So glad to see that Python finally made it big in 2022

It's thanks to Django and Flask paving the way in 2003 and 2010 respectively.

Python was an even bigger mess in 2022 than it was in 2010. The version control hellscape intensifies with the more things there are to have version incompatibilities with.

Also missing:
React
Node.js
Vue.js
Spring boot
Ajax
jQuery
Probably like 15 others I'm forgetting

Knockout js bro

BackboneJS, MarionetteJS

Fuck me, if my choice is between five flavours of Javascript, I'd rather use PHP. I'm developing a QML application and having to work around that abomination that the clinically insane want to call "arrays" in Javascript makes me want to fucking die. There's also a QList type implemented by QML. It doesn't help. Array.isArray(qlist) returns false.

PHP is dead, learn Brainfuck

Brainfuck? You need our Lord and savior, HolyC

I’m out of the loop what’s up with PHP this time?

https://en.wikipedia.org/wiki/PHP2Shell

This, I'm guessing. A couple of new high impact vulnerabilities.

I have lots of experience with node and a little with python.

Python seems great for working with large data sets and I really like jupyter notebooks. The available libraries are really great.

However, the thought of installing a Python CLI app makes me twitchy.

I suspect that node has all the same problems and that I'm used to working around them, but all the Python environment stuff is a nightmare.

Edit: dear python dweebs: I don't care.

Yeah, absolute nightmare of writing pipx install programname.

Why is Python on the list three times?

Python environment/packaging sucks, but at least the language itself doesn't.

web devs vs just using a compiled language plus vanilla JS

Seriously, I came to post this exact comment. Damn.

iykyk

JavaScript has similar.

It's fine actually, all of the problemswith python packaging and env are overblown to insane degree.

A remote code execution exploit in PHP was discovered. Many websites around the world decided to shut down until it got patched.

It’s one of the most severe security incidents of this week.

AngularJS doesn't even make sense here.

… so far!

Because Python is supreme.

yeah everyone elses experience is invalid.

The prophecy predicts there will be exactly four major cyber incidents this week.

web devs vs plain html
so many websites could be plain html if you cut out the bullshit

Node is the only JS framework out of these that could 1:1 replace PHP, Vue.js, jQuery and Ajax (aka vanilla JS) are all clientside which PHP doesn't do at all, Bootstrap is a CSS library and Spring is Java. That said, clientside JS is usually an anti-user mess and both you and the user are usually better off not using it at all.

So, you could have programmed happily in php for 30 years, or jump on the new bandwagon every other year? compelling argument.

https://justfuckingusehtml.com/

Oh man, I almost forgot these exist! https://motherfuckingwebsite.com/

Or, if you spin it another way: you could've picked up the skills to develop for and support various frameworks, or get stuck in a rut for 30 years with just a single antiquated server-side language.

Python is great for standalone scripts/CLIs with standard system dependencies. For actual apps you want venvs, probably managed by uv these days.

I've written 1000s of python CLIs/scripts over the years, typically wrapping APIs for otherwise shitty enterprise and SaaS software (also many one-off scripts for ETL).

Nowadays, AI writes these scripts in a fraction of the time (and reads the shitty API docs / otherwise figures it out) and my CLI toolkit is better than ever (with $0 ongoing cost). Calling MCPs from CLIs is also interesting, as some vendors never had usable APIs before now.

When I was a wee high school kid, asp.net was windows only back then and getting cheap windows hosting was harder than it was getting cheap linux hosting, so I focused on PHP more.
I haven't touched it in forever, but its probably still good, right?

Just spent my entire morning patching legacy servers running PHP 7.0 applications. Fun times.

Burrito supreme or a chicken supreme?

Yep, they are.

Just recently there was an article here, where a person claimed that recommended python tooling is inadequate because they needes to read two paragraphs of documentation. Endemic problem really.

Love supreme ❤️

It's good

I used to work at a place that used Jython (which never got updated to Python 3, BTW) and was responsible for trying to keep that shit working even as various libraries started dropping Python 2 support.

I still get a thousand-yard stare when I think about it.

(Still worth it vs. writing actual Java code, though.)

Would be funny to use HolyC instead

Everyone has forgotten java applets+ java servlets combo. I have no idea why it didn't survive, but if it would have, it'd defeated PHP (in amount of vulnerabilities ofc)

uv is a fantastic tool if you didn't know

If its so antiquated why is it still used? For a lot of things its perfectly fine. Even this vulnerability is just a case of run the update command for your package manager.

both giving a warning in Firefox is kinda ironic :D

It's still used because momentum is a powerful factor. That doesn't make PHP better, but it can make it a more expedient choice.

PHP is a preprocessor that grew too big for its britches. It's a monolithic monster that runs only one thread per request in an interpreter. It works well enough if you need to manage the data of an internet forum, but it becomes increasingly unsuitable as the task's complexity grows. If you need threading or background tasks, or if scalability is important, PHP is not it; just read any number of Nextcloud vs OpenCloud comparisons.

I can't remember the last time there was a vulnerability like this. There have been, but it's been quite a while.

Feel free to use what you want, like what you want, but man, it just feels like when a woman gains political power and people come out of the WOODWORK to suddenly have problems with women in power. And I mean, people are absolutely bigoted against PHP. Is it worthy of criticism? It surely iw worthy of a lot, sure. Is it worthy of THIS level of disdain? I think not, but again, I'm all for people using what they like and feel is superior.

As for me, I've hosted professionally since 1997. While I've never been a big host, I did at one point have well over a hundred client sites, almost all WordPress. It's been about a decade since I've seen any of them hacked, mostly because I keep all the sites I host up to date - WP, themes, plugins. And a bit of luck in there.

So go on, be hateful as you wish, and I'll keep quietly using a tool that works.

PHP is a woman? 😳

The first two are frameworks, the third is:

def serve(p: int, f):
    s = socket.socket()
    s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) # let me reset plz
    s.bind(("", p))
    s.listen()
    while True:
        c, a = s.accept()
        c.setsockopt(socket.IPPROTO_TCP, socket.TCP_NODELAY, 1)
        t = threading.Thread(target=serve0, args=(c, a, f))
        t.daemon = True
        t.start()

I have an entire file of some really cursed malicious compliance code for when I was brutally forced to write Python.

It’s one of the most severe security incidents of this week.

I love this sentence so much!