[Freedombox-discuss] PHP Alternatives?

Jonas Smedegaard dr at jones.dk
Sun Jul 15 10:13:26 UTC 2012


On 12-07-15 at 10:26am, Melvin Carvalho wrote:
> On 15 July 2012 03:08, Nick M. Daly <nick.m.daly at gmail.com> wrote:
> 
> > So, since there is a lot of concern about including PHP on the
> >
> 
> What's are the issues with PHP?

The issue with PHP is the high risk of security flaws.

It is a mixture of a technical and social issue: The code itself has a 
track record of many horrible bugs and is easy to write buggy code with, 
and the community around the language generally encourage a sloppy 
coding style not caring enough about security flaws.

PHP is quite popular, but contrary to big PHP using sites like Facebook, 
FreedomBox has no sysadmin to check the log files and intervene if (or 
when!) something goes wrong.

I work as a sysadmin but charge clients independently on time spent.  
That gives an incentive to invest my time in optimal _initial_ setup and 
use least possible time (ideally none!) on _maintenance_.

So I try hard to avoid languages like PHP, and also rapid frameworks 
like Rails (Ruby) and Django (Python), because IMO they have similar 
worrisome patterns of encouraging sloppy coding, even if the underlying 
language may have a sane security-aware code and culture.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20120715/ad0db6a9/attachment.pgp>


More information about the Freedombox-discuss mailing list