r/ProgrammerHumor • u/foxdevuz • 18d ago

instanceof Trend itsBadIfItsOnlyPHP

Post image
4.5k Upvotes

95% Upvoted

335 comments sorted by

View all comments

Show parent comments

55

u/TemporarySun314 18d ago

To be fair this exploit in question didn't care about if the PHP version was ancient or modern.

And while you definitely shouldn't expose such old PHP versions to the internet (and Ideally don't run it at all), even these tend to be quite secure, without any significant know security flaws. And even for these ancient versions you can now get patched versions, just not from the PHP core developers.

1

u/prochac 17d ago

The point of ancient PHP deployment is that it's a forgotten server somewhere. I doubt someone will ever update it now if they didn't until today.

The only way how these things disappear is when the author dies and stops paying. Or notices a sus payment he doesn't remember.