<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Going heavily off-topic here, however
I'd like to chime in.<br>
<br>
I agree that PHP has its many pitfalls, hell I use it every day
and experience them. However, like any tool, it can be used
properly and have a high measure of success. It supports modern
OOP syntax/structure, and is quick to develop on when working with
web applications. <br>
<br>
It does definitely have it's limitations. Once a project is big
enough I would prefer to work in something a bit more robust such
as a .net application (however I hate windows servers), or even
Java web apps (JSP for UI + compiled EJB's for business logic) or
even perhaps something like HipHop or a solid C++ based business
logic interface and only use simple language like PHP for
frontend. Setting these up tend to slow development a bit further
and cost a bit more in time managing glassfish/JBoss/Tomcat over
Apache in my previous experience, hence PHP being the easier
choice at the beginning.<br>
<br>
As for pre-made CMS' and the like, I find most of which cause you
headaches are poorly formed or written plugins built by someone
who barely hacked it together to get functionality.<br>
<br>
/2c<br>
<br>
<br>
On 12/05/13 15:51, Heinz N wrote:<br>
</div>
<blockquote
cite="mid:alpine.LNX.2.00.1305121533080.7487@servex.equisoft.com.au"
type="cite">That is a very good question. Sorry, I wish there was
a practical solution. There will HAVE to be a solution at some
stage as DCs cannot continue to wear the ludicrous CPU demands of
PHP forever, and the network traffic of all those BOTs will clog
everything up.
<br>
<br>
To mitigate the completely ridiculous CPU needed, I have been
searching for a PHP compiler, but have had no such luck as yet.
PHP is NOT a serious programming or even scripting language as the
syntax changes from version to version! It is some stupid toy that
was free way-back-when and everyone now supports it.
<br>
<br>
For larger database clients I have developed a general purpose C++
based middleware engine that understands WWW, SQL, security, low
network bandwidth and how to marry all of that together and is
also very fast. However, as there is no provisioning tool (it is
currently done manually), it is a pain to set up. So, I suppose I
have done the "design it yourself" thing as there hasn't been
anything decent around for the last 13 years with security
designed right into the base of it right from the start.
<br>
<br>
Regards,
<br>
Heinz N
<br>
<br>
On Sun, 12 May 2013, James Hodgkinson wrote:
<br>
<br>
<blockquote type="cite">On this topic, is there a good non-PHP
alternative that I can hand to people
<br>
that Just Works? Every time I've asked this question I've been
told
<br>
Jekyll/build-your-own-in-django etc, which is not a solution.
<br>
James
<br>
<br>
<br>
On 12 May 2013 13:29, Heinz N <a class="moz-txt-link-rfc2396E" href="mailto:ausnog@equisoft.com.au"><ausnog@equisoft.com.au></a>
wrote:
<br>
+1
<br>
<br>
I have LOTS of attempts on the Mambo, Joomla &
Wordpress sites
<br>
that I host. They spray the Administrator pages with login
<br>
attempts. It is damn annoying as it fills the logs up too!
<br>
Please, please everyone set a directory password on all
<br>
administrator directories (as well a secure admin login
<br>
password).
<br>
See :
<br>
<a class="moz-txt-link-freetext" href="http://www.thesitewizard.com/apache/password-protect-directory.shtml">http://www.thesitewizard.com/apache/password-protect-directory.shtml</a>
<br>
to set a directory password. It is easy to do! I HATE PHP
with a
<br>
vengence!!! It is 10X slower than a compiled application:
it is
<br>
easy to see if they are trying to exploit you, just look
at the
<br>
massive spike in CPU on the servers!. It seems that I am
reading
<br>
about a new PHP exploit every few weeks. It is so easy to
<br>
mis-configure the stupid thing as well. </rant>
<br>
<br>
Regards,
<br>
Heinz N
<br>
<br>
<br>
On Sun, 12 May 2013, Zone Networks - Joel wrote:
<br>
<br>
Its all those damn Joomla/Wordpress websites that
<br>
have been compromised and
<br>
I don't see it stopping either, since they are
<br>
millions of these websites
<br>
that wont get patched/upgraded until its exploited.
<br>
<br>
-----Original Message-----
<br>
From: <a class="moz-txt-link-abbreviated" href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a>
<br>
[<a class="moz-txt-link-freetext" href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] On Behalf
<br>
Of Dobbins, Roland
<br>
Sent: Sunday, 12 May 2013 12:58 PM
<br>
To: <a class="moz-txt-link-abbreviated" href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>
<br>
Subject: Re: [AusNOG] DDOS mitigation
<br>
<br>
<br>
On May 12, 2013, at 7:15 AM, Joshua D'Alton wrote:
<br>
<br>
and this is why it falls back on the
<br>
originating networks to fix their
<br>
<br>
problems ie udp spoof so that they arent sending so
<br>
much traffic in the
<br>
first place.
<br>
<br>
FYI, the ongoing attack campaign against US
<br>
financial institutions regularly
<br>
hits ~35gb/sec - ~70gb/sec, non-spoofed.
<br>
<br>
-----------------------------------------------------------------------
<br>
Roland Dobbins <a class="moz-txt-link-rfc2396E" href="mailto:rdobbins@arbor.net"><rdobbins@arbor.net></a> //
<br>
<a class="moz-txt-link-rfc2396E" href="http://www.arbornetworks.com"><http://www.arbornetworks.com></a>
<br>
<br>
Luck is the residue of opportunity and
<br>
design.
<br>
<br>
-- John Milton
<br>
<br>
_______________________________________________
<br>
AusNOG mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
<br>
<br>
<br>
_______________________________________________
<br>
AusNOG mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
<br>
<br>
_______________________________________________
<br>
AusNOG mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
<br>
<br>
<br>
<br>
<br>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
</body>
</html>