Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on lemy.lol

137 replies

Well look. Obviously there are security issues. JavaScript has its own share, PHP has an extra large share. The question has always been when the commercial businesses will decide that they need to fund the open source projects they rely on.

1
lemmy.world

"well...it's too late now"

Why is that written on an Office Space screenshot? That doesn't make any sense. It's not even close to anything said in that scene.

Why do people insist on shoving memes into everything? Did they not think their post was good enough on its own?

60
Bonglesreply
lemmy.zip

It's losing it's meaning over time, probably because the movies not being watched by "new" people very much. If you take out the movie context that made the meme he looks like he could be saying the text and I guess that's good enough for people.

9

It's like someone using a word they heard before but don't entirely understand.

2
Funkt4st1creply
lemmy.world

Memes are funny because its a reference to a thing we both know and thus an inside joke elevated by that fact.

Modern ones are either that, or kind of just "heres a funny picture with text thats kind of funny next to this picture"

21
glimsereply
lemmy.world

How does the picture make it funnier here?

I don't think I'll ever understand the affinity for it. It's the Internet equivalent of that annoying kid in middle school who couldn't have a conversation without quoting The Simpsons or South Park lol

10

Have you ever heard of the phrase "a picture says a thousand word"?

Memes became a thing at a time when even emojis weren't even a thing; though smilies were present, it was too cumbersome and not mainstream. At that same time "personalized content" was only a capitalist wet dream. Most people watched the same selected channels thus creating a "mono culture".

Then phones with image sharing, widespread internet, and a bunch of other things became widespread enough that we needed way to quickly express complex emotions without both us and the other partner needing to know obscure name of that emotion/feeling. And that's how memes became so popular.

Nowadays, we no longer have that same mono culture. So only memes we have today, are the ones became viral on the internet.

Sorry for the lecture...

1

The words aren't even the same tone of the original. The image isn't being used to convey an idea, it's just....there.

3

So, you could have programmed happily in php for 30 years, or jump on the new bandwagon every other year? compelling argument.

90

While the language has improved over the years, I've personally never seen a PHP codebase that made me happy.

28
rtxnreply
lemmy.world

Or, if you spin it another way: you could've picked up the skills to develop for and support various frameworks, or get stuck in a rut for 30 years with just a single antiquated server-side language.

43
HerbGrowerreply
slrpnk.net

If its so antiquated why is it still used? For a lot of things its perfectly fine. Even this vulnerability is just a case of run the update command for your package manager.

17
rtxnreply
lemmy.world

It's still used because momentum is a powerful factor. That doesn't make PHP better, but it can make it a more expedient choice.

PHP is a preprocessor that grew too big for its britches. It's a monolithic monster that runs only one thread per request in an interpreter. It works well enough if you need to manage the data of an internet forum, but it becomes increasingly unsuitable as the task's complexity grows. If you need threading or background tasks, or if scalability is important, PHP is not it; just read any number of Nextcloud vs OpenCloud comparisons.

26

"one thread per request" , "interpreter"

(Looks confusingly) That's JS and Python as well

PS: being obtuse on purpose, but PHP lends itself well to typical requirements of web hosting and you can always call out to a diff process if needed

14

Fair, but a lot of sites don't need anything more complex than an internet forum, often less than even that.

10

You realize that the language evolved over the years and it's not even close to the same language it was 15 years ago?

The fact that you also mix frameworks and languages also tells me that you have no idea what you're talking about

6
Enkrodreply
feddit.org

I'm looking forward to living long enough to see this meme age another 30 years with PHP still alive and well.

2

It's thanks to Django and Flask paving the way in 2003 and 2010 respectively.

59
MangoCatsreply
feddit.it

Python was an even bigger mess in 2022 than it was in 2010. The version control hellscape intensifies with the more things there are to have version incompatibilities with.

22
nord.pub

I have lots of experience with node and a little with python.

Python seems great for working with large data sets and I really like jupyter notebooks. The available libraries are really great.

However, the thought of installing a Python CLI app makes me twitchy.

I suspect that node has all the same problems and that I'm used to working around them, but all the Python environment stuff is a nightmare.

Edit: dear python dweebs: I don't care.

7
escreply
piefed.social

Yeah, absolute nightmare of writing pipx install programname.

16
MangoCatsreply
feddit.it

Just stand up a VM to do it in, so you don't corrupt anything else you made in python that you also want to run on the same box, amirite?

4

A venv is still a container to setup, configure, more environment to manange.

My preference is for an app that runs without all that, something I can build, link and distribute as a single executable file which runs when it runs and doesn't leave a pile of (usually highly disorganized) infrastructure to untangle when we're done with it. Yes, of course a venv done well helps with that - except when they're done by the average piker.

0
nilreply

uv is a fantastic tool if you didn't know

11

Python is great for standalone scripts/CLIs with standard system dependencies. For actual apps you want venvs, probably managed by uv these days.

I've written 1000s of python CLIs/scripts over the years, typically wrapping APIs for otherwise shitty enterprise and SaaS software (also many one-off scripts for ETL).

Nowadays, AI writes these scripts in a fraction of the time (and reads the shitty API docs / otherwise figures it out) and my CLI toolkit is better than ever (with $0 ongoing cost). Calling MCPs from CLIs is also interesting, as some vendors never had usable APIs before now.

7
gruereply
lemmy.world

Python environment/packaging sucks, but at least the language itself doesn't.

8

I learned basic programming in BASIC in the 80s. Back then when you needed more speed, you grafted in assembly calls, and the speed difference was dramatic.

Straight Python feels as slow as BASIC - it's got nifty speedy library calls to stuff written in other languages, but if you need something that's not available in a library, now you're writing a library function for Python, in another language, and why not just write the whole thing in that other language and ditch the heavy toolchain?

6
escreply
piefed.social

It's fine actually, all of the problemswith python packaging and env are overblown to insane degree.

7

I used to work at a place that used Jython (which never got updated to Python 3, BTW) and was responsible for trying to keep that shit working even as various libraries started dropping Python 2 support.

I still get a thousand-yard stare when I think about it.

(Still worth it vs. writing actual Java code, though.)

8

Yep, they are.

Just recently there was an article here, where a person claimed that recommended python tooling is inadequate because they needes to read two paragraphs of documentation. Endemic problem really.

5
MangoCatsreply
feddit.it

The available libraries are the ONLY excuse for Python.

When you need tools more sophisticated (and labor intense) than your tool to make your tool functional, it's time to re-examine your choice of toolchain.

4
GeirGrusomreply
lemmy.world

Yeah, Python as a language is a mess IMO. We used it for making a electrical simulator and the language is...bad. The variable scoping, lack of explicit variable declaration, backwards comprehension syntax, the VERY CONFUSING object orientation design, that classes aren't serializable by default, package story and deployment... It really has very little going for it, and combine all that with the awful performance characteristics it's just...no.

Today I'm "Rust if it fits, if not Rust then C#". We re-wrote the simulator in C# and performance was 70x better and the code got shorter, the deployment was hell of a lot easier since we went AOT and it just builds a native binary for the target platform. No virtual environment crap.

2
Aatubereply
lemmy.dbzer0.com

Python is very opinionated. I like it (other than the stupid ternary operator) but I can very much see why others don't. (At the same time I will fight for it. It's like the GNOME of programming languages.)

4

I will fight for it. It’s like the GNOME of programming languages.

For some reason this brings the image of dwarf tossing to mind...

2

Yeah, the fact that so much of the language is conventions as well doesn't help. The type hinting is fairly poor as well, but then again type hinting is basically admitting that dynamic typing is a mistake (which it is).

2
marlowe221reply
lemmy.world

.NET is the single best thing Microsoft makes.

It’s fast, multi platform (all mine runs in Linux containers), and the developer tools are pretty good too.

I really HATE that Microsoft made it, but I love C# and .NET.

5

Last place I worked at that abused used .Net was serving an angular web app to interface with a c++ BE using soap.

Now that sounds sane, until they made their own C++ to CSS transpiler to be able define the ui in back end code. Like angular written in c++ translated through .Net.

Through no fault of .Net I just can't get past those flashbacks.

To be fair that's only like top 5 most fucked up code I saw there.

3
DacoTacoreply
lemmy.world

As backend code, yes. As a web (web, not api. As an api platform they're great) platform... No.
Asp.net and mvc were imo a disaster, silverlight was... Oof.
Then there is maui which could have done it using blazor but just... Didnt.
... And then there is blazor itself. Though blazor is imo the best of all the web platforms they had, and i like it, it still has very rough edges and is not gonna replace javascript any time soon.
Hell, microsoft cant even decently support their own web ui platform ( fluentui ) because their backbone ( webcomponents ) is completely broke ( or did v3 FINALLY release? ). There are other blazor frameworks but they all seem to not take full advantage of blazor and its disgusting.

5
nek0d3rreply
midwest.social

What about modern ASP.NET? It feels pretty good these days honestly. I even really like the newer minimal API features

1
DacoTacoreply
lemmy.world

As i said, the api stuff of asp.net is very nice and straight to the point. The only bad thing ive got to note there is the openapi spec implementation they introduced in .net 10 is just terrible but itll improve quickly, its just early in its implementation ( like how system.text.json was )

2
lemmy.world

Why is Python on the list three times?

42
discuss.tchncs.de

The first two are frameworks, the third is:

def serve(p: int, f):
    s = socket.socket()
    s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) # let me reset plz
    s.bind(("", p))
    s.listen()
    while True:
        c, a = s.accept()
        c.setsockopt(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1)
        t = threading.Thread(target=serve0, args=(c, a, f))
        t.daemon = True
        t.start()

I have an entire file of some really cursed malicious compliance code for when I was brutally forced to write Python.

6

There are a few XHTML pages and templates later in the file hardcoded into single strings. Some stuff is populated from markdown (or was it gemtext? don't feel like opening it again). I used XHTML because it's easier to notice escaping mistakes.

1
lemmy.today

Everyone has forgotten java applets+ java servlets combo. I have no idea why it didn't survive, but if it would have, it'd defeated PHP (in amount of vulnerabilities ofc)

22
zod000reply
lemmy.dbzer0.com

I was told in school that Java applets were the future and they made us take a class that focused heavily on them. I did make a few games in applets, but they were always janky and I am glad they are dead.

9
cub Guccireply
lemmy.today

I had to remove the applet-based server architecture when moving java 11->17.

The authors thought that it would be the right decision to accept code from users as applets

7
cub Guccireply
lemmy.today

Now comes the scariest part. We removed this in early 2024

5
zod000reply
lemmy.dbzer0.com

I work with some companies still running code from the late 90s, so I know this feel. It IS scary and I can only tell them to stop so much.

1
hayvanreply
piefed.world

Applets were killed by Flash, which then became obsolete.

4

Applets were killed before that due to repeated severe security issues and Sun fucking around and not making them good in my recollection. Flash was just easiest applets with no Java and died for much of the same reason a decade later.

6

And if everything had moved to one of those, almost surely there would also be similar impacts in a similar cve to point at to say "we should be using something else!"

11

Brainfuck? You need our Lord and savior, HolyC

24

Just spent my entire morning patching legacy servers running PHP 7.0 applications. Fun times.

17
lemmy.world

Time traveler: Moves a chair

The resulting timeline: PHP is dead for good. However, after some vibe coding caused massive errors in the ADSF framework (that replaced PHP), people are running to vibecode a fix, only to that cause another issue.

11
Victorreply
lemmy.world

Oh my gosh if I could time travel and prevent generative AI from happening I would do it so fast. Although I do want to keep the academic and medical usage domains of AI. 🤔 HMM.

6

The medical usage of AI was shut down, because tech bros think singularity is 6 months away, then the LLM will turn into Robbie Robot from the hit cartoon series The Adventures of Robbie Robot, and starts curing cancer.

1

Need to go back and convince Alan Turing to change his test.

4
toynbeereply
lemmy.world

I bet AI could help you invent a time machine!

1
sh.itjust.works

Also missing: React Node.js Vue.js Spring boot Ajax jQuery Probably like 15 others I'm forgetting

19
rtxnreply
lemmy.world

Fuck me, if my choice is between five flavours of Javascript, I'd rather use PHP. I'm developing a QML application and having to work around that abomination that the clinically insane want to call "arrays" in Javascript makes me want to fucking die. There's also a QList type implemented by QML. It doesn't help. Array.isArray(qlist) returns false.

12
feddit.org

Node is the only JS framework out of these that could 1:1 replace PHP, Vue.js, jQuery and Ajax (aka vanilla JS) are all clientside which PHP doesn't do at all, Bootstrap is a CSS library and Spring is Java. That said, clientside JS is usually an anti-user mess and both you and the user are usually better off not using it at all.

2
whoisearthreply
lemmy.ca

jQuery still won't die eh?

As much as I hate php, JavaScript is an equal pile of shit when it comes to languages.

4

it is just much faster to write... I wish IDEs started automatically expanding $() into document.getElementsByClass and such

4
lemmy.world

When I was a wee high school kid, asp.net was windows only back then and getting cheap windows hosting was harder than it was getting cheap linux hosting, so I focused on PHP more.
I haven't touched it in forever, but its probably still good, right?

14

Asp.net is a bit old hat these days, but Blazor is pretty cool, though personally I don't know many people that use it. .Net is very much good now though.

3
feddit.org

web devs vs plain html
so many websites could be plain html if you cut out the bullshit

28

It's a motherfuckingwebsite. It doesn't need a valid certificate. You aren't sending credit card data. You do not care if the CIA intercepts your data and finds out you are reading motherfuckingwebsite.com. Besides, if you're not running encrypted DNS, everyone knows you are reading motherfuckingwebsite.

1

I can't remember the last time there was a vulnerability like this. There have been, but it's been quite a while.

Feel free to use what you want, like what you want, but man, it just feels like when a woman gains political power and people come out of the WOODWORK to suddenly have problems with women in power. And I mean, people are absolutely bigoted against PHP. Is it worthy of criticism? It surely iw worthy of a lot, sure. Is it worthy of THIS level of disdain? I think not, but again, I'm all for people using what they like and feel is superior.

As for me, I've hosted professionally since 1997. While I've never been a big host, I did at one point have well over a hundred client sites, almost all WordPress. It's been about a decade since I've seen any of them hacked, mostly because I keep all the sites I host up to date - WP, themes, plugins. And a bit of luck in there.

So go on, be hateful as you wish, and I'll keep quietly using a tool that works.

5

Anecdotally yes, web development is the part of IT where I saw more women than elsewhere. It's also paid less, heavily disrespected and more prone to burnout, the closer you are to the front end. I don't know if it's a correlation or causation (existing social hierarchies etc) thing.

2
red_tomatoreply
lemmy.world

A remote code execution exploit in PHP was discovered. Many websites around the world decided to shut down until it got patched.

It’s one of the most severe security incidents of this week.

31
Humaniusreply
lemmy.world

The prophecy predicts there will be exactly four major cyber incidents this week.

6
lemmy.world

Damn I can’t believe I missed that.

I saw the eMuhdra one but missed this. Gotta start my rss feed project again and start getting news.

5

It’s one of the most severe security incidents of this week.

I love this sentence so much!

7
lemmy.zip

Learn asp.net? Bro, are you still running edge in IE mode in the 20's?

Ruby on rails? That was a recommendation in like 06. /sardonic

I am not defending php, but it can serve a purpose. Surprised they didn't mention perl.

Also surpised they are comparing PHP to JS. That's comparing cattle farming to cooking a burger.

4
lemmy.zip

asp.net is listed in the meme as 2002, and Ruby on Rails as 2004

As for PHP vs JS, depending on your needs they can serve largely similar purposes. Both dynamically construct the page, one just does it server side while the other does it client side and can keep running and responding to what the user is doing without page reloads.

1

In regards to php and js, unless you are talking about node.js, they are in opposition.

In regards to asp.net, everyone other than windows corporate fanboys dogged the shit out of it. I got hired to a firm who asked for example code, and I submitted a php CRUD that I wrote in just a few hours.

Go through all the paperwork and basic onboarding: and it is asp.net. Fixed a couple of obvious bugs the first couple of days but quit.

Ruby on Rails got a lot of hype from my friend back in the day, but he wasn't much of a programmer but kept pushing me to learn it. Just wasn't my jam.

I find that perl, php, python, and js are my most used approaches for web dev. Everything else I write in assembly. /joking, just had one class on it, and to those who can develop in pure assembly, I will bend my fucking knee. "Forgive me, m'Lord, for I am but a simple man. Please afford me forgiveness for needing just a little bit of abstraction. I know I don't deserve it.

1
fedia.io

Surprised they didn't mention perl.

That's because Perl pre-dates PHP and was one of the languages that inspired it. You'd have to rewrite the whole meme.

7

I have good news, all frontend php has been replaced with angular by now.

1

Now that ASP.net is multi-platform, it should really be rotated through that list a second time, preferably around 2024.

Seriously, it makes Java look like nothing has happened with it since 2008.

0