So glad to see that Python finally made it big in 2022
post
Why is Python on the list three times?
JavaScript has similar.
The first two are frameworks, the third is:
def serve(p: int, f):
s = socket.socket()
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) # let me reset plz
s.bind(("", p))
s.listen()
while True:
c, a = s.accept()
c.setsockopt(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1)
t = threading.Thread(target=serve0, args=(c, a, f))
t.daemon = True
t.start()
I have an entire file of some really cursed malicious compliance code for when I was brutally forced to write Python.
I notice the absolute absence of "index.html"
Because Python is supreme.
PHP is dead, learn Brainfuck
So, you could have programmed happily in php for 30 years, or jump on the new bandwagon every other year? compelling argument.
While the language has improved over the years, I've personally never seen a PHP codebase that made me happy.
Or, if you spin it another way: you could've picked up the skills to develop for and support various frameworks, or get stuck in a rut for 30 years with just a single antiquated server-side language.
If its so antiquated why is it still used? For a lot of things its perfectly fine. Even this vulnerability is just a case of run the update command for your package manager.
It's still used because momentum is a powerful factor. That doesn't make PHP better, but it can make it a more expedient choice.
PHP is a preprocessor that grew too big for its britches. It's a monolithic monster that runs only one thread per request in an interpreter. It works well enough if you need to manage the data of an internet forum, but it becomes increasingly unsuitable as the task's complexity grows. If you need threading or background tasks, or if scalability is important, PHP is not it; just read any number of Nextcloud vs OpenCloud comparisons.
Fair, but a lot of sites don't need anything more complex than an internet forum, often less than even that.
"one thread per request" , "interpreter"
(Looks confusingly) That's JS and Python as well
PS: being obtuse on purpose, but PHP lends itself well to typical requirements of web hosting and you can always call out to a diff process if needed
You realize that the language evolved over the years and it's not even close to the same language it was 15 years ago?
The fact that you also mix frameworks and languages also tells me that you have no idea what you're talking about
"well...it's too late now"
Why is that written on an Office Space screenshot? That doesn't make any sense. It's not even close to anything said in that scene.
Why do people insist on shoving memes into everything? Did they not think their post was good enough on its own?
How does the picture make it funnier here?
I don't think I'll ever understand the affinity for it. It's the Internet equivalent of that annoying kid in middle school who couldn't have a conversation without quoting The Simpsons or South Park lol
Have you ever heard of the phrase "a picture says a thousand word"?
Memes became a thing at a time when even emojis weren't even a thing; though smilies were present, it was too cumbersome and not mainstream. At that same time "personalized content" was only a capitalist wet dream. Most people watched the same selected channels thus creating a "mono culture".
Then phones with image sharing, widespread internet, and a bunch of other things became widespread enough that we needed way to quickly express complex emotions without both us and the other partner needing to know obscure name of that emotion/feeling. And that's how memes became so popular.
Nowadays, we no longer have that same mono culture. So only memes we have today, are the ones became viral on the internet.
Sorry for the lecture...
It's losing it's meaning over time, probably because the movies not being watched by "new" people very much. If you take out the movie context that made the meme he looks like he could be saying the text and I guess that's good enough for people.
Everyone has forgotten java applets+ java servlets combo. I have no idea why it didn't survive, but if it would have, it'd defeated PHP (in amount of vulnerabilities ofc)
I was told in school that Java applets were the future and they made us take a class that focused heavily on them. I did make a few games in applets, but they were always janky and I am glad they are dead.
I had to remove the applet-based server architecture when moving java 11->17.
The authors thought that it would be the right decision to accept code from users as applets
That's both hilarious and scary. Scarlarious, if you will.
Now comes the scariest part. We removed this in early 2024
Applets were killed by Flash, which then became obsolete.
.Net has been chugging along quite nicely for decades now.
And COBAL COBOL just won't die.
.NET is the single best thing Microsoft makes.
It’s fast, multi platform (all mine runs in Linux containers), and the developer tools are pretty good too.
I really HATE that Microsoft made it, but I love C# and .NET.
Last place I worked at that abused used .Net was serving an angular web app to interface with a c++ BE using soap.
Now that sounds sane, until they made their own C++ to CSS transpiler to be able define the ui in back end code. Like angular written in c++ translated through .Net.
Through no fault of .Net I just can't get past those flashbacks.
To be fair that's only like top 5 most fucked up code I saw there.
As backend code, yes. As a web (web, not api. As an api platform they're great) platform... No.
Asp.net and mvc were imo a disaster, silverlight was... Oof.
Then there is maui which could have done it using blazor but just... Didnt.
... And then there is blazor itself.
Though blazor is imo the best of all the web platforms they had, and i like it, it still has very rough edges and is not gonna replace javascript any time soon.
Hell, microsoft cant even decently support their own web ui platform ( fluentui ) because their backbone ( webcomponents ) is completely broke ( or did v3 FINALLY release? ). There are other blazor frameworks but they all seem to not take full advantage of blazor and its disgusting.
What about modern ASP.NET? It feels pretty good these days honestly. I even really like the newer minimal API features
As i said, the api stuff of asp.net is very nice and straight to the point. The only bad thing ive got to note there is the openapi spec implementation they introduced in .net 10 is just terrible but itll improve quickly, its just early in its implementation ( like how system.text.json was )
Just spent my entire morning patching legacy servers running PHP 7.0 applications. Fun times.
When I was a wee high school kid, asp.net was windows only back then and getting cheap windows hosting was harder than it was getting cheap linux hosting, so I focused on PHP more.
I haven't touched it in forever, but its probably still good, right?
And if everything had moved to one of those, almost surely there would also be similar impacts in a similar cve to point at to say "we should be using something else!"
Also missing: React Node.js Vue.js Spring boot Ajax jQuery Probably like 15 others I'm forgetting
Fuck me, if my choice is between five flavours of Javascript, I'd rather use PHP. I'm developing a QML application and having to work around that abomination that the clinically insane want to call "arrays" in Javascript makes me want to fucking die. There's also a QList type implemented by QML. It doesn't help. Array.isArray(qlist) returns false.
Knockout js bro
jQuery still won't die eh?
As much as I hate php, JavaScript is an equal pile of shit when it comes to languages.
I’m out of the loop what’s up with PHP this time?
A remote code execution exploit in PHP was discovered. Many websites around the world decided to shut down until it got patched.
It’s one of the most severe security incidents of this week.
… so far!
It’s one of the most severe security incidents of this week.
I love this sentence so much!
Damn I can’t believe I missed that.
I saw the eMuhdra one but missed this. Gotta start my rss feed project again and start getting news.
https://en.wikipedia.org/wiki/PHP2Shell
This, I'm guessing. A couple of new high impact vulnerabilities.

top 99 comments