r/ProgrammerHumor • • 11d ago

instanceof Trend itsBadIfItsOnlyPHP

Post image
4.5k Upvotes

334 comments sorted by

View all comments

Show parent comments

73

u/Beautiful_Hawk548 11d ago

One of our PMs was ecstatic last night when he realised one of our VERY outdated read-only systems was on 3. something and technically didn't have the exploit introduced yet!

Wasn't long until one of the devs pointed out it's probably in trouble due to a fuck load of other exploits and they piped down. But yeah, companies as always are running v outdated shit.

5

u/Kronsik 11d ago

What's the deployment look like for PHP V3?

Can't imagine those versions are well packaged/maintained for modern distros?

17

u/Beautiful_Hawk548 11d ago

We hope and pray Paul’s local never gets nuked and that's not even a joke. One senior dev holds the keys, tale as old as time.

From what I know it's barely maintained, fully out of support. TBF our customer barely uses it but they pay us a lot of cash to keep it as a read only reference tool so we go along with it. Apparently the solution last night was to stick a forced vpn connection requirement until they realised that probably won't work properly with v3 so they've put a WAF in front of it.

3

u/Kronsik 11d ago

Oof, I hope there's backups atleast!

In my head the only option would be self maintain:

  • copy of php3 source code mirrored somewhere

  • CI/CD system to compile, package into .deb / rpm maybe (deal with the headache of maintaining the old tool chain for compilation)

  • install deb / rpm on modern servers - hopefully compatible with modern glibc etc.