you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 2 weeks ago (6 children)

Sounds like a reminder to (a) migrate off PHP wherever possible, and,

“The vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory,” Wiz writes in its research. “That memory may contain passwords, authentication tokens, API keys and certificates belonging to other requests or the server itself.”

Keep your server processes sandboxed / running as a dedicated user.

And if you don't actually need dynamic rendering (looking at most WordPress installations), use a static site generator (Jekyll, Hugo, etc).

  • source
  • hideshow 6 child comments
  • [–] 5 points 2 weeks ago (2 children)

    I seriously wonder how PHP got so popular. It has never been a paragon of ... anything from a serious engineer perspective.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 2 weeks ago

    Because it's easy. Just do some HTML markup and some CSS and slap some <?php inline. This is partially the same reason why there are so many horribly outdated versions "in production".

  • source
  • parent
  • [–] 2 points 2 weeks ago*

    Low bar of entry compared to everything else back in the day. Also quite fast being written in C. Then Laravel came around and it exploded in popularity. And of course you have WordPress that back in the day allowed everyone to get a site up and running. Not just blogs, due to the vast amount of plugins. There are more, butI think those are the biggest reasons.

  • source
  • parent