Live data from Hacker News

PHP Core Security Audit Results

thephp.foundation

31–40 of 72 posts

Re: PHP Core Security Audit Results

#32

Earlier quoted context omitted.

People are calling him savior of PHP. :D

Is it true, though? Serious question, I don’t participate much in PHP topics.

I'm a heavy PHP & Laravel developer and I speak for myself and a few close friends around my in my network who are like me. We all consider Laravel the reason we are still within the PHP scene and didn't move away. So in a sense I think it is true.

That said, the recent changes around Laravel (being bought out and becoming more and more commercial) is not something I (we) consider a good thing. Not necessarily a bad thing, but we all know that a OSS framework becoming commercial doesn't usually end well.

Re: PHP Core Security Audit Results

#34

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

As mentioned by others, PHP today is not the PHP that is still in most peoples heads. For me one of the big advantages is ease of deployment. No docker, no images, no overhead, scp it to any toaster running apache and you are done!

Re: PHP Core Security Audit Results

#35

Earlier quoted context omitted.

People are calling him savior of PHP. :D

Is it true, though? Serious question, I don’t participate much in PHP topics.

It's hyperbole, but like so often, there's a grain of it truth somewhere.

Also, like most things, Laravel is built on the shoulders of others. It sometimes makes hard things easy to access (ppl like this) and hides complexity away, clouding how things actually work (ppl don't like this).

I primarily use Laravel but like to think I code in a generalist if way as to not get stuck in its system.

Re: PHP Core Security Audit Results

#36

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

I worked at a company that had half C#, half PHP developers. The PHP developers ran circles around them both in building features, and in fixing vulnerabilities (I was hired for a reason, legacy code). I can always depend on a PHP developer to outrun anyone else.

Re: PHP Core Security Audit Results

#37
post #17

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

Because it's good enough for almost everything. The vast majority of projects will never have to scale to billions of users, so hyperscalability is not a huge concern. It has a low barrier to entry and great language features - static typing being one of the big ones. It has become a really nice language over the years, great to work in and in no way less satisfying or effective than for example golang. And, of cours…

> It has a low barrier to entry and great language features - static typing being one of the big ones

... and it's completely optional in many cases on top of that. Even if you're using third party libraries, it will only crash if you mess up your types at the library's interface.

Re: PHP Core Security Audit Results

#39

Earlier quoted context omitted.

Crazy that Automattic only makes 4,843,750 a year (and donates 8% to the PHP foundation).

Automattic has annual revenue of over $700m where did you get that number from?

They are referring to the dispute between Matt Mullenweg / Automattic vs WP Engine.

Mullenweg has been demanding 8% of WP Engine’s revenue, access to their books, and the ability to direct their staff on what to work on. For context, Mullenweg is maintainer of WordPress and WordPress.org, and CEO of WP Engine’s direct competitor, Automattic. The dispute has turned very nasty and included a lot of unhinged behaviour from Mullenweg. WP Engine is currently suing him for a bunch of things, including extortion.

davidandgoliath is basically saying that if Mullenweg thinks he is owed 8% of WP Engine’s revenue, presumably Mullenweg is donating 8% of Automattic’s revenue to the PHP Foundation, making their revenue only ~$5MM/yr. Obviously Automatic’s revenues are vastly higher than that and this is just a tongue in cheek way of pointing out hypocrisy.

Re: PHP Core Security Audit Results

#40

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

If all the other reasons given here don't convince you already, I have one more to offer: Match Expressions[1]!

[1]: https://php.watch/versions/8.0/match-expression

Post reply on HN