125
PHP: you get your burger (media.piefed.social)
submitted 2 weeks ago by to c/programming@programming.dev
37 comments fedilink hide all child comments
 

https://www.bbc.co.uk/news/live/ckgel5xp2xv9t?post=asset%3Ac8185d02-3e14-4e83-9a99-6d3be2de04bd#post

Titled 'PHP How It Works' we see visiting a website likened to ordering a burger. The image shows a woman at a table ordering from a waiter, the waiter visits the kitchen, the waite returns with the burger. "To understand how PHP works, we’re taking you to a restaurant. Think of going online to visit a website like ordering some food. When you enter the site, the web server takes your request and runs the PHP code - like a waiter taking your order to the kitchen. The PHP code searches the site's database and follows a script to prepare the page - like a chef following a recipe to make a meal. When complete, the web server then delivers the page to the browser, and it appears on screen - that’s your waiter bringing you your dish."
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 weeks ago (4 children)

Wait it was known!? They didn't just discover it and fixed it quickly?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 16 points 2 weeks ago (1 child)

    It's not a quick or easy fix. The patch is a 10000 line nightmare. No really it's actually 10k. A lot of that is test code, but there are also significant changes to deep engine internals.

    PHP did really really bad memory limit handling. Now it's only really bad.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 10 points 2 weeks ago (1 child)

    No, they chewed snots for years because there wasn't a trivial and straightforward fix and exploit looked too "theoretically possible". But some time ago(months? year?) some company showed them a working exploit, so they started to think how to actually fix the problem. All that time they kept all in secret so hackers wouldn't know. But the fix had leaked, letting hackers to figure out what was the vulnerability in the first place, so snot-chewing was replaced with running-and-screaming. By now everything is fixed for those who cared to update\recompile. Something like that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •