Re: [gentoo-server] PHP4

On Tue, 2008-01-22 at 11:18 -0800, RijilV wrote:
> Not to overlook the fact that PHP is dropping support for PHP4 in
> August. Switching distributions to get another half year of support
> seems to me like getting a tattoo to fit in with the kids at
> highschool. Everyone who wants to run updated software is going to
> have to make this move at some point in time.

Excellent point! (and a nice analogy). The other cost that has to be factored into any decision is the cost of dealing with the consequences of a system compromise resulting from a security hole. Yves, are your management folks aware that a security compromise on your PHP4 box will affect _all_ your customers with websites on it, not just those who's code may have been responsible for the compromise, and that cleaning up such a mess will probably take a lot more time and expense than the cost of script migration?

Been there, done that, bought the T-shirt, and it was a Royal PITA!

Not to mention the fact that once you've been compromised, you'll _have_ to migrate your customers to v5 ASAP, possibly without the luxury of being able to do them one by one.

-- 
Lindsay Haisley       | "In an open world,    |     PGP public key
FMP Computer Services |    who needs Windows  |      available at
512-259-1190          |      or Gates"        | 
http://pubkeys.fmp.comhttp://www.fmp.com    |                       |


-- 
gentoo-server@lists.gentoo.org mailing list