Technology

59322 readers

4980 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

How is the security level of PHP in 2023? (lemm.ee)

submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]

23 comments fedilink hide all child comments

In the early 2000s, everyone in my bubble knew that PHP was a security nightmare, only seconded by Flash. In the meantime, Adobe gave up on Flash, but PHP is still alive and rocking.

How did that happen? Did PHP get some serious makeover? Do developers just not care?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 1 year ago (1 children)

Have you ever seen how shared hosting works for some of the languages you mentioned? For Node for instance it's the same as PHP, you upload an index.js and that's it.

[–] [email protected] 4 points 1 year ago (1 children)

I may be out of date on node.js. What is the price point for that? I'd imagine they'll have to fire up a separate interpreter for each customer? I'd expect that to be more expensive.

The point here wasn't really the user experience, though, but what is cheap and easy to support for a company providing bottom-tier shared hosting.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago)

It's not more expensive. Shared hosting pick a fixed capacity and they try to cram as many customers as possible per shard. That includes shenanigans like putting two resource-intensive accounts on one shard and 50 low-resource accounts on another even though they're all paying for the same tier.

Yes with Node you have a process per account but it's easier and cleaner to manage resource limits like that. I will take managing shared Node hosting over PHP any day, it's much easier and more secure.

Overall the cost of shared hosting with Node or PHP is the same, what you don't do is offer both at once because it complicates things. Typically you let customers choose the backend language option (PHP, Python, Node) and a database engine (MySQL, Postgres, Mongo) and that's it.