94
PHP foundation only has funds for one full time staff member, 14 part-time contractors, which contributed to recent PHP2Shell exploit. (www.tomshardware.com)
submitted 6 days ago by to c/technology@hexbear.net
48 comments fedilink hide all child comments
 

70% of the world's internet btw, but out-of-support deployments and little funding for permanent staff to manage the open-source project.

you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 5 days ago* (last edited 5 days ago) (2 children)

Forgive me if I am coming from a naive position, but in the case of PHP specifically, I don't think funding is the problem. PHP is fucking obsolete. The paradigm is obsolete, and the implementation is obsolete. The recent php2shell exploit is a case in point. The solution required a 13,000 line patch. This is not an issue of a simple mistake being overlooked due to constrained development resources. This is what it looks like when the Jenga tower of technical debt finally begins to collapse. This event should be looked at like the OceanGate implosion of software engineering. steering-device

I mean no disrespect to the core maintainers, but IMO anybody developing software based on PHP today is practically negligent. The project should be wound down into stasis, like X11. No application developer without at least a roadmap to adopting some more modern development practices should be taken seriously.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] [S] 2 points 5 days ago*

    honestly I agree. although the lack of resource and funding (which could have mitigated the effects of this in the first place!) the fact is that PHP was someone's weekend project and a temporary fix to that person or use case, and it became an instantaneous permanent solution with all of the horrifying technical debt that came with it.

    better yet, we keep reinventing the fucker with endless yaml templating systems lmao

  • permalink
  • fedilink
  • source
  • parent