121–130 of 174 posts
Earlier quoted context omitted.
Critical mass, availability of developers, good documentation, free. There are many reasons why people pick one technology over another.
Aren't C# devs at least as easy to find as php devs already? This would vary regionally I suppose. I'd worry about the future availability of php devs if node/.NET keep growing as open source web backend platforms. And .NET is as free as php?
Earlier quoted context omitted.
Except… you don't? > WordPress also works with PHP 5.2.4+ and MySQL 5.0+, but these versions have reached official End Of Life and as such may expose your site to security vulnerabilities > PDO ships with PHP 5.1, and is available as a PECL extension for PHP 5.0 Unless you mean "hosts that disabled PDO"… I think they can safely be ignored.
PDO is disabled by default, and was even on default installs of 5.6 last I checked.
Just checked, seems enabled by default on FreeBSD.
(Commented out in php.ini doesn't mean disabled — here it's enabled in separate files like /usr/local/etc/php/ext-30-pdo_mysql.ini)
MODX Revolution uses PDO exclusively, never had problems with it on any hosting service.
Earlier quoted context omitted.
> Http.sys also seems like a more secure product than openssl How is a goddamn HTTP parser in THE KERNEL more secure than a crypto/TLS library? http.sys is a fundamentally horrendous idea, see CVE-2015-1635 https://technet.microsoft.com/library/security/MS15-034 An exploited HTTP parser shouldn't lead to RCE "in the context of the System account".
The .NET Core example in the article uses the ASP.NET Core Kestrel server which operates entirely in user mode.
Any chance we can get PHP's HashDoS vulnerability removed if we switch to PeachPie? PHP 7.2 will make libsodium a core extension, so if you use that, you can make use of SipHash-2-4.
Earlier quoted context omitted.
> Http.sys also seems like a more secure product than openssl How is a goddamn HTTP parser in THE KERNEL more secure than a crypto/TLS library? http.sys is a fundamentally horrendous idea, see CVE-2015-1635 https://technet.microsoft.com/library/security/MS15-034 An exploited HTTP parser shouldn't lead to RCE "in the context of the System account".
That's mostly client-side and easily avoided by not using IE/Edge. .NET uses its own library as well I believe. Not sure what the default is. Historically, the schannel infrastructure has been secure, especially as compared to openssl. >How is a goddamn HTTP parser in THE KERNEL more secure than a crypto/TLS library? Because, lets face it, openssl is a shit project of legacy code no one wants to fix and https a desig…
"Disable IIS kernel caching"
That's definitely not client-side at all. IIS is the thing that uses http.sys, and classic ASP.NET apps (not the new Core stuff) are usually deployed with IIS.
<3 this! any idea on when it will be production-ready?
Earlier quoted context omitted.
The benchmarks http://www.peachpie.io/benchmarks show peachpie outperforming PHP7 easily by 100x.
On Azure, without Opcache enabled. That's not a very good comparison.
Earlier quoted context omitted.
I would look at sitecore. It's still .net, but it is closer to wordpress in that you wouldn't necessarily build a sharepoint in it, but you can build pretty much anything else in it. Disclaimer, I work on the UX/UI side of a company that focuses solely on sitecore.
I only had a project with Sitecore, v6.5 at the time, and really enjoyed using it. Just the overall replication of Windows desktop for the backend management UI seemed a bit extreme. :)
Earlier quoted context omitted.
Aren't C# devs at least as easy to find as php devs already? This would vary regionally I suppose. I'd worry about the future availability of php devs if node/.NET keep growing as open source web backend platforms. And .NET is as free as php?
Not in places where wages are low.
Earlier quoted context omitted.
This is on .NET Core, so you can actually run this anywhere! I do a lot of Core development on a Mac, but it runs well on AWS/Linux/my toaster. Weird times, huh?
Out of curiosity, why do you use .NET? (Assuming you use Mac/AWS/etc because you like them)