Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

PHP Core Security Audit Results

thephp.foundation

Post reply on HN
Print view View original

61–70 of 72 posts

Re: PHP Core Security Audit Results

#61

Post by esskay »

kyriakos wrote: post #52
esskay wrote: post #44

Earlier quoted context omitted.

It feels pretty off that Laravel and Symfony, arguably the two largest benefactories to PHP being in such a good position have donated so little. Those contribution values are lifetime, Laravel hasn't funded it for over 3 years now, meanwhile its a multimillion dollar business with a huge amount of financial backing. I know its all donations and not expected, but them kicking in ~$30k a month would realistically be n…

How's Symfony making money? Aren't they just OSS? On the other hand Laravel has VC backing and sells services.

It's backed by SensioLabs (same creators as Symfony), plus theres a ton of sponsorship across the whole Symfony ecosystem. Every release is sponsored by multiple companies for example: https://symfony.com/backers

Symfony itself also had a round of funding many years ago when it wasn't rolling in cash, around $7 million if I recall.

Re: PHP Core Security Audit Results

#62

Post by hu3 »

pluto_modadic wrote: post #36
chris_wot wrote: post #8

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

I worked at a company that had half C#, half PHP developers. The PHP developers ran circles around them both in building features, and in fixing vulnerabilities (I was hired for a reason, legacy code). I can always depend on a PHP developer to outrun anyone else.

By the time a large C# solution finishes compiling, the PHP Dev already started another ticket and is pressing F5 to insta check if his code works so he can move to the third ticket of the day.

Re: PHP Core Security Audit Results

#63

Post by hu3 »

robertlagrant wrote: post #54
alexdeloy wrote: post #34

Earlier quoted context omitted.

As mentioned by others, PHP today is not the PHP that is still in most peoples heads. For me one of the big advantages is ease of deployment. No docker, no images, no overhead, scp it to any toaster running apache and you are done!

But how do you install dependencies? Is the "it" you're scping a folder structure that includes them?

Dependencies are managed by Composer (like npm, cargo, etc) for more than 10 years now.

https://getcomposer.org

Re: PHP Core Security Audit Results

#64

Post by robertlagrant »

hu3 wrote: post #63
robertlagrant wrote: post #54

Earlier quoted context omitted.

But how do you install dependencies? Is the "it" you're scping a folder structure that includes them?

Dependencies are managed by Composer (like npm, cargo, etc) for more than 10 years now. https://getcomposer.org

I was replying to the previous comment - how does this relate to that?

Re: PHP Core Security Audit Results

#65

Post by joshstrange »

wiseowise wrote: post #29
avkpatel wrote: post #23

Earlier quoted context omitted.

People are calling him savior of PHP. :D

Is it true, though? Serious question, I don’t participate much in PHP topics.

> "savior"

Ehh, I don't think I'd ever use that word but he had a huge impact on reinvigorating the PHP ecosystem as a whole with Laravel. I remember playing with early versions of Laravel on my own and having my eyes opened to a better way to structure/write code.

Re: PHP Core Security Audit Results

#66

Post by esskay »

robertlagrant wrote: post #64
hu3 wrote: post #63

Earlier quoted context omitted.

Dependencies are managed by Composer (like npm, cargo, etc) for more than 10 years now. https://getcomposer.org

I was replying to the previous comment - how does this relate to that?

You asked how you install dependencies, they answered that question.

Re: PHP Core Security Audit Results

#67

Post by jdthedisciple »

avkpatel wrote: post #21
jdthedisciple wrote: post #16

Earlier quoted context omitted.

I legit started a new customer project (simple business website) on PHP a cple days ago: The reason is simple: It's to me the most efficient, best performant SSR option out there, if your requirements are simple. You will be amazed at the website's speed. We are so used to the lethargic JS slop of the average website out there these days. I love PHP, I believe future "vibe coders" will be left bedazzled at its powers…

Did you use any plain PHP or any framework?

plain in this case (would use a framework if i needed db, and perhaps auth)

Re: PHP Core Security Audit Results

#68

Post by yurishimo »

hu3 wrote: post #62
pluto_modadic wrote: post #36

Earlier quoted context omitted.

I worked at a company that had half C#, half PHP developers. The PHP developers ran circles around them both in building features, and in fixing vulnerabilities (I was hired for a reason, legacy code). I can always depend on a PHP developer to outrun anyone else.

By the time a large C# solution finishes compiling, the PHP Dev already started another ticket and is pressing F5 to insta check if his code works so he can move to the third ticket of the day.

This hurts because it’s true and sometimes I’m jealous of the build kids who get to work on tiny features all day while I’m switching back and forth with a browser. I know native has its own challenges (looking at Apple here with the imminent redesign that will stop all product teams in their tracks) but it still doesn’t mean I’m not jealous sometimes

Re: PHP Core Security Audit Results

#69

Post by yurishimo »

mark_mart wrote: post #43
chris_wot wrote: post #8

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

Laravel. My previous employer was using it for casino/sportsbook websites and they were able to scale so much with Laravel micro services. (They had hundreds of millions of profit)

I would hope so considering they’re literally a casino…

Re: PHP Core Security Audit Results

#70

Post by yurishimo »

bpbp-mango wrote: post #41
chris_wot wrote: post #8

I am genuinely interested why anyone would start a new project in PHP currently. What are the reasons?

it's pretty nice now, you don't even need a framework

While this is true, I would say that your advice only applies if you have experience with other web frameworks from other languages. If you’re coming at it blind to any sort of web development, the features afforded to you by a web framework are really useful and helpful to understand.

For example, imagine someone who had never really thought about routing in a definitions file versus file based versus annotations. Three valid use cases that might not exist if if you have a background in something like hardware or if you come from a non-programming discipline.

If you do have that experience, you can rebuild almost any affordance in PHP at this point and it purely comes down to personal preference and how you like to write and design with code.

Post reply on HN