meant WP was PHP written a long time ago, not that the language is ancient or obsolete. Whether that’s accurate (has the WP code base been revised much?), I have no idea.
- deafpolygon 3y ago> has the WP code base been revised much? It has undergone many changes over the years, as evidenced by https://www.wpbeginner.com/news/the-history-of-wordpress/ https://www.wpbeginner.com/news/the-history-of-wordpress/ and also taking advantage of PHP and MySQL improvements along the way.