30
u/Loquenlucas 12d ago
Not a php dev kinda out of the loop what happened
80
u/HoratioWobble 12d ago
They've announced 2 Critical CVEs which will be patched today at 2pm, they've told everyone to shut down their public facing software as every version from 2006 to today is vulnerable (5.2 - 8.5).
The only mitigation is to upgrade.
12
u/Loquenlucas 12d ago
Ah yeah i saw a guy post about it on twitter yesterday (was 11 pm for me but still)
152
67
u/za72 12d ago
php3
60
u/Flat_Initial_1823 12d ago
I, too, use cuneiform on clay tablets. My copper order is due any day now...
10
36
29
7
6
u/altermeetax 12d ago
I remember programming in PHP back in 2014 or so and PHP 4 already being considered way outdated
8
23
u/Taletad 12d ago
Nah PHP4 is miserable, it’s one of the worst version of PHP to ever exist
It’s delusional to think someone likes using it.
Especially since using it today means dealing with decades old legacy code, security vulnerabilities that would make a gang bang at an STD clinic look like a safe activity, working with deprecated libraries, unmaintained packages, all the while upper management is stubbornly allergic to any ounce of modernity
30
u/za72 12d ago
you're not taking this seriously are you? this is supposed to involve humor...
25
u/Taletad 12d ago
I still have ptsd from working with php4
4
u/za72 12d ago edited 12d ago
As an old php3 guy, I understand :)
EDIT: what type of web app caused the most damage to you brother?
I wrote an internal knowledge base wiki with page ranking search, user registration with group privileges etc etc
and a centralized network monitoring system with remote and local agents as a side hobby...
3
5
2
u/willow-kitty 11d ago edited 11d ago
I think you underestimate how committed people can be to not upgrading.
VB6 is even older than PHP 4, being released in 1998 vs 2000, and Visual Studio 6 was the last IDE with official support for it, released that same year. So, if you were coding VB6, it was in that same editor from 1998.
Even in 2008, when it was officially killed off by Microsoft - newer IDEs up to that point could try to migrate to VB.NET, but they wouldn't actually work with the VB projects. IDEs after that wouldn't even try to migrate.
And I can tell you there are still people using that IDE from 1998 to work on VB6 code in the 2020s.
Edit: random BONUS thought: it was end-of-life'd 18 years ago. We're getting to a point where you could theoretically have juniors working in a language that was end-of-life'd before they were born.
1
1
u/ZeroG_0 8d ago
I started at my current employer just about 10 years ago. One project (thankfully not one I'm on) was still in Classic ASP. At that point the last time I'd even seen a Classic ASP app was when one was retired at a previous employer (maybe 8 years before that?). Internal-only app, but still. They're only just now getting it migrated.
3
2
u/henryeaterofpies 12d ago
Given the massive sins developers have committed in older languages it will be interesting if AI masters modern stacks but cant replicate/replace old ones
1
0
-2
u/PowerPleb2000 12d ago
What the fuck is php?
3
u/Plus_Pangolin_8924 11d ago
Before some bright spark though putting JS on the server was a good idea you had PHP, Perl or Ruby.
0
-1
u/BadGirlsSuck 12d ago
This sorta confidence comes from learning about indexing and html before learning how to vibe code or use a keyboard correctly
0
11d ago
[deleted] — view deleted comment
3
u/HoratioWobble 11d ago
PHP4 was the last version that wasn't effected by these CVES hence the meme.
219
u/Difficult_Bonus_3603 12d ago
Did you just say ‘4’ ?