From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham autolearn_force=no version=3.4.4 X-Google-Thread: 103376,4b4b317e40c35901 X-Google-Attributes: gid103376,public X-Google-Language: ENGLISH,ASCII-7-bit From: Brian May Newsgroups: comp.lang.ada Subject: Re: Wiki written in Ada? References: <1157914506.873537.289680@d34g2000cwd.googlegroups.com> <1157938285.427306.42330@p79g2000cwp.googlegroups.com> Date: Sat, 16 Sep 2006 09:17:27 +1000 Message-ID: User-Agent: Gnus/5.110006 (No Gnus v0.6) XEmacs/21.4.19 (linux) Cancel-Lock: sha1:H1vQbZTwauEjdp1EXxBrSSOqnRo= MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii NNTP-Posting-Host: snoopy.microcomaustralia.com.au X-Trace: quokka.wn.com.au 1158362250 202.173.153.89 (16 Sep 2006 07:17:30 +0800) X-Complaints-To: abuse@westnet.com.au Path: g2news2.google.com!news2.google.com!news4.google.com!news.glorb.com!quokka.wn.com.au!not-for-mail Xref: g2news2.google.com comp.lang.ada:6600 Date: 2006-09-16T09:17:27+10:00 List-Id: >>>>> "Marius" == Marius Amado-Alves writes: >> - but it isn't beyond my comprehension! PHP is quick to write, >> fairly easy to understand and has intuitive interfaces to the >> front and back ends. Marius> - now this is exactly the opposed of my view. PHP is perceived as being quicker to write. Maybe for small and very simple projects this might be true. However, as the code size goes up, productivity goes down, and risk of security problems goes up. After you factor in time wasted due to debugging security breaches on a web server and not getting anywhere... What virtual host did the attacker break into? How did an attacker run wget on this system? How did the attacker execute the IRC server after downloading it? Did the attacker do any other damage? When I was writing PHP code regularly, I was amazed when I couldn't find a version of a system call that will take a list of parameters as an array instead of running the shell and having the shell split the parameters. Arggh! Even Perl supports this. (disclaimer: this was PHP 4.0, to the best of my knowledge, PHP 5.0 was the same). I think it would be an interesting experiment to rewrite something like Mediawiki in Ada + AWS. -- Brian May