Linked by Howard Fosdick on Sat 24th Nov 2012 17:52 UTC
Thread beginning with comment 543308
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[4]: Slashdot Circa 1999
by ze_jerkface on Wed 28th Nov 2012 18:22
in reply to "RE[3]: Slashdot Circa 1999"
And why are you using an old version of PHP. PHP developers maintain 2 branches (5.4, 5.3) of their software. For each one they do a point release every month or 2 to fix issues (being security most of the time). So having an old (and probably vulnerable) version exposed to the outside world is not very wise.
Backwards compatibility and security are not mutually exclusive. With .NET hotfixes simply fix the code without requiring anyone to move to a newer version.
FYI I don't maintain older versions of PHP. But I have had to fix plenty of PHP code that was built against an older version. Sadly there are tons of web framework plug-ins and themes that were built without any regard for maintainability which makes the problem even worse.




Member since:
2006-07-14
And why are you using an old version of PHP. PHP developers maintain 2 branches (5.4, 5.3) of their software. For each one they do a point release every month or 2 to fix issues (being security most of the time). So having an old (and probably vulnerable) version exposed to the outside world is not very wise.
What you need to do if you use a Linux distribution that is release based, raise the voice and ask them to provide point releases instead of "backporting" bug fixes which usually came late, if they came after all.
Edited 2012-11-27 15:30 UTC