Re: [gentoo-server] PHP4

[Lindsay Haisley <fmouse-gentoo@fmp.com>]

On Tue, 2008-01-22 at 11:18 -0800, RijilV wrote:
> Not to overlook the fact that PHP is dropping support for PHP4 in
> August.  Switching distributions to get another half year of support
> seems to me like getting a tattoo to fit in with the kids at
> highschool.  Everyone who wants to run updated software is going to
> have to make this move at some point in time. 

Excellent point! (and a nice analogy).  The other cost that has to be
factored into any decision is the cost of dealing with the consequences
of a system compromise resulting from a security hole.  Yves, are your
management folks aware that a security compromise on your PHP4 box will
affect _all_ your customers with websites on it, not just those who's
code may have been responsible for the compromise, and that cleaning up
such a mess will probably take a lot more time and expense than the cost
of script migration?

Been there, done that, bought the T-shirt, and it was a Royal PITA!

Not to mention the fact that once you've been compromised, you'll _have_
to migrate your customers to v5 ASAP, possibly without the luxury of
being able to do them one by one.

-- 
Lindsay Haisley       | "In an open world,    |     PGP public key
FMP Computer Services |    who needs Windows  |      available at
512-259-1190          |      or Gates"        | http://pubkeys.fmp.com
http://www.fmp.com    |                       |


-- 
gentoo-server@lists.gentoo.org mailing list